starting build "b7ea87f3-6bbf-4052-a4ce-e86db79328ad" FETCHSOURCE BUILD Starting Step #0 Step #0: Already have image (with digest): gcr.io/cloud-builders/git Step #0: Cloning into 'oss-fuzz'... Finished Step #0 Starting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95" Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Already have image (with digest): gcr.io/cloud-builders/docker Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Sending build context to Docker daemon 5.12kB Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Step 1/5 : FROM gcr.io/oss-fuzz-base/base-builder-rust Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": latest: Pulling from oss-fuzz-base/base-builder-rust Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b549f31133a9: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6e628c8ef21f: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f53ab3868c1c: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": a55801351b59: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 3bb5606c96f9: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 04679461c0a4: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6202956b2fc8: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6de59df1d969: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": e94fca21036a: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f06e7a843c98: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2e63cbce29d6: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 8fce8f94211f: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c26bd18729a4: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 1425e2da3d0f: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 24218bda6367: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b31a426d2518: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 84cf1ab1e9f9: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2c2b7d72eac9: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 710430df408b: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 26ec0ac61159: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 557ca0d2b5c7: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 986c94e54976: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": cbac95d8da00: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5a7a3f93fe73: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 7a93d1a7fb44: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": dac0759625b9: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": d1cb5c7641a2: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6202956b2fc8: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 02eb0541e91a: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 52ae1ac2675c: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5129b6a32636: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6de59df1d969: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f712ebbbd8d9: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 0df20a1baa3e: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6dd08d591949: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c9de98ed230e: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c4d8394d753c: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": e94fca21036a: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5da0bdfffdca: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 08d89138e853: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b9b3a87688da: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 72ea7412c90a: Pulling fs layer Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2e63cbce29d6: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 8fce8f94211f: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c26bd18729a4: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 1425e2da3d0f: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 24218bda6367: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b31a426d2518: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 84cf1ab1e9f9: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2c2b7d72eac9: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 710430df408b: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 26ec0ac61159: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 557ca0d2b5c7: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 7a93d1a7fb44: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 986c94e54976: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": cbac95d8da00: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": dac0759625b9: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5a7a3f93fe73: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": d1cb5c7641a2: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 02eb0541e91a: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 52ae1ac2675c: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f06e7a843c98: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5da0bdfffdca: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f712ebbbd8d9: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 72ea7412c90a: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 08d89138e853: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b9b3a87688da: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c4d8394d753c: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 0df20a1baa3e: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6dd08d591949: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c9de98ed230e: Waiting Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f53ab3868c1c: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f53ab3868c1c: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 3bb5606c96f9: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 3bb5606c96f9: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6de59df1d969: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6de59df1d969: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6202956b2fc8: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b549f31133a9: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b549f31133a9: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": a55801351b59: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": a55801351b59: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2e63cbce29d6: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2e63cbce29d6: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 8fce8f94211f: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 8fce8f94211f: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c26bd18729a4: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c26bd18729a4: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 1425e2da3d0f: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 1425e2da3d0f: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6e628c8ef21f: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6e628c8ef21f: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f06e7a843c98: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f06e7a843c98: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 24218bda6367: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 24218bda6367: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b31a426d2518: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 710430df408b: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2c2b7d72eac9: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2c2b7d72eac9: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 84cf1ab1e9f9: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 84cf1ab1e9f9: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 26ec0ac61159: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 26ec0ac61159: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 986c94e54976: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 986c94e54976: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 557ca0d2b5c7: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 557ca0d2b5c7: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": cbac95d8da00: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": cbac95d8da00: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b549f31133a9: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5a7a3f93fe73: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 7a93d1a7fb44: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 7a93d1a7fb44: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": dac0759625b9: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": dac0759625b9: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": d1cb5c7641a2: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": d1cb5c7641a2: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 02eb0541e91a: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 02eb0541e91a: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 52ae1ac2675c: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 52ae1ac2675c: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f712ebbbd8d9: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f712ebbbd8d9: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5129b6a32636: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5129b6a32636: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 0df20a1baa3e: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 0df20a1baa3e: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": e94fca21036a: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": e94fca21036a: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6dd08d591949: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6dd08d591949: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c9de98ed230e: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c4d8394d753c: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5da0bdfffdca: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 08d89138e853: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 08d89138e853: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b9b3a87688da: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b9b3a87688da: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 04679461c0a4: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 04679461c0a4: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6e628c8ef21f: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f53ab3868c1c: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 72ea7412c90a: Verifying Checksum Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 72ea7412c90a: Download complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": a55801351b59: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 3bb5606c96f9: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 04679461c0a4: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6202956b2fc8: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6de59df1d969: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": e94fca21036a: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f06e7a843c98: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2e63cbce29d6: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 8fce8f94211f: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c26bd18729a4: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 1425e2da3d0f: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 24218bda6367: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b31a426d2518: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 84cf1ab1e9f9: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 2c2b7d72eac9: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 710430df408b: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 26ec0ac61159: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 557ca0d2b5c7: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 986c94e54976: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": cbac95d8da00: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5a7a3f93fe73: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 7a93d1a7fb44: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": dac0759625b9: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": d1cb5c7641a2: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 02eb0541e91a: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 52ae1ac2675c: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5129b6a32636: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": f712ebbbd8d9: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 0df20a1baa3e: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 6dd08d591949: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c9de98ed230e: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": c4d8394d753c: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 5da0bdfffdca: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 08d89138e853: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": b9b3a87688da: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": 72ea7412c90a: Pull complete Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Digest: sha256:433319ea1a6bbea6c1db1915a5d385021908cc62026d9f0efda2270ef6060de3 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-builder-rust:latest Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> 6a3c6c2f7901 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Step 2/5 : RUN rustup toolchain install nightly Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> Running in e69ceabf2287 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": info: syncing channel updates for nightly-x86_64-unknown-linux-gnu Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": info: latest update on 2026-09-05 for version 1.100.0-nightly (0ed41eb41 2026-09-04) Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": info: downloading 3 components Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95":  Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": nightly-x86_64-unknown-linux-gnu installed - rustc 1.100.0-nightly (0ed41eb41 2026-09-04) Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": info: checking for self-update (current version: 1.29.0) Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": info: downloading self-update (new version: 1.29.1) Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Removing intermediate container e69ceabf2287 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> dfb6204b7e43 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Step 3/5 : RUN git clone --depth 1 https://github.com/typst/typst.git typst Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> Running in 90d8e4a15af7 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Cloning into 'typst'... Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Removing intermediate container 90d8e4a15af7 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> 937ac46d29d5 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Step 4/5 : WORKDIR typst Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> Running in 84a16313618a Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Removing intermediate container 84a16313618a Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> 17e5b4516e70 Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Step 5/5 : COPY build.sh $SRC/ Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": ---> 5a0021402fea Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Successfully built 5a0021402fea Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Successfully tagged gcr.io/oss-fuzz/typst:latest Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95": Successfully tagged us-central1-docker.pkg.dev/oss-fuzz/unsafe/typst:latest Finished Step #1 - "build-65aa249b-e057-4872-88e6-26d1cac04b95" Starting Step #2 - "srcmap" Step #2 - "srcmap": Already have image: gcr.io/oss-fuzz/typst Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + SRCMAP=/tmp/fileWZkFYP Step #2 - "srcmap": + echo '{}' Step #2 - "srcmap": + PATHS_TO_SCAN=/src Step #2 - "srcmap": + [[ rust == \g\o ]] Step #2 - "srcmap": ++ find /src -name .git -type d Step #2 - "srcmap": + for DOT_GIT_DIR in $(find $PATHS_TO_SCAN -name ".git" -type d) Step #2 - "srcmap": ++ dirname /src/typst/.git Step #2 - "srcmap": + GIT_DIR=/src/typst Step #2 - "srcmap": + cd /src/typst Step #2 - "srcmap": ++ git config --get remote.origin.url Step #2 - "srcmap": + GIT_URL=https://github.com/typst/typst.git Step #2 - "srcmap": ++ git rev-parse HEAD Step #2 - "srcmap": + GIT_REV=47f1d1f93a43a85147f87e7df301284cb2dff192 Step #2 - "srcmap": + jq_inplace /tmp/fileWZkFYP '."/src/typst" = { type: "git", url: "https://github.com/typst/typst.git", rev: "47f1d1f93a43a85147f87e7df301284cb2dff192" }' Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + F=/tmp/file9u3L78 Step #2 - "srcmap": + cat /tmp/fileWZkFYP Step #2 - "srcmap": + jq '."/src/typst" = { type: "git", url: "https://github.com/typst/typst.git", rev: "47f1d1f93a43a85147f87e7df301284cb2dff192" }' Step #2 - "srcmap": + mv /tmp/file9u3L78 /tmp/fileWZkFYP Step #2 - "srcmap": ++ find /src -name .svn -type d Step #2 - "srcmap": ++ find /src -name .hg -type d Step #2 - "srcmap": + '[' '' '!=' '' ']' Step #2 - "srcmap": + cat /tmp/fileWZkFYP Step #2 - "srcmap": + rm /tmp/fileWZkFYP Step #2 - "srcmap": { Step #2 - "srcmap": "/src/typst": { Step #2 - "srcmap": "type": "git", Step #2 - "srcmap": "url": "https://github.com/typst/typst.git", Step #2 - "srcmap": "rev": "47f1d1f93a43a85147f87e7df301284cb2dff192" Step #2 - "srcmap": } Step #2 - "srcmap": } Finished Step #2 - "srcmap" Starting Step #3 - "compile-libfuzzer-coverage-x86_64" Step #3 - "compile-libfuzzer-coverage-x86_64": Already have image (with digest): gcr.io/cloud-builders/docker Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": vm.mmap_rnd_bits = 28 Step #3 - "compile-libfuzzer-coverage-x86_64": Compiling libFuzzer to /usr/lib/libFuzzingEngine.a... done. Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": CC=clang Step #3 - "compile-libfuzzer-coverage-x86_64": CXX=clang++ Step #3 - "compile-libfuzzer-coverage-x86_64": CFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument Step #3 - "compile-libfuzzer-coverage-x86_64": CXXFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument -stdlib=libc++ Step #3 - "compile-libfuzzer-coverage-x86_64": RUSTFLAGS=--cfg fuzzing -Cdebuginfo=1 -Cforce-frame-pointers -Cinstrument-coverage -C link-arg=-lc++ Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": + cd tests/fuzz Step #3 - "compile-libfuzzer-coverage-x86_64": + cargo +nightly fuzz build -O --debug-assertions Step #3 - "compile-libfuzzer-coverage-x86_64": warning: unused workspace dependency `ctrlc` Step #3 - "compile-libfuzzer-coverage-x86_64": --> Cargo.toml:54:1 Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": 54 | ctrlc = "3.4.1" Step #3 - "compile-libfuzzer-coverage-x86_64": | ^^^^^ Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": = note: `cargo::unused_workspace_dependencies` is set to `warn` by default Step #3 - "compile-libfuzzer-coverage-x86_64": help: consider removing the workspace dependency `ctrlc` Step #3 - "compile-libfuzzer-coverage-x86_64": warning: unused workspace dependency `typst-cli` Step #3 - "compile-libfuzzer-coverage-x86_64": --> Cargo.toml:21:1 Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": 21 | typst-cli = { path = "crates/typst-cli", version = "0.15.1" } Step #3 - "compile-libfuzzer-coverage-x86_64": | ^^^^^^^^^ Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": help: consider removing the workspace dependency `typst-cli` Step #3 - "compile-libfuzzer-coverage-x86_64": warning: unused workspace dependency `typst-ide` Step #3 - "compile-libfuzzer-coverage-x86_64": --> Cargo.toml:24:1 Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": 24 | typst-ide = { path = "crates/typst-ide", version = "0.15.1" } Step #3 - "compile-libfuzzer-coverage-x86_64": | ^^^^^^^^^ Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": help: consider removing the workspace dependency `typst-ide` Step #3 - "compile-libfuzzer-coverage-x86_64": warning: workspace (manifest) generated 3 warnings Step #3 - "compile-libfuzzer-coverage-x86_64": warning: missing `[lints]` to inherit `[workspace.lints]` Step #3 - "compile-libfuzzer-coverage-x86_64": --> crates/typst/Cargo.toml Step #3 - "compile-libfuzzer-coverage-x86_64": = note: `cargo::missing_lints_inheritance` is set to `warn` by default Step #3 - "compile-libfuzzer-coverage-x86_64": help: to inherit `workspace.lints, add: Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": 34 ~ typst-svg = { workspace = true } Step #3 - "compile-libfuzzer-coverage-x86_64": 35 + [lints] Step #3 - "compile-libfuzzer-coverage-x86_64": 36 + workspace = true Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": help: to clarify your intent to not inherit, add: Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": 34 ~ typst-svg = { workspace = true } Step #3 - "compile-libfuzzer-coverage-x86_64": 35 + [lints] Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": warning: `typst` (manifest) generated 1 warning Step #3 - "compile-libfuzzer-coverage-x86_64":  Updating crates.io index Step #3 - "compile-libfuzzer-coverage-x86_64":  Updating git repository `https://github.com/LaurenzV/hayro` Step #3 - "compile-libfuzzer-coverage-x86_64":  Updating git repository `https://github.com/typst/typst-assets` Step #3 - "compile-libfuzzer-coverage-x86_64":  Updating git repository `https://github.com/typst/typst-dev-assets` Step #3 - "compile-libfuzzer-coverage-x86_64":  Updating git repository `https://github.com/LaurenzV/krilla` Step #3 - "compile-libfuzzer-coverage-x86_64":  Updating git repository `https://github.com/linebender/vello` Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloading crates ... Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded adler2 v2.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded phf_macros v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded phf_shared v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded phf v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded phf_generator v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded quick-error v2.0.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded quote v1.0.45 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded postcard v1.1.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded powerfmt v0.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rand_chacha v0.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-properties v0.1.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded roman-numerals-rs v3.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rustc-hash v2.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded scopeguard v1.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded siphasher v1.0.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded tinyvec_macros v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded same-file v1.0.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded strict-num v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded strum v0.27.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded potential_utf v0.1.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded simd-adler32 v0.3.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded stable_deref_trait v1.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded toml_datetime v0.6.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unic-langid-macros v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_collections v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded typed-arena v2.0.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unic-langid v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded pico-args v0.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unic-langid-macros-impl v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-bidi-mirroring v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ppv-lite86 v0.2.20 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded psm v0.1.24 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rand_core v0.6.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded pixglyph v0.6.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded proc-macro-hack v0.5.20+deprecated Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rayon-core v1.13.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde_spanned v0.6.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-ccc v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded time-core v0.1.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bit-set v0.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded by_address v1.2.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_locale v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded polycool v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde_path_to_error v0.1.20 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded simplecss v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded stacker v0.1.21 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded strum_macros v0.27.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded synstructure v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded thiserror-impl v2.0.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-math-class v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded itoa v1.0.14 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded semver v1.0.25 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded tinystr v0.8.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded cobs v0.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded infer v0.19.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rgb v0.8.53 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ryu v1.0.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded shlex v1.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded slab v0.4.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded smallvec v1.15.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded spin v0.9.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded subsetter v0.2.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded thiserror v2.0.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded time-macros v0.2.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded tinyvec v1.8.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded approx v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded comemo-macros v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded plist v1.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded proc-macro2 v1.0.101 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded roxmltree v0.21.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde_core v1.0.228 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde_derive v1.0.228 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded svgtypes v0.16.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-ident v1.0.16 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_locale_core v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded roxmltree v0.20.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde_yaml v0.9.34+deprecated Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded thin-vec v0.2.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded tiny-skia-path v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded toml v0.8.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-bidi v0.3.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-script v0.5.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded utf8_iter v1.0.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded version_check v0.9.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ciborium v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded comemo v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded half v2.4.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded idna_adapter v1.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded jobserver v0.1.32 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded linked-hash-map v0.5.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded num-conv v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rand v0.8.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded resvg v0.47.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde v1.0.228 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded slotmap v1.0.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unic-langid-impl v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded write16 v1.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerofrom v0.1.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ecow v0.2.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded either v1.13.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded enum-ordinalize v4.3.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded enum-ordinalize-derive v4.3.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded equivalent v1.0.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded font-types v0.11.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded font-types v0.12.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded mutate_once v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded png v0.18.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded portable-atomic v1.10.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rust_decimal v1.36.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded time v0.3.37 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded toml_edit v0.22.23 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-normalization v0.1.24 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bit-vec v0.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bytemuck v1.25.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded cc v1.2.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded crossbeam-epoch v0.9.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fast-srgb8 v1.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fastrand v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fontconfig-parser v0.5.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded hashbrown v0.17.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_locale_fallback_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded libz-rs-sys v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded palette_derive v0.7.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded pic-scale v0.7.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded quick-xml v0.38.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rayon v1.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded serde_json v1.0.138 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ttf-parser v0.25.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded xmlwriter v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded yoke-derive v0.8.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded arrayref v0.3.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bitflags v2.11.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bumpalo v3.20.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded percent-encoding v2.3.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-vo v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded utf16_iter v1.0.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fnv v1.0.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded imagesize v0.14.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded linebender_resource_handle v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded lipsum v0.9.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded lock_api v0.4.12 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded num-integer v0.1.46 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded paste v1.0.15 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded regex v1.11.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded rustybuzz v0.20.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded skrifa v0.42.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded skrifa v0.44.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded syn v2.0.98 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded tiny-skia v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unscanny v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded walkdir v2.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded writeable v0.6.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded xmp-writer v0.3.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerofrom-derive v0.1.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerovec-derive v0.11.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zune-core v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded arrayvec v0.7.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded autocfg v1.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bincode v1.3.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_locale_fallback v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_provider_blob v2.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded kamadak-exif v0.6.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded parking_lot_core v0.9.10 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded peniko v0.6.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded regex-syntax v0.8.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded syn v3.0.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded wasmi_collections v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded byteorder v1.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded byteorder-lite v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded cfg-if v1.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded chinese-number v0.7.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded chinese-variant v1.1.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ciborium-io v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded color_quant v1.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded deranged v0.3.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fdeflate v0.3.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded foldhash v0.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded log v0.4.29 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded memmap2 v0.9.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded once_cell v1.21.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded parking_lot v0.12.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unsafe-libyaml v0.2.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded wasmi_ir v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded weezl v0.1.12 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded yaml-rust v0.4.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded yoke v0.8.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerocopy-derive v0.7.35 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded arbitrary v1.4.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded az v1.2.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded bytemuck_derive v1.10.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded color v0.3.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded csv-core v0.1.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fancy-regex v0.16.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fontdb v0.23.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded litemap v0.8.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded miniz_oxide v0.8.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded num-traits v0.2.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded wasmi_core v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded displaydoc v0.2.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_provider v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded indexmap v2.12.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded gif v0.14.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_normalizer_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded image-webp v0.2.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded memchr v2.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded url v2.5.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerotrie v0.2.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zune-jpeg v0.5.15 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded base64 v0.22.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded biblatex v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded libm v0.2.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded num-bigint v0.4.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded unicode-segmentation v1.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded libfuzzer-sys v0.4.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_properties v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerovec v0.11.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded kurbo v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded data-url v0.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded euclid v0.22.14 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded idna v1.0.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded read-fonts v0.39.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded read-fonts v0.41.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded usvg v0.47.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded crossbeam-utils v0.8.21 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded flate2 v1.1.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded winnow v0.7.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zerocopy v0.7.35 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded aho-corasick v1.1.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_properties_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded regex-automata v0.4.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded zlib-rs v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded fearless_simd v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded float-cmp v0.9.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded moxcms v0.8.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded pxfm v0.1.24 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded form_urlencoded v1.2.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded palette v0.7.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded syntect v5.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded wasmparser v0.228.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded ciborium-ll v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded citationberg v0.7.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded codex v0.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded wasmi v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded write-fonts v0.48.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded glidesort v0.1.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded heck v0.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded image v0.25.10 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded crossbeam-deque v0.8.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded core_maths v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded harfrust v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded crc32fast v1.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_collator_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded guillotiere v0.7.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded hashbrown v0.16.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_normalizer v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded libc v0.2.169 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded csv v1.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded hypher v0.1.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded hayagriva v0.10.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded two-face v0.4.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_locale_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_collator v2.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded pdf-writer v0.15.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_segmenter_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Downloaded icu_segmenter v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling proc-macro2 v1.0.101 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-ident v1.0.16 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling quote v1.0.45 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde_core v1.0.228 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde v1.0.228 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling autocfg v1.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling smallvec v1.15.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling cfg-if v1.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling stable_deref_trait v1.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling libc v0.2.169 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling memchr v2.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling thiserror v2.0.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling crossbeam-utils v0.8.21 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling simd-adler32 v0.3.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling crc32fast v1.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling adler2 v2.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zlib-rs v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling libm v0.2.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rayon-core v1.13.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling arrayvec v0.7.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling itoa v1.0.14 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling either v1.13.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling writeable v0.6.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling equivalent v1.0.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling siphasher v1.0.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling log v0.4.29 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hashbrown v0.16.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ryu v1.0.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rustc-hash v2.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fearless_simd v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling utf8_iter v1.0.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zune-core v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling once_cell v1.21.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling tinyvec_macros v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling parking_lot_core v0.9.10 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_normalizer_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_properties_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling base64 v0.22.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling miniz_oxide v0.8.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fdeflate v0.3.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-ccitt v0.3.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling tinyvec v1.8.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling color_quant v1.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling polycool v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_locale_fallback_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling proc-macro-hack v0.5.20+deprecated Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zune-jpeg v0.5.15 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling weezl v0.1.12 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling scopeguard v1.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling quick-error v2.0.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling version_check v0.9.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling byteorder-lite v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling utf16_iter v1.0.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fastrand v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling arrayref v0.3.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde_json v1.0.138 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling num-traits v0.2.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling lock_api v0.4.12 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling write16 v1.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling phf_shared v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-script v0.5.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling num-conv v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling kurbo v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling heck v0.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling roxmltree v0.20.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling regex-syntax v0.8.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling time-core v0.1.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling powerfmt v0.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling aho-corasick v1.1.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling time-macros v0.2.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling slotmap v1.0.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling gif v0.14.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling image-webp v0.2.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-bidi-mirroring v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling phf_generator v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling deranged v0.3.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_locale_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling core_maths v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ttf-parser v0.25.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling crossbeam-epoch v0.9.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling paste v1.0.15 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling imagesize v0.14.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling syn v2.0.98 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling syn v3.0.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling memmap2 v0.9.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling byteorder v1.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-properties v0.1.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fontconfig-parser v0.5.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling crossbeam-deque v0.8.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling parking_lot v0.12.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-ccc v0.4.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling semver v1.0.25 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bit-vec v0.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_collator_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling xmlwriter v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling portable-atomic v1.10.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling roxmltree v0.21.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling simplecss v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling half v2.4.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-bidi v0.3.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bit-set v0.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling wasmparser v0.228.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ciborium-io v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling float-cmp v0.9.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling pxfm v0.1.24 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling num-integer v0.1.46 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling strict-num v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling svgtypes v0.16.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling slab v0.4.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-vo v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rand_core v0.6.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling linked-hash-map v0.5.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling winnow v0.7.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling same-file v1.0.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unscanny v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-utils v0.15.1 (/src/typst/crates/typst-utils) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling pico-args v0.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling data-url v0.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling percent-encoding v2.3.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling num-bigint v0.4.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling yaml-rust v0.4.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling jobserver v0.1.32 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling walkdir v2.5.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling time v0.3.37 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rayon v1.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling form_urlencoded v1.2.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ciborium-ll v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-normalization v0.1.24 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling wasmi_core v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling chinese-variant v1.1.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fnv v1.0.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-math-class v0.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling thin-vec v0.2.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling regex-automata v0.4.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bumpalo v3.20.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling palette v0.7.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unicode-segmentation v1.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rust_decimal v1.36.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling shlex v1.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling az v1.2.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling codex v0.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling roman-numerals-rs v3.1.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling by_address v1.2.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unsafe-libyaml v0.2.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling cc v1.2.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rand v0.8.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling approx v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling csv-core v0.1.11 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fast-srgb8 v1.0.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling mutate_once v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_segmenter_data v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling spin v0.9.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling wasmi_collections v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling kamadak-exif v0.6.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling euclid v0.22.14 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling linebender_resource_handle v0.1.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling glidesort v0.1.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typed-arena v2.0.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bitflags v2.11.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling litemap v0.8.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fontdb v0.23.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde_path_to_error v0.1.20 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling wasmi_ir v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-assets v0.15.1 (https://github.com/typst/typst-assets?rev=94dcb99#94dcb990) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-postscript v0.1.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling foldhash v0.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling libz-rs-sys v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hypher v0.1.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling pdf-writer v0.15.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling flate2 v1.1.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-cmap v0.1.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hashbrown v0.17.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling moxcms v0.8.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling guillotiere v0.7.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling pic-scale v0.7.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling xmp-writer v0.3.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling pixglyph v0.6.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerovec-derive v0.11.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling png v0.18.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling synstructure v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling infer v0.19.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling arbitrary v1.4.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-jpeg2000 v0.4.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-jbig2 v0.3.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling psm v0.1.24 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling stacker v0.1.21 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling indexmap v2.12.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling libfuzzer-sys v0.4.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde_derive v1.0.228 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerofrom-derive v0.1.7 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling yoke-derive v0.8.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bytemuck_derive v1.10.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling displaydoc v0.2.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling thiserror-impl v2.0.18 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerocopy-derive v0.7.35 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling phf_macros v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling comemo-macros v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling enum-ordinalize-derive v4.3.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling strum_macros v0.27.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling palette_derive v0.7.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-macros v0.15.1 (/src/typst/crates/typst-macros) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-syntax v0.7.2 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling fancy-regex v0.16.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling regex v1.11.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling tinystr v0.8.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling enum-ordinalize v4.3.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling comemo v0.5.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling chinese-number v0.7.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling phf v0.13.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unic-langid-impl v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerocopy v0.7.35 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unic-langid-macros-impl v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bytemuck v1.25.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling cobs v0.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerofrom v0.1.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling font-types v0.11.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling tiny-skia-path v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rustybuzz v0.20.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling color v0.3.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling font-types v0.12.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rgb v0.8.53 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling yoke v0.8.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ppv-lite86 v0.2.20 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling read-fonts v0.39.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling read-fonts v0.41.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling peniko v0.6.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling tiny-skia v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling strum v0.27.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling rand_chacha v0.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-write v0.7.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling vello_common v0.0.9 (https://github.com/linebender/vello?rev=8442ef4#8442ef44) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling lipsum v0.9.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling image v0.25.10 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerovec v0.11.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling postcard v1.1.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling quick-xml v0.38.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling toml_datetime v0.6.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde_spanned v0.6.8 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling bincode v1.3.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling serde_yaml v0.9.34+deprecated Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ciborium v0.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling ecow v0.2.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling csv v1.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling vello_cpu v0.0.9 (https://github.com/linebender/vello?rev=8442ef4#8442ef44) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling toml_edit v0.22.23 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling wasmi v1.0.9 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling usvg v0.47.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-timing v0.15.1 (/src/typst/crates/typst-timing) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling zerotrie v0.2.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling potential_utf v0.1.5 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling plist v1.8.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling citationberg v0.7.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_collections v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_locale_core v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unic-langid-macros v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling unic-langid v0.9.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling biblatex v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling toml v0.8.19 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling resvg v0.47.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling syntect v5.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-syntax v0.15.1 (/src/typst/crates/typst-syntax) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_provider v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_properties v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_normalizer v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_locale_fallback v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_provider_blob v2.2.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_locale v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_segmenter v2.3.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling two-face v0.4.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling idna_adapter v1.2.2 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling icu_collator v2.3.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling idna v1.0.3 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling skrifa v0.42.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling write-fonts v0.48.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling url v2.5.4 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling harfrust v0.12.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling skrifa v0.44.0 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayagriva v0.10.1 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-interpret v0.7.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-library v0.15.1 (/src/typst/crates/typst-library) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro v0.7.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling hayro-svg v0.7.0 (https://github.com/LaurenzV/hayro?rev=d8e24e29eda62581e1ea15497effb2a884fb1608#d8e24e29) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling subsetter v0.2.6 Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling krilla v0.8.2 (https://github.com/LaurenzV/krilla?rev=7772dbe#7772dbee) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling krilla-svg v0.8.1 (https://github.com/LaurenzV/krilla?rev=7772dbe#7772dbee) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-layout v0.15.1 (/src/typst/crates/typst-layout) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-eval v0.15.1 (/src/typst/crates/typst-eval) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-svg v0.15.1 (/src/typst/crates/typst-svg) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-pdf v0.15.1 (/src/typst/crates/typst-pdf) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-render v0.15.1 (/src/typst/crates/typst-render) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-html v0.15.1 (/src/typst/crates/typst-html) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-realize v0.15.1 (/src/typst/crates/typst-realize) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-bundle v0.15.1 (/src/typst/crates/typst-bundle) Step #3 - "compile-libfuzzer-coverage-x86_64": warning: overflow evaluating the requirement `comemo::internal::Cache, Result>>: Sync` Step #3 - "compile-libfuzzer-coverage-x86_64": --> crates/typst-bundle/src/lib.rs:149:1 Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": 149 | #[comemo::memoize] Step #3 - "compile-libfuzzer-coverage-x86_64": | ^^^^^^^^^^^^^^^^^^ Step #3 - "compile-libfuzzer-coverage-x86_64": | Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `LazyLock, Result>>>>: Sync` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `lock_api::rwlock::RwLock, Result>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `comemo::memoize::CacheData, Result>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `comemo::tree::CallTree, comemo::memoize::CacheEntry, _>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `slab::Slab, Result>>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `Vec, Result>>>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `alloc::raw_vec::RawVec, Result>>>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `PhantomData, Result>>>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `slab::Entry, Result>>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `comemo::tree::LeafNode, Result>>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `comemo::memoize::CacheEntry, Result>>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `Result>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `Bundle: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `Arc>: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: which requires `IndexMap: Send` Step #3 - "compile-libfuzzer-coverage-x86_64": = note: and so on... Step #3 - "compile-libfuzzer-coverage-x86_64": = help: consider adding a manual `impl` of auto traits like `Send` for intermediate types, if auto traits are involved Step #3 - "compile-libfuzzer-coverage-x86_64": = help: or consider increasing the recursion limit by adding a `#![recursion_limit = "256"]` attribute to your crate (`typst_bundle`) Step #3 - "compile-libfuzzer-coverage-x86_64": = note: this lint is attached to the whole crate and can't be disabled on a per-function basis Step #3 - "compile-libfuzzer-coverage-x86_64": = warning: this was previously accepted by the compiler but is being phased out; it will become a hard error in a future release! Step #3 - "compile-libfuzzer-coverage-x86_64": = note: for more information, see issue #159228 Step #3 - "compile-libfuzzer-coverage-x86_64": = note: `#[warn(recursion_depth_exceeding_limit)]` (part of `#[warn(future_incompatible)]`) on by default Step #3 - "compile-libfuzzer-coverage-x86_64": = note: this warning originates in the attribute macro `comemo::memoize` (in Nightly builds, run with -Z macro-backtrace for more info) Step #3 - "compile-libfuzzer-coverage-x86_64": Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst v0.15.1 (/src/typst/crates/typst) Step #3 - "compile-libfuzzer-coverage-x86_64":  Compiling typst-fuzz v0.15.1 (/src/typst/tests/fuzz) Step #3 - "compile-libfuzzer-coverage-x86_64": warning: `typst-bundle` (lib) generated 1 warning Step #3 - "compile-libfuzzer-coverage-x86_64":  Finished `release` profile [optimized + debuginfo] target(s) in 9m 33s Step #3 - "compile-libfuzzer-coverage-x86_64": + FUZZ_TARGET_OUTPUT_DIR=/src/typst/target/x86_64-unknown-linux-gnu/release Step #3 - "compile-libfuzzer-coverage-x86_64": + for f in src/bin/*.rs Step #3 - "compile-libfuzzer-coverage-x86_64": ++ basename src/bin/html Step #3 - "compile-libfuzzer-coverage-x86_64": + FUZZ_TARGET_NAME=html Step #3 - "compile-libfuzzer-coverage-x86_64": + cp /src/typst/target/x86_64-unknown-linux-gnu/release/html /workspace/out/libfuzzer-coverage-x86_64/ Step #3 - "compile-libfuzzer-coverage-x86_64": + for f in src/bin/*.rs Step #3 - "compile-libfuzzer-coverage-x86_64": ++ basename src/bin/paged Step #3 - "compile-libfuzzer-coverage-x86_64": + FUZZ_TARGET_NAME=paged Step #3 - "compile-libfuzzer-coverage-x86_64": + cp /src/typst/target/x86_64-unknown-linux-gnu/release/paged /workspace/out/libfuzzer-coverage-x86_64/ Step #3 - "compile-libfuzzer-coverage-x86_64": + for f in src/bin/*.rs Step #3 - "compile-libfuzzer-coverage-x86_64": ++ basename src/bin/parse Step #3 - "compile-libfuzzer-coverage-x86_64": + FUZZ_TARGET_NAME=parse Step #3 - "compile-libfuzzer-coverage-x86_64": + cp /src/typst/target/x86_64-unknown-linux-gnu/release/parse /workspace/out/libfuzzer-coverage-x86_64/ Finished Step #3 - "compile-libfuzzer-coverage-x86_64" Starting Step #4 Step #4: Pulling image: gcr.io/oss-fuzz-base/base-runner Step #4: Using default tag: latest Step #4: latest: Pulling from oss-fuzz-base/base-runner Step #4: b549f31133a9: Already exists Step #4: 6e628c8ef21f: Already exists Step #4: f53ab3868c1c: Already exists Step #4: cac03dd67be9: Pulling fs layer Step #4: 6ad67417113a: Pulling fs layer Step #4: 0f23db3019f6: Pulling fs layer Step #4: f7f923ac7112: Pulling fs layer Step #4: 5ac5fd5c9155: Pulling fs layer Step #4: e55f3aeb0db5: Pulling fs layer Step #4: 99a80ef90662: Pulling fs layer Step #4: ed071ff265fb: Pulling fs layer Step #4: 8ea7612e89e3: Pulling fs layer Step #4: 5acd3defd0b1: Pulling fs layer Step #4: cb9fc028b38c: Pulling fs layer Step #4: f875d495afb8: Pulling fs layer Step #4: 75f78d57ea55: Pulling fs layer Step #4: 17240e9f55fc: Pulling fs layer Step #4: 5ca435cbfcbd: Pulling fs layer Step #4: 943a3a494328: Pulling fs layer Step #4: 7104cb51b378: Pulling fs layer Step #4: 4065365cc179: Pulling fs layer Step #4: da4c240a289d: Pulling fs layer Step #4: ed67bd6f81a3: Pulling fs layer Step #4: c18ae4e7737a: Pulling fs layer Step #4: 5328ac88bd50: Pulling fs layer Step #4: 26af48add3c9: Pulling fs layer Step #4: 4569a447ea85: Pulling fs layer Step #4: 91359fd5dc87: Pulling fs layer Step #4: cb9fc028b38c: Waiting Step #4: 943a3a494328: Waiting Step #4: 7104cb51b378: Waiting Step #4: 4065365cc179: Waiting Step #4: f875d495afb8: Waiting Step #4: 75f78d57ea55: Waiting Step #4: da4c240a289d: Waiting Step #4: ed67bd6f81a3: Waiting Step #4: c18ae4e7737a: Waiting Step #4: 17240e9f55fc: Waiting Step #4: 5ca435cbfcbd: Waiting Step #4: 99a80ef90662: Waiting Step #4: ed071ff265fb: Waiting Step #4: 4569a447ea85: Waiting Step #4: 8ea7612e89e3: Waiting Step #4: 5acd3defd0b1: Waiting Step #4: 91359fd5dc87: Waiting Step #4: 5328ac88bd50: Waiting Step #4: 0f23db3019f6: Download complete Step #4: 5ac5fd5c9155: Verifying Checksum Step #4: 5ac5fd5c9155: Download complete Step #4: cac03dd67be9: Verifying Checksum Step #4: cac03dd67be9: Download complete Step #4: f7f923ac7112: Verifying Checksum Step #4: f7f923ac7112: Download complete Step #4: 6ad67417113a: Verifying Checksum Step #4: 6ad67417113a: Download complete Step #4: 99a80ef90662: Verifying Checksum Step #4: 99a80ef90662: Download complete Step #4: ed071ff265fb: Verifying Checksum Step #4: ed071ff265fb: Download complete Step #4: 8ea7612e89e3: Verifying Checksum Step #4: 8ea7612e89e3: Download complete Step #4: cac03dd67be9: Pull complete Step #4: cb9fc028b38c: Verifying Checksum Step #4: cb9fc028b38c: Download complete Step #4: 75f78d57ea55: Download complete Step #4: f875d495afb8: Download complete Step #4: 5ca435cbfcbd: Verifying Checksum Step #4: 5ca435cbfcbd: Download complete Step #4: 7104cb51b378: Verifying Checksum Step #4: 6ad67417113a: Pull complete Step #4: e55f3aeb0db5: Verifying Checksum Step #4: e55f3aeb0db5: Download complete Step #4: 4065365cc179: Download complete Step #4: 0f23db3019f6: Pull complete Step #4: c18ae4e7737a: Download complete Step #4: 5acd3defd0b1: Download complete Step #4: f7f923ac7112: Pull complete Step #4: 26af48add3c9: Verifying Checksum Step #4: 26af48add3c9: Download complete Step #4: 5328ac88bd50: Verifying Checksum Step #4: 5328ac88bd50: Download complete Step #4: 5ac5fd5c9155: Pull complete Step #4: 91359fd5dc87: Download complete Step #4: 17240e9f55fc: Verifying Checksum Step #4: 17240e9f55fc: Download complete Step #4: da4c240a289d: Verifying Checksum Step #4: da4c240a289d: Download complete Step #4: 4569a447ea85: Verifying Checksum Step #4: 4569a447ea85: Download complete Step #4: 943a3a494328: Download complete Step #4: e55f3aeb0db5: Pull complete Step #4: 99a80ef90662: Pull complete Step #4: ed071ff265fb: Pull complete Step #4: 8ea7612e89e3: Pull complete Step #4: ed67bd6f81a3: Download complete Step #4: 5acd3defd0b1: Pull complete Step #4: cb9fc028b38c: Pull complete Step #4: f875d495afb8: Pull complete Step #4: 75f78d57ea55: Pull complete Step #4: 17240e9f55fc: Pull complete Step #4: 5ca435cbfcbd: Pull complete Step #4: 943a3a494328: Pull complete Step #4: 7104cb51b378: Pull complete Step #4: 4065365cc179: Pull complete Step #4: da4c240a289d: Pull complete Step #4: ed67bd6f81a3: Pull complete Step #4: c18ae4e7737a: Pull complete Step #4: 5328ac88bd50: Pull complete Step #4: 26af48add3c9: Pull complete Step #4: 4569a447ea85: Pull complete Step #4: 91359fd5dc87: Pull complete Step #4: Digest: sha256:51304a6c0524956a6dc45df99478e1ab1d1869e27c21c95a56ab34f709472326 Step #4: Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-runner:latest Step #4: gcr.io/oss-fuzz-base/base-runner:latest Finished Step #4 Starting Step #5 Step #5: Already have image (with digest): gcr.io/oss-fuzz-base/base-runner Step #5: Running html Step #5: Running paged Step #5: Running parse Step #5: Error occured while running parse: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3664310853 Step #5: INFO: Loaded 1 modules (82872 inline 8-bit counters): 82872 [0x557bf7c7eca0, 0x557bf7c93058), Step #5: INFO: Loaded 1 PC tables (82872 PCs): 82872 [0x557bf7c93058,0x557bf7dd6bd8), Step #5: MERGE-OUTER: 19441 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3664447742 Step #5: INFO: Loaded 1 modules (82872 inline 8-bit counters): 82872 [0x55db9e3e2ca0, 0x55db9e3f7058), Step #5: INFO: Loaded 1 PC tables (82872 PCs): 82872 [0x55db9e3f7058,0x55db9e53abd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge63.txt' Step #5: MERGE-INNER: 19441 total files; 0 processed earlier; will process 19441 files now Step #5: #1 pulse cov: 168 ft: 169 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 171 ft: 183 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 275 ft: 322 exec/s: 0 rss: 42Mb Step #5: #8 pulse cov: 331 ft: 401 exec/s: 0 rss: 42Mb Step #5: #16 pulse cov: 491 ft: 620 exec/s: 0 rss: 42Mb Step #5: #32 pulse cov: 582 ft: 736 exec/s: 0 rss: 43Mb Step #5: #64 pulse cov: 1044 ft: 1369 exec/s: 0 rss: 44Mb Step #5: #128 pulse cov: 1327 ft: 1750 exec/s: 0 rss: 46Mb Step #5: #256 pulse cov: 1564 ft: 2141 exec/s: 0 rss: 48Mb Step #5: #512 pulse cov: 2146 ft: 3313 exec/s: 0 rss: 52Mb Step #5: #1024 pulse cov: 2656 ft: 4396 exec/s: 0 rss: 60Mb Step #5: #2048 pulse cov: 3357 ft: 6779 exec/s: 0 rss: 63Mb Step #5: #4096 pulse cov: 4385 ft: 11753 exec/s: 2048 rss: 64Mb Step #5: #8192 pulse cov: 5876 ft: 23682 exec/s: 1638 rss: 69Mb Step #5: #16384 pulse cov: 6192 ft: 46526 exec/s: 244 rss: 514Mb Step #5: ==69== ERROR: libFuzzer: out-of-memory (used: 2155Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1183572102 bytes in 81904 chunks; quarantined: 8866484 bytes in 41 chunks; 2408366 other chunks; total chunks: 2490311; showing top 95% (at most 8 unique contexts) Step #5: 1132871680 byte(s) (95%) in 1 allocation(s) Step #5: #0 0x55db9dc95241 in realloc (out/libfuzzer-coverage-x86_64/parse+0x341241) Step #5: #1 0x55db9dbf8b14 in alloc::alloc::realloc_nonnull /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:233:14 Step #5: #2 0x55db9dbf8b14 in ::grow_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:357:31 Step #5: #3 0x55db9dbf8b14 in ::grow_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:460:9 Step #5: #4 0x55db9dbf8b14 in ::grow /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:573:23 Step #5: #5 0x55db9dbf8b14 in ::finish_grow /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:565:28 Step #5: #6 0x55db9dbf7f23 in ::grow_amortized /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:535:33 Step #5: #7 0x55db9dbf7f23 in >::reserve::do_reserve_and_handle:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:675:44 Step #5: #8 0x55db9dfa615c in ::reserve /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:683:17 Step #5: #9 0x55db9dfa615c in >::reserve /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:344:29 Step #5: #10 0x55db9dfa615c in >::reserve /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:1473:18 Step #5: #11 0x55db9dfa615c in >::extend_trusted::>> /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:4177:18 Step #5: #12 0x55db9e079426 in as alloc::vec::spec_extend::SpecExtend>>>::spec_extend /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_extend.rs:27:14 Step #5: #13 0x55db9e079426 in as alloc::vec::spec_extend::SpecExtend<&typst_syntax::node::SyntaxNode, core::slice::iter::Iter>>::spec_extend /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_extend.rs:47:14 Step #5: #14 0x55db9e079426 in >::extend_from_slice /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3648:14 Step #5: #15 0x55db9e079426 in ::memoize_parsed_nodes /src/typst/crates/typst-syntax/src/parser.rs:1931:25 Step #5: #16 0x55db9e079426 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1067:7 Step #5: #17 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #18 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #19 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #20 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #21 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #22 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #23 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #24 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #25 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #26 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #27 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #28 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #29 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #30 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #31 0x55db9e07391e in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #32 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #33 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #34 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #35 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #36 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #37 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #38 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #39 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #40 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #41 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #42 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #43 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #44 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #45 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #46 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #47 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #48 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #49 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #50 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #51 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #52 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #53 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #54 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #55 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #56 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #57 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #58 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #59 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #60 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #61 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: #62 0x55db9e07295a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #63 0x55db9e07295a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #64 0x55db9e079d18 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #65 0x55db9e079d18 in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1060:9 Step #5: Step #5: DEDUP_TOKEN: __interceptor_realloc--alloc::alloc::realloc_nonnull--::grow_impl_runtime Step #5: 24383088 byte(s) (2%) in 11 allocation(s) Step #5: #0 0x55db9dc94e34 in malloc (out/libfuzzer-coverage-x86_64/parse+0x340e34) Step #5: #1 0x55db9e14ee13 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55db9e120c42 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fcbae05c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./oom-889414c50d0bca62b1cbf42945f5518040ce2cfa Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 328048898 Step #5: INFO: Loaded 1 modules (82872 inline 8-bit counters): 82872 [0x561661574ca0, 0x561661589058), Step #5: INFO: Loaded 1 PC tables (82872 PCs): 82872 [0x561661589058,0x5616616ccbd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge63.txt' Step #5: MERGE-INNER: '/corpus/parse/regressions/889414c50d0bca62b1cbf42945f5518040ce2cfa' caused a failure at the previous merge step Step #5: MERGE-INNER: 19441 total files; 19290 processed earlier; will process 151 files now Step #5: #1 pulse cov: 1500 ft: 1501 exec/s: 0 rss: 49Mb Step #5: #2 pulse cov: 1796 ft: 2288 exec/s: 0 rss: 283Mb Step #5: #4 pulse cov: 2364 ft: 3835 exec/s: 0 rss: 283Mb Step #5: #8 pulse cov: 3306 ft: 7070 exec/s: 0 rss: 283Mb Step #5: #16 pulse cov: 3757 ft: 10133 exec/s: 0 rss: 283Mb Step #5: #32 pulse cov: 4185 ft: 15532 exec/s: 0 rss: 1810Mb Step #5: #64 pulse cov: 4717 ft: 23017 exec/s: 0 rss: 1810Mb Step #5: #128 pulse cov: 4768 ft: 24759 exec/s: 0 rss: 1810Mb Step #5: #151 DONE cov: 4779 ft: 25145 exec/s: 0 rss: 1810Mb Step #5: MERGE-OUTER: successful in 2 attempt(s) Step #5: MERGE-OUTER: the control file has 2319055 bytes Step #5: MERGE-OUTER: consumed 1Mb (69Mb rss) to parse the control file Step #5: MERGE-OUTER: 12764 new files with 48290 new features added; 6309 new coverage edges Step #5: warning: /workspace/out/libfuzzer-coverage-x86_64/dumps/parse.17612063791599050044_0.profraw: raw profile version mismatch: Profile uses raw profile format version = 11; expected version = 10 Step #5: PLEASE update this tool to version in the raw profile, or regenerate raw profile with expected version. Step #5: error: no profile can be merged Step #5: [2026-09-05 07:16:27,965 INFO] Finding shared libraries for targets (if any). Step #5: [2026-09-05 07:16:27,979 INFO] Finished finding shared libraries for targets. Step #5: error: /workspace/out/libfuzzer-coverage-x86_64/dumps/parse.profdata: could not read profile data!No such file or directory Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/parse_error.log Step #5: error: /workspace/out/libfuzzer-coverage-x86_64/dumps/parse.profdata: could not read profile data!No such file or directory Step #5: Error occured while running html: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3663563173 Step #5: INFO: Loaded 1 modules (1623806 inline 8-bit counters): 1623806 [0x55d4eaa23ae0, 0x55d4eabb01de), Step #5: INFO: Loaded 1 PC tables (1623806 PCs): 1623806 [0x55d4eabb01e0,0x55d4ec4771c0), Step #5: MERGE-OUTER: 18324 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3663742499 Step #5: INFO: Loaded 1 modules (1623806 inline 8-bit counters): 1623806 [0x559ccaa29ae0, 0x559ccabb61de), Step #5: INFO: Loaded 1 PC tables (1623806 PCs): 1623806 [0x559ccabb61e0,0x559ccc47d1c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge42.txt' Step #5: MERGE-INNER: 18324 total files; 0 processed earlier; will process 18324 files now Step #5: #1 pulse cov: 5282 ft: 5283 exec/s: 0 rss: 138Mb Step #5: #2 pulse cov: 6118 ft: 6686 exec/s: 0 rss: 141Mb Step #5: #4 pulse cov: 6545 ft: 7965 exec/s: 0 rss: 144Mb Step #5: #8 pulse cov: 6959 ft: 8765 exec/s: 0 rss: 148Mb Step #5: #16 pulse cov: 7385 ft: 9356 exec/s: 0 rss: 153Mb Step #5: #32 pulse cov: 8331 ft: 10872 exec/s: 32 rss: 156Mb Step #5: #64 pulse cov: 8478 ft: 11149 exec/s: 32 rss: 157Mb Step #5: #128 pulse cov: 9979 ft: 14118 exec/s: 32 rss: 159Mb Step #5: #256 pulse cov: 11327 ft: 17869 exec/s: 28 rss: 161Mb Step #5: #512 pulse cov: 16435 ft: 24946 exec/s: 28 rss: 172Mb Step #5: #1024 pulse cov: 17703 ft: 29106 exec/s: 27 rss: 173Mb Step #5: #2048 pulse cov: 19521 ft: 36905 exec/s: 26 rss: 175Mb Step #5: #4096 pulse cov: 21422 ft: 48658 exec/s: 26 rss: 179Mb Step #5: #8192 pulse cov: 30353 ft: 90902 exec/s: 25 rss: 233Mb Step #5: #16384 pulse cov: 31780 ft: 136489 exec/s: 20 rss: 439Mb Step #5: ALARM: working on the last Unit for 149 seconds Step #5: and the timeout value is 100 (use -timeout=N to change) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./timeout-7796a0afd5de6e47ed8262ac9b060fa17a74a509 Step #5: ==45== ERROR: libFuzzer: timeout after 149 seconds Step #5: #0 0x559cc2f73e71 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/html+0x2ee8e71) Step #5: #1 0x559cc80e0a98 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559cc80c455b in fuzzer::Fuzzer::AlarmCallback() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:304:5 Step #5: #3 0x7f1153b7241f (/lib/x86_64-linux-gnu/libpthread.so.0+0x1441f) (BuildId: 9753720502573b97dbac595b61fd72c2df18e078) Step #5: #4 0x559cc74fd54d in >::is_allocated /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:592:18 Step #5: #5 0x559cc74fd54d in >::allocation /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:600:28 Step #5: #6 0x559cc74fd54d in >::header::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:619:38 Step #5: #7 0x559cc74fd54d in ::then::<&ecow::vec::Header, >::header::{closure#0}> /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/bool.rs:66:24 Step #5: #8 0x559cc74fd54d in >::header /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:619:14 Step #5: #9 0x559cc74fd54d in >::is_unique /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:778:14 Step #5: #10 0x559cc74fd54d in >::push_unchecked /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:255:28 Step #5: #11 0x559cc74d6386 in >::extend_from_slice /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:492:22 Step #5: #12 0x559cc74d6386 in as core::convert::From<&[u8]>>::from /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:970:13 Step #5: #13 0x559cc74d6386 in ::from_slice /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/dynamic.rs:93:33 Step #5: #14 0x559cc74d6386 in ::from_str /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/string.rs:103:14 Step #5: #15 0x559cc74d6386 in >::from /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/string.rs:445:9 Step #5: #16 0x559cc74d6386 in <&str as core::convert::Into>::into /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/convert/mod.rs:780:9 Step #5: #17 0x559cc74d6386 in ::hint::<&str> /src/typst/crates/typst-syntax/src/lexer.rs:86:32 Step #5: #18 0x559cc74d6386 in ::invalid_char_in_code /src/typst/crates/typst-syntax/src/lexer.rs:909:22 Step #5: #19 0x559cc74a6e0c in ::code /src/typst/crates/typst-syntax/src/lexer.rs:893:23 Step #5: #20 0x559cc74a6e0c in ::next /src/typst/crates/typst-syntax/src/lexer.rs:120:42 Step #5: #21 0x559cc74c819d in ::lex /src/typst/crates/typst-syntax/src/parser.rs:1857:42 Step #5: #22 0x559cc74c7d77 in ::eat /src/typst/crates/typst-syntax/src/parser.rs:1771:22 Step #5: #23 0x559cc7528b0f in ::expect /src/typst/crates/typst-syntax/src/parser.rs:1992:18 Step #5: #24 0x559cc7528b0f in typst_syntax::parser::import_items /src/typst/crates/typst-syntax/src/parser.rs:966:15 Step #5: #25 0x559cc752b790 in typst_syntax::parser::module_import /src/typst/crates/typst-syntax/src/parser.rs:936:13 Step #5: #26 0x559cc752c6d1 in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:723:31 Step #5: #27 0x559cc752c6d1 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #28 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #29 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #30 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #31 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #32 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #33 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #34 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #35 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #36 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #37 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #38 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #39 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #40 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #41 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #42 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #43 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #44 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #45 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #46 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #47 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #48 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #49 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #50 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #51 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #52 0x559cc752d7ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #53 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #54 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #55 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #56 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #57 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #58 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #59 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #60 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #61 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #62 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #63 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #64 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #65 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #66 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #67 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #68 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #69 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #70 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #71 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #72 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #73 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #74 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #75 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #76 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #77 0x559cc752d7ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #78 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #79 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #80 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #81 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #82 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #83 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #84 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #85 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #86 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #87 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #88 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #89 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #90 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #91 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #92 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #93 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #94 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #95 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #96 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #97 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #98 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #99 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #100 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #101 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #102 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #103 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #104 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #105 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #106 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #107 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #108 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #109 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #110 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #111 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #112 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #113 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #114 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #115 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #116 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #117 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #118 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #119 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #120 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #121 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #122 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #123 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #124 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #125 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #126 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #127 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #128 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #129 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #130 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #131 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #132 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #133 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #134 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #135 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #136 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #137 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #138 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #139 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #140 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #141 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #142 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #143 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #144 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #145 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #146 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #147 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #148 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #149 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #150 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #151 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #152 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #153 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #154 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #155 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #156 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #157 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #158 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #159 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #160 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #161 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #162 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #163 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #164 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #165 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #166 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #167 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #168 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #169 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #170 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #171 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #172 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #173 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #174 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #175 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #176 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #177 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #178 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #179 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #180 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #181 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #182 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #183 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #184 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #185 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #186 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #187 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #188 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #189 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #190 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #191 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #192 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #193 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #194 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #195 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #196 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #197 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #198 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #199 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #200 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #201 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #202 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #203 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #204 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #205 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #206 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #207 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #208 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #209 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #210 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #211 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #212 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #213 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #214 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #215 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #216 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #217 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #218 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #219 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #220 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #221 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #222 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #223 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #224 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #225 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #226 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #227 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #228 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #229 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #230 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #231 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #232 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #233 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #234 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #235 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #236 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #237 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #238 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #239 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #240 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #241 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #242 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #243 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #244 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #245 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #246 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #247 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #248 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #249 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #250 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #251 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #252 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #253 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #254 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #255 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #256 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #257 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #258 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #259 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #260 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #261 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #262 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #263 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #264 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #265 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #266 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #267 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #268 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #269 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #270 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #271 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #272 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #273 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #274 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #275 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #276 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #277 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #278 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #279 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #280 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #281 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #282 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #283 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #284 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #285 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #286 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #287 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #288 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #289 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #290 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #291 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #292 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #293 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #294 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #295 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #296 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #297 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #298 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #299 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #300 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #301 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #302 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #303 0x559cc752d7ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #304 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #305 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #306 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #307 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #308 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #309 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #310 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #311 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #312 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #313 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #314 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #315 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #316 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #317 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #318 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #319 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #320 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #321 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #322 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #323 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #324 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #325 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #326 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #327 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #328 0x559cc752d7ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #329 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #330 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #331 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #332 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #333 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #334 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #335 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #336 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #337 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #338 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #339 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #340 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #341 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #342 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #343 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #344 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #345 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #346 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #347 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #348 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #349 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #350 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #351 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #352 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #353 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #354 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #355 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #356 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #357 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #358 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #359 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #360 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #361 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #362 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #363 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #364 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #365 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #366 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #367 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #368 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #369 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #370 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #371 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #372 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #373 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #374 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #375 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #376 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #377 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #378 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #379 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #380 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #381 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #382 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #383 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #384 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #385 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #386 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #387 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #388 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #389 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #390 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #391 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #392 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #393 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #394 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #395 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #396 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #397 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #398 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #399 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #400 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #401 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #402 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #403 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #404 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #405 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #406 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #407 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #408 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #409 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #410 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #411 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #412 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #413 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #414 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #415 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #416 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #417 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #418 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #419 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #420 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #421 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #422 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #423 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #424 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #425 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #426 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #427 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #428 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #429 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #430 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #431 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #432 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #433 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #434 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #435 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #436 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #437 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #438 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #439 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #440 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #441 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #442 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #443 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #444 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #445 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #446 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #447 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #448 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #449 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #450 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #451 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #452 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #453 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #454 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #455 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #456 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #457 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #458 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #459 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #460 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #461 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #462 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #463 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #464 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #465 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #466 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #467 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #468 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #469 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #470 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #471 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #472 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #473 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #474 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #475 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #476 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #477 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #478 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #479 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #480 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #481 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #482 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #483 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #484 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #485 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #486 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #487 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #488 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #489 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #490 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #491 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #492 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #493 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #494 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #495 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #496 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #497 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #498 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #499 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #500 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #501 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #502 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #503 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #504 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #505 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #506 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #507 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #508 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #509 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #510 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #511 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #512 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #513 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #514 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #515 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #516 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #517 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #518 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #519 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #520 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #521 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #522 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #523 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #524 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #525 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #526 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #527 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #528 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #529 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #530 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #531 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #532 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #533 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #534 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #535 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #536 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #537 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #538 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #539 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #540 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #541 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #542 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #543 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #544 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #545 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #546 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #547 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #548 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #549 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #550 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #551 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #552 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #553 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #554 0x559cc752d7ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #555 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #556 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #557 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #558 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #559 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #560 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #561 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #562 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #563 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #564 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #565 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #566 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #567 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #568 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #569 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #570 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #571 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #572 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #573 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #574 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #575 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #576 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #577 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #578 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #579 0x559cc752d7ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #580 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #581 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #582 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #583 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #584 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #585 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #586 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #587 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #588 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #589 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #590 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #591 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #592 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #593 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #594 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #595 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #596 0x559cc7536b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #597 0x559cc7536b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #598 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #599 0x559cc7536b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #600 0x559cc7536b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #601 0x559cc75327ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #602 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #603 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #604 0x559cc7539feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #605 0x559cc7539feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #606 0x559cc7539feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #607 0x559cc7539feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #608 0x559cc7539feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #609 0x559cc752cd61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #610 0x559cc752a6cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #611 0x559cc753c005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #612 0x559cc75351b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #613 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #614 0x559cc75351b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #615 0x559cc75351b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #616 0x559cc753381f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #617 0x559cc752c80a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #618 0x559cc752c80a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::AlarmCallback() Step #5: SUMMARY: libFuzzer: timeout Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 797935434 Step #5: INFO: Loaded 1 modules (1623806 inline 8-bit counters): 1623806 [0x555c072d4ae0, 0x555c074611de), Step #5: INFO: Loaded 1 PC tables (1623806 PCs): 1623806 [0x555c074611e0,0x555c08d281c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge42.txt' Step #5: MERGE-INNER: '/corpus/html/regressions/7796a0afd5de6e47ed8262ac9b060fa17a74a509' caused a failure at the previous merge step Step #5: MERGE-INNER: 18324 total files; 17884 processed earlier; will process 440 files now Step #5: ALARM: working on the last Unit for 101 seconds Step #5: and the timeout value is 100 (use -timeout=N to change) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./timeout-b9ccfbc12046b8ac8ba45433ca6a921731713dc1 Step #5: ==100293== ERROR: libFuzzer: timeout after 101 seconds Step #5: #0 0x555bff81ee71 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/html+0x2ee8e71) Step #5: #1 0x555c0498ba98 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555c0496f55b in fuzzer::Fuzzer::AlarmCallback() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:304:5 Step #5: #3 0x7f7f6b01b41f (/lib/x86_64-linux-gnu/libpthread.so.0+0x1441f) (BuildId: 9753720502573b97dbac595b61fd72c2df18e078) Step #5: #4 0x555bff785c91 in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/html+0x2e4fc91) Step #5: #5 0x555bff780a28 in __asan::Allocator::Reallocate(void*, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/html+0x2e4aa28) Step #5: #6 0x555bff78095e in __asan::asan_realloc(void*, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/html+0x2e4a95e) Step #5: #7 0x555bff817364 in realloc (out/libfuzzer-coverage-x86_64/html+0x2ee1364) Step #5: #8 0x555bffee2ce3 in alloc::alloc::realloc_nonnull /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:233:14 Step #5: #9 0x555bffee2ce3 in alloc::alloc::realloc /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:225:14 Step #5: #10 0x555bffee2ce3 in >::grow /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:561:13 Step #5: #11 0x555bffee3a24 in >::reserve /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:473:22 Step #5: #12 0x555bffee19cc in >::extend_from_byte_slice /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/vec.rs:741:14 Step #5: #13 0x555bffee19cc in ::extend_from_slice /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/dynamic.rs:160:25 Step #5: #14 0x555c03e02cc4 in ::write_str /rust/registry/src/index.crates.io-1949cf8c6b5b557f/ecow-0.2.6/src/string.rs:376:14 Step #5: #15 0x555bffeb4037 in core::fmt::write /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/fmt/mod.rs:1665:20 Step #5: #16 0x555c03d84da5 in <&mut ecow::string::EcoString as core::fmt::Write::write_fmt::SpecWriteFmt>::spec_write_fmt /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/fmt/mod.rs:238:21 Step #5: #17 0x555c03d84da5 in ::write_fmt /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/fmt/mod.rs:243:14 Step #5: #18 0x555c03d84da5 in ::invalid_char_in_code::{closure#0} /src/typst/crates/typst-syntax/src/lexer.rs:900:31 Step #5: #19 0x555c03d84da5 in ::invalid_char_in_code /src/typst/crates/typst-syntax/src/lexer.rs:936:28 Step #5: #20 0x555c03d51e0c in ::code /src/typst/crates/typst-syntax/src/lexer.rs:893:23 Step #5: #21 0x555c03d51e0c in ::next /src/typst/crates/typst-syntax/src/lexer.rs:120:42 Step #5: #22 0x555c03d7319d in ::lex /src/typst/crates/typst-syntax/src/parser.rs:1857:42 Step #5: #23 0x555c03dd26c1 in ::eat /src/typst/crates/typst-syntax/src/parser.rs:1771:22 Step #5: #24 0x555c03dd26c1 in ::expect /src/typst/crates/typst-syntax/src/parser.rs:1986:18 Step #5: #25 0x555c03dd26c1 in typst_syntax::parser::import_items /src/typst/crates/typst-syntax/src/parser.rs:954:15 Step #5: #26 0x555c03dd6790 in typst_syntax::parser::module_import /src/typst/crates/typst-syntax/src/parser.rs:936:13 Step #5: #27 0x555c03dd76d1 in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:723:31 Step #5: #28 0x555c03dd76d1 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #29 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #30 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #31 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #32 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #33 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #34 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #35 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #36 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #37 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #38 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #39 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #40 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #41 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #42 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #43 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #44 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #45 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #46 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #47 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #48 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #49 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #50 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #51 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #52 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #53 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #54 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #55 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #56 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #57 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #58 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #59 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #60 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #61 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #62 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #63 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #64 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #65 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #66 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #67 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #68 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #69 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #70 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #71 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #72 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #73 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #74 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #75 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #76 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #77 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #78 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #79 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #80 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #81 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #82 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #83 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #84 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #85 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #86 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #87 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #88 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #89 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #90 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #91 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #92 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #93 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #94 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #95 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #96 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #97 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #98 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #99 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #100 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #101 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #102 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #103 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #104 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #105 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #106 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #107 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #108 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #109 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #110 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #111 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #112 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #113 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #114 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #115 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #116 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #117 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #118 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #119 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #120 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #121 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #122 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #123 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #124 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #125 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #126 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #127 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #128 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #129 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #130 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #131 0x555c03dd87ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #132 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #133 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #134 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #135 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #136 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #137 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #138 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #139 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #140 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #141 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #142 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #143 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #144 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #145 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #146 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #147 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #148 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #149 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #150 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #151 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #152 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #153 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #154 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #155 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #156 0x555c03dd87ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #157 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #158 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #159 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #160 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #161 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #162 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #163 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #164 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #165 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #166 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #167 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #168 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #169 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #170 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #171 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #172 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #173 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #174 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #175 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #176 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #177 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #178 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #179 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #180 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #181 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #182 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #183 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #184 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #185 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #186 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #187 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #188 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #189 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #190 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #191 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #192 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #193 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #194 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #195 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #196 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #197 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #198 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #199 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #200 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #201 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #202 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #203 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #204 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #205 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #206 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #207 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #208 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #209 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #210 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #211 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #212 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #213 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #214 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #215 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #216 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #217 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #218 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #219 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #220 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #221 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #222 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #223 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #224 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #225 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #226 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #227 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #228 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #229 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #230 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #231 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #232 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #233 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #234 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #235 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #236 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #237 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #238 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #239 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #240 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #241 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #242 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #243 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #244 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #245 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #246 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #247 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #248 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #249 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #250 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #251 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #252 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #253 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #254 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #255 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #256 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #257 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #258 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #259 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #260 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #261 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #262 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #263 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #264 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #265 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #266 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #267 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #268 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #269 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #270 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #271 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #272 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #273 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #274 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #275 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #276 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #277 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #278 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #279 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #280 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #281 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #282 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #283 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #284 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #285 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #286 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #287 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #288 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #289 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #290 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #291 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #292 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #293 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #294 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #295 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #296 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #297 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #298 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #299 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #300 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #301 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #302 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #303 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #304 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #305 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #306 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #307 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #308 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #309 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #310 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #311 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #312 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #313 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #314 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #315 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #316 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #317 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #318 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #319 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #320 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #321 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #322 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #323 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #324 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #325 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #326 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #327 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #328 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #329 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #330 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #331 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #332 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #333 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #334 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #335 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #336 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #337 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #338 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #339 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #340 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #341 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #342 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #343 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #344 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #345 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #346 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #347 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #348 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #349 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #350 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #351 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #352 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #353 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #354 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #355 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #356 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #357 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #358 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #359 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #360 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #361 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #362 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #363 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #364 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #365 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #366 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #367 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #368 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #369 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #370 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #371 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #372 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #373 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #374 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #375 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #376 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #377 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #378 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #379 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #380 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #381 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #382 0x555c03dd87ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #383 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #384 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #385 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #386 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #387 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #388 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #389 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #390 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #391 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #392 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #393 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #394 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #395 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #396 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #397 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #398 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #399 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #400 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #401 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #402 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #403 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #404 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #405 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #406 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #407 0x555c03dd87ce in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:673:13 Step #5: #408 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #409 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #410 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #411 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #412 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #413 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #414 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #415 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #416 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #417 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #418 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #419 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #420 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #421 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #422 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #423 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #424 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #425 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #426 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #427 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #428 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #429 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #430 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #431 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #432 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #433 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #434 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #435 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #436 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #437 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #438 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #439 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #440 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #441 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #442 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #443 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #444 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #445 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #446 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #447 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #448 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #449 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #450 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #451 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #452 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #453 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #454 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #455 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #456 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #457 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #458 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #459 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #460 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #461 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #462 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #463 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #464 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #465 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #466 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #467 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #468 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #469 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #470 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #471 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #472 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #473 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #474 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #475 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #476 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #477 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #478 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #479 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #480 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #481 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #482 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #483 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #484 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #485 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #486 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #487 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #488 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #489 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #490 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #491 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #492 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #493 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #494 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #495 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #496 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #497 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #498 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #499 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #500 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #501 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #502 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #503 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #504 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #505 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #506 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #507 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #508 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #509 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #510 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #511 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #512 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #513 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #514 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #515 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #516 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #517 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #518 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #519 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #520 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #521 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #522 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #523 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #524 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #525 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #526 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #527 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #528 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #529 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #530 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #531 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #532 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #533 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #534 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #535 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #536 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #537 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #538 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #539 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #540 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #541 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #542 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #543 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #544 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #545 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #546 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #547 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #548 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #549 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #550 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #551 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #552 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #553 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #554 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #555 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #556 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #557 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #558 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #559 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #560 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #561 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #562 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #563 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #564 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #565 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #566 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #567 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #568 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #569 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #570 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #571 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #572 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #573 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #574 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #575 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: #576 0x555c03dd7d61 in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:629:13 Step #5: #577 0x555c03dd56cc in typst_syntax::parser::pattern_leaf /src/typst/crates/typst-syntax/src/parser.rs:1448:5 Step #5: #578 0x555c03de7005 in typst_syntax::parser::pattern /src/typst/crates/typst-syntax/src/parser.rs:1338:14 Step #5: #579 0x555c03de01b3 in typst_syntax::parser::destructuring_item /src/typst/crates/typst-syntax/src/parser.rs:1410:9 Step #5: #580 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1362:13 Step #5: #581 0x555c03de01b3 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #582 0x555c03de01b3 in typst_syntax::parser::destructuring_or_parenthesized /src/typst/crates/typst-syntax/src/parser.rs:1353:7 Step #5: #583 0x555c03dde81f in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1056:9 Step #5: #584 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #585 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #586 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #587 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #588 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #589 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #590 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #591 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #592 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #593 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #594 0x555c03de1b14 in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #595 0x555c03de1b14 in typst_syntax::parser::array_or_dict_item /src/typst/crates/typst-syntax/src/parser.rs:1156:5 Step #5: #596 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1110:13 Step #5: #597 0x555c03de1b14 in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #598 0x555c03de1b14 in typst_syntax::parser::parenthesized_or_array_or_dict /src/typst/crates/typst-syntax/src/parser.rs:1098:7 Step #5: #599 0x555c03ddd7ca in typst_syntax::parser::expr_with_paren /src/typst/crates/typst-syntax/src/parser.rs:1025:16 Step #5: #600 0x555c03dd780a in typst_syntax::parser::code_primary /src/typst/crates/typst-syntax/src/parser.rs:714:34 Step #5: #601 0x555c03dd780a in typst_syntax::parser::code_expr_prec /src/typst/crates/typst-syntax/src/parser.rs:623:9 Step #5: #602 0x555c03de4feb in typst_syntax::parser::code_expr /src/typst/crates/typst-syntax/src/parser.rs:602:5 Step #5: #603 0x555c03de4feb in typst_syntax::parser::arg /src/typst/crates/typst-syntax/src/parser.rs:1249:5 Step #5: #604 0x555c03de4feb in typst_syntax::parser::args::{closure#0} /src/typst/crates/typst-syntax/src/parser.rs:1217:17 Step #5: #605 0x555c03de4feb in ::with_nl_mode:: /src/typst/crates/typst-syntax/src/parser.rs:1834:9 Step #5: #606 0x555c03de4feb in typst_syntax::parser::args /src/typst/crates/typst-syntax/src/parser.rs:1207:11 Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::AlarmCallback() Step #5: SUMMARY: libFuzzer: timeout Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 900404930 Step #5: INFO: Loaded 1 modules (1623806 inline 8-bit counters): 1623806 [0x55b19125cae0, 0x55b1913e91de), Step #5: INFO: Loaded 1 PC tables (1623806 PCs): 1623806 [0x55b1913e91e0,0x55b192cb01c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge42.txt' Step #5: MERGE-INNER: '/corpus/html/regressions/b9ccfbc12046b8ac8ba45433ca6a921731713dc1' caused a failure at the previous merge step Step #5: MERGE-INNER: 18324 total files; 17885 processed earlier; will process 439 files now Step #5: #1 pulse cov: 4567 ft: 4568 exec/s: 0 rss: 152Mb Step #5: #2 pulse cov: 5368 ft: 6303 exec/s: 1 rss: 206Mb Step #5: #4 pulse cov: 6838 ft: 9811 exec/s: 1 rss: 206Mb Step #5: #8 pulse cov: 7518 ft: 15122 exec/s: 1 rss: 206Mb Step #5: #16 pulse cov: 7790 ft: 18211 exec/s: 1 rss: 206Mb Step #5: #32 pulse cov: 7948 ft: 22833 exec/s: 1 rss: 221Mb Step #5: #64 pulse cov: 8269 ft: 27594 exec/s: 0 rss: 261Mb Step #5: #128 pulse cov: 8670 ft: 33058 exec/s: 0 rss: 415Mb Step #5: #256 pulse cov: 13521 ft: 47129 exec/s: 0 rss: 721Mb Step #5: #439 DONE cov: 14207 ft: 52775 exec/s: 0 rss: 1296Mb Step #5: MERGE-OUTER: successful in 3 attempt(s) Step #5: MERGE-OUTER: the control file has 3596336 bytes Step #5: MERGE-OUTER: consumed 2Mb (149Mb rss) to parse the control file Step #5: MERGE-OUTER: 13026 new files with 139353 new features added; 32233 new coverage edges Step #5: warning: /workspace/out/libfuzzer-coverage-x86_64/dumps/html.15145303456613627165_0.profraw: raw profile version mismatch: Profile uses raw profile format version = 11; expected version = 10 Step #5: PLEASE update this tool to version in the raw profile, or regenerate raw profile with expected version. Step #5: error: no profile can be merged Step #5: [2026-09-05 07:42:06,018 INFO] Finding shared libraries for targets (if any). Step #5: [2026-09-05 07:42:06,032 INFO] Finished finding shared libraries for targets. Step #5: error: /workspace/out/libfuzzer-coverage-x86_64/dumps/html.profdata: could not read profile data!No such file or directory Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/html_error.log Step #5: error: /workspace/out/libfuzzer-coverage-x86_64/dumps/html.profdata: could not read profile data!No such file or directory Step #5: Error occured while running paged: Step #5: Cov returncode: 124, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3664310733 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d02a555d60, 0x55d02a73e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d02a73e720,0x55d02c5c82c0), Step #5: MERGE-OUTER: 10976 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3664448261 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5565e0c62d60, 0x5565e0e4b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5565e0e4b720,0x5565e2cd52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: 10976 total files; 0 processed earlier; will process 10976 files now Step #5: ==67== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5565d77a52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5565ddde0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5565dddc346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5565dddc338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5565d77ab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5565d770c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5565d7706c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5565d779d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5565da7cc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5565da7cc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5565da7cc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5565da7cc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5565da7cc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5565da7cc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5565da7cc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5565da7cc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5565da7cc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5565da7cc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5565dc9d145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5565d972d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5565d97385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5565d94e3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5565d94e3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5565d94e4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5565d94e3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5565d94e3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5565d94e3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5565dddc594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5565dddce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5565dddb6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5565ddde0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4f1ec33082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5565d770543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7d, Step #5: } Step #5: artifact_prefix='./'; Test unit written to ./oom-c2b7df6201fdd3362399091f0a29550df3505b6a Step #5: Base64: fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3664936917 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b2f417d60, 0x559b2f60071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b2f600720,0x559b3148a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c2b7df6201fdd3362399091f0a29550df3505b6a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1 processed earlier; will process 10975 files now Step #5: ==106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b25f5a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b2c595728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b2c57846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b2c57838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b25f60652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b25ec142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b25ebbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b25f52595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b28f818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b28f818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b28f818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b28f818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b28f818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b28f818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b28f818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b28f818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b28f818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b28f818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b2b18645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b27ee2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b27eed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b27c98d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b27c98d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b27c99808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b27c98944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b27c98944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b27c98944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b2c57a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b2c5837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b2c56b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b2c595fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcfa3b03082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b25eba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7a, Step #5: z Step #5: artifact_prefix='./'; Test unit written to ./oom-395df8f7c51f007019cb30201c49e884b46b92fa Step #5: Base64: eg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3665374296 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55693f380d60, 0x55693f56971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55693f569720,0x5569413f32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/395df8f7c51f007019cb30201c49e884b46b92fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2 processed earlier; will process 10974 files now Step #5: ==142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556935ec32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55693c4fe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55693c4e146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55693c4e138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556935ec9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556935e2a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556935e24c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556935ebb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556938eea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556938eea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556938eea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556938eea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556938eea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556938eea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556938eea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556938eea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556938eea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556938eea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55693b0ef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556937e4b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556937e565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556937c01d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556937c01d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556937c02808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556937c01944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556937c01944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556937c01944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55693c4e394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55693c4ec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55693c4d4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55693c4fefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f12b457d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556935e2343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3e, Step #5: > Step #5: artifact_prefix='./'; Test unit written to ./oom-091385be99b45f459a231582d583ec9f3fa3d194 Step #5: Base64: Pg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 4 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3665807859 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c69c7a6d60, 0x55c69c98f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c69c98f720,0x55c69e8192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/091385be99b45f459a231582d583ec9f3fa3d194' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3 processed earlier; will process 10973 files now Step #5: #1 pulse cov: 3373 ft: 3374 exec/s: 0 rss: 150Mb Step #5: ==178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c6932e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c699924728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c69990746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c69990738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c6932ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c69325042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c69324ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c6932e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c6963108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c6963108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c6963108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c6963108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c6963108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c6963108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c6963108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c6963108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c6963108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c6963108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c69851545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c695271578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c69527c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c695027d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c695027d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c695028808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c695027944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c695027944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c695027944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c69990994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c6999127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c6998fa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c699924fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f865b8a3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c69324943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x12, Step #5: \022 Step #5: artifact_prefix='./'; Test unit written to ./oom-c4f87a6290aee1acfc1f26083974ce94621fca64 Step #5: Base64: Eg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 5 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3666283864 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56537ea8fd60, 0x56537ec7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56537ec78720,0x565380b022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c4f87a6290aee1acfc1f26083974ce94621fca64' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 5 processed earlier; will process 10971 files now Step #5: ==214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653755d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56537bc0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56537bbf046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56537bbf038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5653755d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56537553942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565375533c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5653755ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653785f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653785f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653785f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653785f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653785f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653785f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653785f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653785f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653785f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653785f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56537a7fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56537755a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653775655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565377310d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565377310d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565377311808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565377310944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565377310944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565377310944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56537bbf294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56537bbfb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56537bbe3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56537bc0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f15f47ef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56537553243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4, Step #5: \004 Step #5: artifact_prefix='./'; Test unit written to ./oom-a42c6cf1de3abfdea9b95f34687cbbe92b9a7383 Step #5: Base64: BA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 6 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3666717821 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563bb649fd60, 0x563bb668871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563bb6688720,0x563bb85122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a42c6cf1de3abfdea9b95f34687cbbe92b9a7383' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 6 processed earlier; will process 10970 files now Step #5: ==250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563bacfe22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563bb361d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563bb360046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563bb360038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563bacfe8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563bacf4942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563bacf43c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563bacfda595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563bb00098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563bb00098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563bb00098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563bb00098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563bb00098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563bb00098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563bb00098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563bb00098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563bb00098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563bb00098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563bb220e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563baef6a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563baef755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563baed20d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563baed20d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563baed21808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563baed20944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563baed20944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563baed20944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563bb360294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563bb360b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563bb35f3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563bb361dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2716ba5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563bacf4243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x16, Step #5: \026 Step #5: artifact_prefix='./'; Test unit written to ./oom-a9d3c9cd54b1a392b21ea14904d9a318f74636b7 Step #5: Base64: Fg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 7 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3667154161 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e4e9754d60, 0x55e4e993d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e4e993d720,0x55e4eb7c72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9d3c9cd54b1a392b21ea14904d9a318f74636b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 7 processed earlier; will process 10969 files now Step #5: ==286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e4e02972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e4e68d2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e4e68b546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e4e68b538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e4e029d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e4e01fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e4e01f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e4e028f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e4e32be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e4e32be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e4e32be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e4e32be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e4e32be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e4e32be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e4e32be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e4e32be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e4e32be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e4e32be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e4e54c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e4e221f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e4e222a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e4e1fd5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e4e1fd5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e4e1fd6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e4e1fd5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e4e1fd5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e4e1fd5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e4e68b794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e4e68c07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e4e68a8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e4e68d2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3c36e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e4e01f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34, Step #5: 4 Step #5: artifact_prefix='./'; Test unit written to ./oom-1b6453892473a467d07372d45eb05abc2031647a Step #5: Base64: NA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 8 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3667592937 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea3a6ead60, 0x55ea3a8d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea3a8d3720,0x55ea3c75d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1b6453892473a467d07372d45eb05abc2031647a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 8 processed earlier; will process 10968 files now Step #5: ==322== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea3122d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea37868728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea3784b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea3784b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea31233652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea3119442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea3118ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea31225595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea342548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea342548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea342548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea342548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea342548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea342548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea342548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea342548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea342548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea342548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea3645945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea331b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea331c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea32f6bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea32f6bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea32f6c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea32f6b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea32f6b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea32f6b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea3784d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea378567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea3783e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea37868fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f24a92082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea3118d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41, Step #5: A Step #5: artifact_prefix='./'; Test unit written to ./oom-6dcd4ce23d88e2ee9568ba546c007c63d9131c1b Step #5: Base64: QQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 9 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3668035664 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5589fda40d60, 0x5589fdc2971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5589fdc29720,0x5589ffab32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6dcd4ce23d88e2ee9568ba546c007c63d9131c1b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 9 processed earlier; will process 10967 files now Step #5: ==358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5589f45832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5589fabbe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5589faba146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5589faba138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5589f4589652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5589f44ea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5589f44e4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5589f457b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5589f75aa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5589f75aa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5589f75aa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5589f75aa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5589f75aa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5589f75aa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5589f75aa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5589f75aa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5589f75aa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5589f75aa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5589f97af45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5589f650b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5589f65165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5589f62c1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5589f62c1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5589f62c2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5589f62c1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5589f62c1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5589f62c1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5589faba394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5589fabac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5589fab94529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5589fabbefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff3bc8e8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5589f44e343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c, Step #5: , Step #5: artifact_prefix='./'; Test unit written to ./oom-5c10b5b2cd673a0616d529aa5234b12ee7153808 Step #5: Base64: LA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 10 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3668472935 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f21fdcbd60, 0x55f21ffb471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f21ffb4720,0x55f221e3e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c10b5b2cd673a0616d529aa5234b12ee7153808' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 10 processed earlier; will process 10966 files now Step #5: ==394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f21690e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f21cf49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f21cf2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f21cf2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f216914652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f21687542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f21686fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f216906595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f2199358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f2199358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f2199358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f2199358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f2199358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f2199358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f2199358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f2199358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f2199358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f2199358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f21bb3a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f218896578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f2188a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f21864cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f21864cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f21864d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f21864c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f21864c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f21864c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f21cf2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f21cf377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f21cf1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f21cf49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8327648082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f21686e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x75, Step #5: u Step #5: artifact_prefix='./'; Test unit written to ./oom-51e69892ab49df85c6230ccc57f8e1d1606caccc Step #5: Base64: dQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 11 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3668906206 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ae006b8d60, 0x55ae008a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ae008a1720,0x55ae0272b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/51e69892ab49df85c6230ccc57f8e1d1606caccc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 11 processed earlier; will process 10965 files now Step #5: ==430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55adf71fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55adfd836728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55adfd81946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55adfd81938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55adf7201652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55adf716242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55adf715cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55adf71f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55adfa2228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55adfa2228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55adfa2228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55adfa2228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55adfa2228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55adfa2228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55adfa2228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55adfa2228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55adfa2228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55adfa2228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55adfc42745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55adf9183578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55adf918e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55adf8f39d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55adf8f39d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55adf8f3a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55adf8f39944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55adf8f39944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55adf8f39944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55adfd81b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55adfd8247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55adfd80c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55adfd836fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe99a4ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55adf715b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b, Step #5: { Step #5: artifact_prefix='./'; Test unit written to ./oom-60ba4b2daa4ed4d070fec06687e249e0e6f9ee45 Step #5: Base64: ew== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 12 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3669337671 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56161eb40d60, 0x56161ed2971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56161ed29720,0x561620bb32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/60ba4b2daa4ed4d070fec06687e249e0e6f9ee45' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 12 processed earlier; will process 10964 files now Step #5: ==466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616156832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56161bcbe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56161bca146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56161bca138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561615689652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616155ea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616155e4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56161567b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616186aa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616186aa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616186aa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616186aa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616186aa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616186aa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616186aa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616186aa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616186aa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616186aa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56161a8af45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56161760b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616176165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616173c1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616173c1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616173c2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616173c1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616173c1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616173c1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56161bca394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56161bcac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56161bc94529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56161bcbefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f69242082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616155e343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x59, Step #5: Y Step #5: artifact_prefix='./'; Test unit written to ./oom-23eb4d3f4155395a74e9d534f97ff4c1908f5aac Step #5: Base64: WQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 13 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3669774666 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eace2e8d60, 0x55eace4d171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eace4d1720,0x55ead035b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/23eb4d3f4155395a74e9d534f97ff4c1908f5aac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 13 processed earlier; will process 10963 files now Step #5: ==502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eac4e2b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eacb466728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eacb44946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eacb44938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eac4e31652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eac4d9242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eac4d8cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eac4e23595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eac7e528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eac7e528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eac7e528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eac7e528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eac7e528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eac7e528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eac7e528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eac7e528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eac7e528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eac7e528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eaca05745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eac6db3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eac6dbe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eac6b69d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eac6b69d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eac6b6a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eac6b69944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eac6b69944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eac6b69944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eacb44b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eacb4547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eacb43c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eacb466fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa2cc7f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eac4d8b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66, Step #5: f Step #5: artifact_prefix='./'; Test unit written to ./oom-4a0a19218e082a343a1b17e5333409af9d98f0f5 Step #5: Base64: Zg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 14 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3670208160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f1df72d60, 0x557f1e15b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f1e15b720,0x557f1ffe52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a0a19218e082a343a1b17e5333409af9d98f0f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 14 processed earlier; will process 10962 files now Step #5: #1 pulse cov: 3375 ft: 3376 exec/s: 0 rss: 153Mb Step #5: ==538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f14ab52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f1b0f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f1b0d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f1b0d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f14abb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f14a1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f14a16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f14aad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f17adc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f17adc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f17adc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f17adc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f17adc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f17adc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f17adc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f17adc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f17adc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f17adc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f19ce145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f16a3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f16a485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f167f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f167f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f167f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f167f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f167f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f167f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f1b0d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f1b0de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f1b0c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f1b0f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff84e027082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f14a1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73, Step #5: s Step #5: artifact_prefix='./'; Test unit written to ./oom-a0f1490a20d0211c997b44bc357e1972deab8ae3 Step #5: Base64: cw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 15 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3670684677 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5594d4137d60, 0x5594d432071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5594d4320720,0x5594d61aa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a0f1490a20d0211c997b44bc357e1972deab8ae3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 16 processed earlier; will process 10960 files now Step #5: ==574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5594cac7a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5594d12b5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5594d129846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5594d129838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5594cac80652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5594cabe142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5594cabdbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5594cac72595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5594cdca18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5594cdca18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5594cdca18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5594cdca18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5594cdca18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5594cdca18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5594cdca18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5594cdca18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5594cdca18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5594cdca18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5594cfea645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5594ccc02578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5594ccc0d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5594cc9b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5594cc9b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5594cc9b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5594cc9b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5594cc9b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5594cc9b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5594d129a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5594d12a37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5594d128b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5594d12b5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6be7f6c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5594cabda43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43, Step #5: C Step #5: artifact_prefix='./'; Test unit written to ./oom-32096c2e0eff33d844ee6d675407ace18289357d Step #5: Base64: Qw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 16 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3671119697 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5572f5b48d60, 0x5572f5d3171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5572f5d31720,0x5572f7bbb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/32096c2e0eff33d844ee6d675407ace18289357d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 17 processed earlier; will process 10959 files now Step #5: ==610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5572ec68b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5572f2cc6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5572f2ca946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5572f2ca938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5572ec691652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5572ec5f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5572ec5ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5572ec683595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5572ef6b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5572ef6b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5572ef6b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5572ef6b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5572ef6b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5572ef6b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5572ef6b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5572ef6b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5572ef6b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5572ef6b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5572f18b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5572ee613578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5572ee61e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5572ee3c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5572ee3c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5572ee3ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5572ee3c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5572ee3c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5572ee3c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5572f2cab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5572f2cb47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5572f2c9c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5572f2cc6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb19781082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5572ec5eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x51, Step #5: Q Step #5: artifact_prefix='./'; Test unit written to ./oom-c3156e00d3c2588c639e0d3cf6821258b05761c7 Step #5: Base64: UQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 17 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3671558822 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5569bad18d60, 0x5569baf0171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5569baf01720,0x5569bcd8b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c3156e00d3c2588c639e0d3cf6821258b05761c7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 18 processed earlier; will process 10958 files now Step #5: ==646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5569b185b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5569b7e96728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5569b7e7946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5569b7e7938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5569b1861652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5569b17c242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5569b17bcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5569b1853595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569b48828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569b48828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569b48828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569b48828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569b48828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569b48828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569b48828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569b48828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569b48828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569b48828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569b6a8745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5569b37e3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5569b37ee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5569b3599d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5569b3599d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5569b359a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5569b3599944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5569b3599944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5569b3599944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5569b7e7b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569b7e847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5569b7e6c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5569b7e96fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd9df55e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5569b17bb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x18, Step #5: \030 Step #5: artifact_prefix='./'; Test unit written to ./oom-c2143b1a0db17957bec1b41bb2e5f75aa135981e Step #5: Base64: GA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 18 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3671991663 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d86f646d60, 0x55d86f82f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d86f82f720,0x55d8716b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c2143b1a0db17957bec1b41bb2e5f75aa135981e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 19 processed earlier; will process 10957 files now Step #5: ==682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d8661892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d86c7c4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d86c7a746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d86c7a738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d86618f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d8660f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d8660eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d866181595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d8691b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d8691b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d8691b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d8691b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d8691b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d8691b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d8691b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d8691b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d8691b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d8691b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d86b3b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d868111578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d86811c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d867ec7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d867ec7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d867ec8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d867ec7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d867ec7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d867ec7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d86c7a994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d86c7b27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d86c79a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d86c7c4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91ea284082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d8660e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6a, Step #5: j Step #5: artifact_prefix='./'; Test unit written to ./oom-5c2dd944dde9e08881bef0894fe7b22a5c9c4b06 Step #5: Base64: ag== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 19 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3672443003 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5600bc637d60, 0x5600bc82071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5600bc820720,0x5600be6aa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c2dd944dde9e08881bef0894fe7b22a5c9c4b06' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 20 processed earlier; will process 10956 files now Step #5: ==718== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600b317a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5600b97b5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5600b979846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5600b979838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5600b3180652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600b30e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600b30dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600b3172595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600b61a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600b61a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600b61a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600b61a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600b61a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600b61a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600b61a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600b61a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600b61a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600b61a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600b83a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5600b5102578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600b510d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600b4eb8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600b4eb8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600b4eb9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600b4eb8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600b4eb8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600b4eb8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5600b979a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5600b97a37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5600b978b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5600b97b5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc94b2d6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600b30da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30, Step #5: 0 Step #5: artifact_prefix='./'; Test unit written to ./oom-b6589fc6ab0dc82cf12099d1c2d40ab994e8410c Step #5: Base64: MA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 20 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3672879569 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558006a8ed60, 0x558006c7771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558006c77720,0x558008b012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6589fc6ab0dc82cf12099d1c2d40ab994e8410c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 21 processed earlier; will process 10955 files now Step #5: ==754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557ffd5d12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558003c0c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558003bef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558003bef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557ffd5d7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557ffd53842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557ffd532c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557ffd5c9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5580005f88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5580005f88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5580005f88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5580005f88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5580005f88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5580005f88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5580005f88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5580005f88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5580005f88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5580005f88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5580027fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557fff559578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557fff5645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557fff30fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557fff30fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557fff310808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557fff30f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557fff30f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557fff30f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558003bf194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558003bfa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558003be2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558003c0cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ba4397082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557ffd53143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22, Step #5: \" Step #5: artifact_prefix='./'; Test unit written to ./oom-2ace62c1befa19e3ea37dd52be9f6d508c5163e6 Step #5: Base64: Ig== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 21 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3673316635 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559ddf066d60, 0x559ddf24f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559ddf24f720,0x559de10d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2ace62c1befa19e3ea37dd52be9f6d508c5163e6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 22 processed earlier; will process 10954 files now Step #5: ==790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559dd5ba92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559ddc1e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559ddc1c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559ddc1c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559dd5baf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559dd5b1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559dd5b0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559dd5ba1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559dd8bd08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559dd8bd08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559dd8bd08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559dd8bd08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559dd8bd08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559dd8bd08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559dd8bd08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559dd8bd08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559dd8bd08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559dd8bd08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559ddadd545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559dd7b31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559dd7b3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559dd78e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559dd78e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559dd78e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559dd78e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559dd78e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559dd78e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559ddc1c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559ddc1d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559ddc1ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559ddc1e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff8e859d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559dd5b0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x10, Step #5: \020 Step #5: artifact_prefix='./'; Test unit written to ./oom-6e14a407faae939957b80e641a836735bbdcad5a Step #5: Base64: EA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 22 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3673751562 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f4a4247d60, 0x55f4a443071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f4a4430720,0x55f4a62ba2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6e14a407faae939957b80e641a836735bbdcad5a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 23 processed earlier; will process 10953 files now Step #5: ==826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f49ad8a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f4a13c5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f4a13a846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f4a13a838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f49ad90652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f49acf142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f49acebc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f49ad82595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f49ddb18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f49ddb18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f49ddb18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f49ddb18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f49ddb18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f49ddb18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f49ddb18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f49ddb18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f49ddb18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f49ddb18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f49ffb645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f49cd12578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f49cd1d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f49cac8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f49cac8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f49cac9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f49cac8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f49cac8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f49cac8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f4a13aa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4a13b37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f4a139b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f4a13c5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1d5c843082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f49acea43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25, Step #5: % Step #5: artifact_prefix='./'; Test unit written to ./oom-4345cb1fa27885a8fbfe7c0c830a592cc76a552b Step #5: Base64: JQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 23 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3674180803 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ccbc40ad60, 0x55ccbc5f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ccbc5f3720,0x55ccbe47d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4345cb1fa27885a8fbfe7c0c830a592cc76a552b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 24 processed earlier; will process 10952 files now Step #5: ==862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ccb2f4d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ccb9588728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ccb956b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ccb956b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ccb2f53652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ccb2eb442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ccb2eaec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ccb2f45595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ccb5f748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ccb5f748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ccb5f748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ccb5f748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ccb5f748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ccb5f748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ccb5f748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ccb5f748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ccb5f748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ccb5f748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ccb817945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ccb4ed5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ccb4ee05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ccb4c8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ccb4c8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ccb4c8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ccb4c8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ccb4c8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ccb4c8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ccb956d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ccb95767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ccb955e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ccb9588fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f84dd163082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ccb2ead43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72, Step #5: r Step #5: artifact_prefix='./'; Test unit written to ./oom-4dc7c9ec434ed06502767136789763ec11d2c4b7 Step #5: Base64: cg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 24 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3674621082 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5652f0eebd60, 0x5652f10d471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5652f10d4720,0x5652f2f5e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4dc7c9ec434ed06502767136789763ec11d2c4b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 25 processed earlier; will process 10951 files now Step #5: ==898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5652e7a2e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5652ee069728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5652ee04c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5652ee04c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5652e7a34652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5652e799542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5652e798fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5652e7a26595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652eaa558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652eaa558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652eaa558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652eaa558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652eaa558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652eaa558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652eaa558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652eaa558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652eaa558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652eaa558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5652ecc5a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5652e99b6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652e99c15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5652e976cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5652e976cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5652e976d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5652e976c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5652e976c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5652e976c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5652ee04e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652ee0577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5652ee03f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5652ee069fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4be7cd3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5652e798e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x8, Step #5: \010 Step #5: artifact_prefix='./'; Test unit written to ./oom-8d883f1577ca8c334b7c6d75ccb71209d71ced13 Step #5: Base64: CA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 25 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3675049010 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a823e2d60, 0x555a825cb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a825cb720,0x555a844552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d883f1577ca8c334b7c6d75ccb71209d71ced13' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 26 processed earlier; will process 10950 files now Step #5: ==934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a78f252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a7f560728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a7f54346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a7f54338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a78f2b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a78e8c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a78e86c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a78f1d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a7bf4c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a7bf4c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a7bf4c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a7bf4c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a7bf4c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a7bf4c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a7bf4c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a7bf4c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a7bf4c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a7bf4c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a7e15145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a7aead578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a7aeb85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a7ac63d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a7ac63d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a7ac64808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a7ac63944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a7ac63944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a7ac63944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a7f54594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a7f54e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a7f536529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a7f560fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8dbcc8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a78e8543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d, Step #5: M Step #5: artifact_prefix='./'; Test unit written to ./oom-c63ae6dd4fc9f9dda66970e827d13f7c73fe841c Step #5: Base64: TQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 26 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3675486249 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559d01e92d60, 0x559d0207b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559d0207b720,0x559d03f052c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c63ae6dd4fc9f9dda66970e827d13f7c73fe841c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 27 processed earlier; will process 10949 files now Step #5: ==970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559cf89d52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559cff010728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559cfeff346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559cfeff338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559cf89db652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559cf893c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559cf8936c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559cf89cd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559cfb9fc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559cfb9fc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559cfb9fc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559cfb9fc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559cfb9fc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559cfb9fc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559cfb9fc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559cfb9fc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559cfb9fc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559cfb9fc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559cfdc0145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559cfa95d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559cfa9685a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559cfa713d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559cfa713d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559cfa714808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559cfa713944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559cfa713944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559cfa713944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559cfeff594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559cfeffe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559cfefe6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559cff010fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91d4510082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559cf893543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x56, Step #5: V Step #5: artifact_prefix='./'; Test unit written to ./oom-c9ee5681d3c59f7541c27a38b67edf46259e187b Step #5: Base64: Vg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 27 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3675918762 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5610e4e98d60, 0x5610e508171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5610e5081720,0x5610e6f0b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9ee5681d3c59f7541c27a38b67edf46259e187b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 28 processed earlier; will process 10948 files now Step #5: ==1006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5610db9db2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5610e2016728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5610e1ff946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5610e1ff938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5610db9e1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5610db94242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5610db93cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5610db9d3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5610dea028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5610dea028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5610dea028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5610dea028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5610dea028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5610dea028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5610dea028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5610dea028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5610dea028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5610dea028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5610e0c0745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5610dd963578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5610dd96e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5610dd719d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5610dd719d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5610dd71a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5610dd719944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5610dd719944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5610dd719944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5610e1ffb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5610e20047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5610e1fec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5610e2016fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efc11675082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5610db93b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x17, Step #5: \027 Step #5: artifact_prefix='./'; Test unit written to ./oom-094d98b399bf4ace7b8899ab7081e867fb03f869 Step #5: Base64: Fw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 28 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3676360905 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d46fbc0d60, 0x55d46fda971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d46fda9720,0x55d471c332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/094d98b399bf4ace7b8899ab7081e867fb03f869' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 29 processed earlier; will process 10947 files now Step #5: ==1042== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4667032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d46cd3e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d46cd2146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d46cd2138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d466709652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d46666a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d466664c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4666fb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d46972a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d46972a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d46972a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d46972a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d46972a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d46972a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d46972a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d46972a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d46972a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d46972a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d46b92f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d46868b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4686965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d468441d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d468441d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d468442808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d468441944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d468441944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d468441944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d46cd2394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d46cd2c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d46cd14529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d46cd3efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f63b8b6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d46666343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32, Step #5: 2 Step #5: artifact_prefix='./'; Test unit written to ./oom-da4b9237bacccdf19c0760cab7aec4a8359010b0 Step #5: Base64: Mg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 29 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3676798885 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555c5e195d60, 0x555c5e37e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555c5e37e720,0x555c602082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/da4b9237bacccdf19c0760cab7aec4a8359010b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 30 processed earlier; will process 10946 files now Step #5: ==1078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555c54cd82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555c5b313728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555c5b2f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555c5b2f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555c54cde652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555c54c3f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555c54c39c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555c54cd0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555c57cff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555c57cff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555c57cff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555c57cff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555c57cff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555c57cff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555c57cff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555c57cff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555c57cff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555c57cff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555c59f0445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555c56c60578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555c56c6b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555c56a16d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555c56a16d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555c56a17808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555c56a16944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555c56a16944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555c56a16944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555c5b2f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555c5b3017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555c5b2e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555c5b313fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd267d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555c54c3843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11, Step #5: \021 Step #5: artifact_prefix='./'; Test unit written to ./oom-a8abd012eb59b862bf9bc1ea443d2f35a1a2e222 Step #5: Base64: EQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 30 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3677238861 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556db6d37d60, 0x556db6f2071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556db6f20720,0x556db8daa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a8abd012eb59b862bf9bc1ea443d2f35a1a2e222' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 31 processed earlier; will process 10945 files now Step #5: ==1114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556dad87a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556db3eb5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556db3e9846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556db3e9838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556dad880652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556dad7e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556dad7dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556dad872595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556db08a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556db08a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556db08a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556db08a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556db08a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556db08a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556db08a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556db08a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556db08a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556db08a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556db2aa645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556daf802578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556daf80d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556daf5b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556daf5b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556daf5b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556daf5b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556daf5b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556daf5b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556db3e9a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556db3ea37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556db3e8b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556db3eb5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3fe86b1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556dad7da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44, Step #5: D Step #5: artifact_prefix='./'; Test unit written to ./oom-50c9e8d5fc98727b4bbc93cf5d64a68db647f04f Step #5: Base64: RA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 31 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3677670883 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f53d1ffd60, 0x55f53d3e871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f53d3e8720,0x55f53f2722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/50c9e8d5fc98727b4bbc93cf5d64a68db647f04f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 32 processed earlier; will process 10944 files now Step #5: #1 pulse cov: 3358 ft: 3359 exec/s: 0 rss: 153Mb Step #5: ==1150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f533d422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f53a37d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f53a36046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f53a36038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f533d48652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f533ca942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f533ca3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f533d3a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f536d698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f536d698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f536d698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f536d698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f536d698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f536d698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f536d698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f536d698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f536d698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f536d698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f538f6e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f535cca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f535cd55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f535a80d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f535a80d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f535a81808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f535a80944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f535a80944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f535a80944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f53a36294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f53a36b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f53a353529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f53a37dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0a04586082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f533ca243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28, Step #5: ( Step #5: artifact_prefix='./'; Test unit written to ./oom-28ed3a797da3c48c309a4ef792147f3c56cfec40 Step #5: Base64: KA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 32 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3678147719 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56137ef28d60, 0x56137f11171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56137f111720,0x561380f9b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28ed3a797da3c48c309a4ef792147f3c56cfec40' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 34 processed earlier; will process 10942 files now Step #5: #1 pulse cov: 3435 ft: 3436 exec/s: 0 rss: 153Mb Step #5: ==1186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561375a6b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56137c0a6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56137c08946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56137c08938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561375a71652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5613759d242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5613759ccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561375a63595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561378a928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561378a928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561378a928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561378a928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561378a928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561378a928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561378a928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561378a928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561378a928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561378a928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56137ac9745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5613779f3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5613779fe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5613777a9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5613777a9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5613777aa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5613777a9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5613777a9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5613777a9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56137c08b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56137c0947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56137c07c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56137c0a6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f06cfdd4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5613759cb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6c, Step #5: l Step #5: artifact_prefix='./'; Test unit written to ./oom-07c342be6e560e7f43842e2e21b774e61d85f047 Step #5: Base64: bA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 33 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3678621554 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56488de38d60, 0x56488e02171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56488e021720,0x56488feab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/07c342be6e560e7f43842e2e21b774e61d85f047' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 36 processed earlier; will process 10940 files now Step #5: ==1222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56488497b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56488afb6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56488af9946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56488af9938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564884981652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5648848e242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5648848dcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564884973595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5648879a28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5648879a28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5648879a28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5648879a28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5648879a28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5648879a28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5648879a28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5648879a28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5648879a28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5648879a28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564889ba745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564886903578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56488690e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5648866b9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5648866b9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5648866ba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5648866b9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5648866b9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5648866b9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56488af9b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56488afa47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56488af8c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56488afb6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8c5ee54082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5648848db43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x57, Step #5: W Step #5: artifact_prefix='./'; Test unit written to ./oom-e2415cb7f63df0c9de23362326ad3c37a9adfc96 Step #5: Base64: Vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 34 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3679048018 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b631de9d60, 0x55b631fd271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b631fd2720,0x55b633e5c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e2415cb7f63df0c9de23362326ad3c37a9adfc96' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 37 processed earlier; will process 10939 files now Step #5: ==1258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b62892c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b62ef67728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b62ef4a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b62ef4a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b628932652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b62889342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b62888dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b628924595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b62b9538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b62b9538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b62b9538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b62b9538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b62b9538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b62b9538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b62b9538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b62b9538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b62b9538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b62b9538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b62db5845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b62a8b4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b62a8bf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b62a66ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b62a66ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b62a66b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b62a66a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b62a66a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b62a66a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b62ef4c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b62ef557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b62ef3d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b62ef67fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f68ccda6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b62888c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xfd, Step #5: \375 Step #5: artifact_prefix='./'; Test unit written to ./oom-b54664965911c6fe91e18cd01b68a75c8183b530 Step #5: Base64: /Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 35 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3679468541 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eb2f37dd60, 0x55eb2f56671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eb2f566720,0x55eb313f02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b54664965911c6fe91e18cd01b68a75c8183b530' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 38 processed earlier; will process 10938 files now Step #5: #1 pulse cov: 3376 ft: 3377 exec/s: 0 rss: 153Mb Step #5: ==1294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eb25ec02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eb2c4fb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eb2c4de46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eb2c4de38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eb25ec6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eb25e2742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eb25e21c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eb25eb8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eb28ee78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eb28ee78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eb28ee78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eb28ee78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eb28ee78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eb28ee78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eb28ee78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eb28ee78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eb28ee78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eb28ee78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eb2b0ec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eb27e48578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eb27e535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eb27bfed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eb27bfed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eb27bff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eb27bfe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eb27bfe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eb27bfe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eb2c4e094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eb2c4e97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eb2c4d1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eb2c4fbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f83fa1f8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eb25e2043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50, Step #5: P Step #5: artifact_prefix='./'; Test unit written to ./oom-511993d3c99719e38a6779073019dacd7178ddb9 Step #5: Base64: UA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 36 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3679947677 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556977562d60, 0x55697774b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55697774b720,0x5569795d52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/511993d3c99719e38a6779073019dacd7178ddb9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 40 processed earlier; will process 10936 files now Step #5: ==1330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55696e0a52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5569746e0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5569746c346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5569746c338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55696e0ab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55696e00c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55696e006c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55696e09d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569710cc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569710cc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569710cc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569710cc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569710cc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569710cc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569710cc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569710cc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569710cc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569710cc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569732d145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55697002d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5569700385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55696fde3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55696fde3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55696fde4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55696fde3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55696fde3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55696fde3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5569746c594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569746ce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5569746b6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5569746e0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa6a0d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55696e00543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f, Step #5: ? Step #5: artifact_prefix='./'; Test unit written to ./oom-5bab61eb53176449e25c2c82f172b82cb13ffb9d Step #5: Base64: Pw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 37 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3680377546 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb4fe96d60, 0x55fb5007f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb5007f720,0x55fb51f092c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5bab61eb53176449e25c2c82f172b82cb13ffb9d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 41 processed earlier; will process 10935 files now Step #5: ==1366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb469d92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb4d014728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb4cff746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb4cff738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb469df652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb4694042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb4693ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb469d1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb49a008c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb49a008c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb49a008c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb49a008c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb49a008c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb49a008c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb49a008c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb49a008c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb49a008c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb49a008c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb4bc0545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb48961578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb4896c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb48717d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb48717d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb48718808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb48717944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb48717944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb48717944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb4cff994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb4d0027b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb4cfea529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb4d014fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa1267c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb4693943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33, Step #5: 3 Step #5: artifact_prefix='./'; Test unit written to ./oom-77de68daecd823babbb58edb1c8e14d7106e83bb Step #5: Base64: Mw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 38 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3680810556 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ac653dbd60, 0x55ac655c471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ac655c4720,0x55ac6744e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/77de68daecd823babbb58edb1c8e14d7106e83bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 42 processed earlier; will process 10934 files now Step #5: ==1402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ac5bf1e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ac62559728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ac6253c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ac6253c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ac5bf24652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ac5be8542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ac5be7fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ac5bf16595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ac5ef458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ac5ef458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ac5ef458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ac5ef458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ac5ef458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ac5ef458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ac5ef458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ac5ef458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ac5ef458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ac5ef458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ac6114a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ac5dea6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ac5deb15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ac5dc5cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ac5dc5cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ac5dc5d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ac5dc5c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ac5dc5c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ac5dc5c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ac6253e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ac625477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ac6252f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ac62559fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f29a942a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ac5be7e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb, Step #5: \013 Step #5: artifact_prefix='./'; Test unit written to ./oom-067d5096f219c64b53bb1c7d5e3754285b565a47 Step #5: Base64: Cw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 39 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3681233901 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a30e33cd60, 0x55a30e52571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a30e525720,0x55a3103af2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/067d5096f219c64b53bb1c7d5e3754285b565a47' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 43 processed earlier; will process 10933 files now Step #5: ==1438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a304e7f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a30b4ba728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a30b49d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a30b49d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a304e85652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a304de642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a304de0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a304e77595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a307ea68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a307ea68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a307ea68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a307ea68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a307ea68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a307ea68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a307ea68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a307ea68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a307ea68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a307ea68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a30a0ab45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a306e07578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a306e125a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a306bbdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a306bbdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a306bbe808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a306bbd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a306bbd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a306bbd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a30b49f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a30b4a87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a30b490529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a30b4bafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd45dbb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a304ddf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31, Step #5: 1 Step #5: artifact_prefix='./'; Test unit written to ./oom-356a192b7913b04c54574d18c28d46e6395428ab Step #5: Base64: MQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 40 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3681672014 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560cb75e8d60, 0x560cb77d171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560cb77d1720,0x560cb965b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/356a192b7913b04c54574d18c28d46e6395428ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 44 processed earlier; will process 10932 files now Step #5: ==1474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560cae12b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560cb4766728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560cb474946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560cb474938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560cae131652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560cae09242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560cae08cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560cae123595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560cb11528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560cb11528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560cb11528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560cb11528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560cb11528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560cb11528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560cb11528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560cb11528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560cb11528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560cb11528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560cb335745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560cb00b3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560cb00be5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560cafe69d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560cafe69d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560cafe6a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560cafe69944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560cafe69944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560cafe69944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560cb474b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560cb47547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560cb473c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560cb4766fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4d84f4c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560cae08b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-b858cb282617fb0956d960215c8e84d1ccf909c6 Step #5: Base64: IA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 41 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3682097418 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565401a7ed60, 0x565401c6771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565401c67720,0x565403af12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b858cb282617fb0956d960215c8e84d1ccf909c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 45 processed earlier; will process 10931 files now Step #5: ==1510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653f85c12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5653febfc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5653febdf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5653febdf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5653f85c7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5653f852842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5653f8522c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5653f85b9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653fb5e88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653fb5e88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653fb5e88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653fb5e88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653fb5e88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653fb5e88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653fb5e88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653fb5e88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653fb5e88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653fb5e88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5653fd7ed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5653fa549578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653fa5545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5653fa2ffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5653fa2ffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5653fa300808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5653fa2ff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5653fa2ff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5653fa2ff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5653febe194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5653febea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5653febd2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5653febfcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9417673082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5653f852143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdd, Step #5: \335 Step #5: artifact_prefix='./'; Test unit written to ./oom-a4ac408fb9d6def070ad3a76312ca092863048e5 Step #5: Base64: 3Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 42 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3682515937 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cc11d4fd60, 0x55cc11f3871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cc11f38720,0x55cc13dc22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a4ac408fb9d6def070ad3a76312ca092863048e5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 46 processed earlier; will process 10930 files now Step #5: ==1546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cc088922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cc0eecd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cc0eeb046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cc0eeb038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cc08898652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cc087f942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cc087f3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cc0888a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cc0b8b98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cc0b8b98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cc0b8b98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cc0b8b98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cc0b8b98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cc0b8b98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cc0b8b98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cc0b8b98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cc0b8b98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cc0b8b98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cc0dabe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cc0a81a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cc0a8255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cc0a5d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cc0a5d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cc0a5d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cc0a5d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cc0a5d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cc0a5d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cc0eeb294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cc0eebb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cc0eea3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cc0eecdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff7cac96082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cc087f243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xfc, Step #5: \374 Step #5: artifact_prefix='./'; Test unit written to ./oom-ab461f6b8a6842a473257a2561c1fbdf91bdfe77 Step #5: Base64: /A== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 43 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3682939551 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b7070fd60, 0x559b708f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b708f8720,0x559b727822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab461f6b8a6842a473257a2561c1fbdf91bdfe77' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 47 processed earlier; will process 10929 files now Step #5: ==1582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b672522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b6d88d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b6d87046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b6d87038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b67258652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b671b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b671b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b6724a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b6a2798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b6a2798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b6a2798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b6a2798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b6a2798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b6a2798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b6a2798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b6a2798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b6a2798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b6a2798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b6c47e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b691da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b691e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b68f90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b68f90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b68f91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b68f90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b68f90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b68f90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b6d87294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b6d87b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b6d863529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b6d88dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffae9867082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b671b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f, Step #5: o Step #5: artifact_prefix='./'; Test unit written to ./oom-7a81af3e591ac713f81ea1efe93dcf36157d8376 Step #5: Base64: bw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 44 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3683377409 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564dbb99fd60, 0x564dbbb8871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564dbbb88720,0x564dbda122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7a81af3e591ac713f81ea1efe93dcf36157d8376' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 48 processed earlier; will process 10928 files now Step #5: ==1618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564db24e22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564db8b1d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564db8b0046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564db8b0038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564db24e8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564db244942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564db2443c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564db24da595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564db55098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564db55098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564db55098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564db55098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564db55098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564db55098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564db55098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564db55098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564db55098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564db55098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564db770e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564db446a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564db44755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564db4220d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564db4220d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564db4221808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564db4220944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564db4220944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564db4220944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564db8b0294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564db8b0b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564db8af3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564db8b1dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f750f1f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564db244243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x67, Step #5: g Step #5: artifact_prefix='./'; Test unit written to ./oom-54fd1711209fb1c0781092374132c66e79e2241b Step #5: Base64: Zw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 45 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3683814047 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56029242ed60, 0x56029261771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560292617720,0x5602944a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/54fd1711209fb1c0781092374132c66e79e2241b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 49 processed earlier; will process 10927 files now Step #5: ==1654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560288f712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56028f5ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56028f58f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56028f58f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560288f77652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560288ed842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560288ed2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560288f69595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56028bf988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56028bf988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56028bf988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56028bf988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56028bf988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56028bf988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56028bf988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56028bf988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56028bf988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56028bf988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56028e19d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56028aef9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56028af045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56028acafd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56028acafd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56028acb0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56028acaf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56028acaf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56028acaf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56028f59194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56028f59a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56028f582529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56028f5acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f972edcf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560288ed143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f, Step #5: \177 Step #5: artifact_prefix='./'; Test unit written to ./oom-23833462f55515a900e016db2eb943fb474c19f6 Step #5: Base64: fw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 46 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3684242743 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561d518b9d60, 0x561d51aa271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561d51aa2720,0x561d5392c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/23833462f55515a900e016db2eb943fb474c19f6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 50 processed earlier; will process 10926 files now Step #5: ==1690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561d483fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561d4ea37728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561d4ea1a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561d4ea1a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561d48402652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561d4836342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561d4835dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561d483f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561d4b4238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561d4b4238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561d4b4238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561d4b4238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561d4b4238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561d4b4238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561d4b4238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561d4b4238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561d4b4238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561d4b4238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561d4d62845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561d4a384578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561d4a38f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561d4a13ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561d4a13ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561d4a13b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561d4a13a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561d4a13a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561d4a13a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561d4ea1c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561d4ea257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561d4ea0d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561d4ea37fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd097286082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561d4835c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd, Step #5: \015 Step #5: artifact_prefix='./'; Test unit written to ./oom-11f4de6b8b45cf8051b1d17fa4cde9ad935cea41 Step #5: Base64: DQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 47 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3684660992 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564b30387d60, 0x564b3057071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564b30570720,0x564b323fa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11f4de6b8b45cf8051b1d17fa4cde9ad935cea41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 51 processed earlier; will process 10925 files now Step #5: ==1726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564b26eca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564b2d505728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564b2d4e846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564b2d4e838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564b26ed0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564b26e3142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564b26e2bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564b26ec2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564b29ef18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564b29ef18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564b29ef18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564b29ef18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564b29ef18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564b29ef18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564b29ef18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564b29ef18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564b29ef18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564b29ef18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564b2c0f645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564b28e52578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564b28e5d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564b28c08d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564b28c08d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564b28c09808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564b28c08944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564b28c08944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564b28c08944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564b2d4ea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564b2d4f37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564b2d4db529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564b2d505fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc8658e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564b26e2a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4f, Step #5: O Step #5: artifact_prefix='./'; Test unit written to ./oom-08a914cde05039694ef0194d9ee79ff9a79dde33 Step #5: Base64: Tw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 48 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3685093128 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b429dc9d60, 0x55b429fb271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b429fb2720,0x55b42be3c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/08a914cde05039694ef0194d9ee79ff9a79dde33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 52 processed earlier; will process 10924 files now Step #5: ==1762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b42090c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b426f47728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b426f2a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b426f2a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b420912652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b42087342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b42086dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b420904595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b4239338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b4239338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b4239338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b4239338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b4239338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b4239338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b4239338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b4239338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b4239338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b4239338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b425b3845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b422894578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b42289f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b42264ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b42264ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b42264b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b42264a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b42264a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b42264a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b426f2c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b426f357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b426f1d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b426f47fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffb0f1bd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b42086c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x80, Step #5: \200 Step #5: artifact_prefix='./'; Test unit written to ./oom-c78ebd3c85a39a596d9f5cfd2b8d240bc1b9c125 Step #5: Base64: gA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 49 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3685512929 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5588737b2d60, 0x55887399b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55887399b720,0x5588758252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c78ebd3c85a39a596d9f5cfd2b8d240bc1b9c125' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 53 processed earlier; will process 10923 files now Step #5: ==1798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55886a2f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558870930728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55887091346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55887091338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55886a2fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55886a25c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55886a256c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55886a2ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55886d31c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55886d31c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55886d31c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55886d31c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55886d31c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55886d31c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55886d31c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55886d31c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55886d31c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55886d31c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55886f52145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55886c27d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55886c2885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55886c033d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55886c033d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55886c034808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55886c033944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55886c033944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55886c033944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55887091594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55887091e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558870906529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558870930fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f80f90b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55886a25543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69, Step #5: i Step #5: artifact_prefix='./'; Test unit written to ./oom-042dc4512fa3d391c5170cf3aa61e6a638f84342 Step #5: Base64: aQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 50 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3685950752 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563659527d60, 0x56365971071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563659710720,0x56365b59a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/042dc4512fa3d391c5170cf3aa61e6a638f84342' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 54 processed earlier; will process 10922 files now Step #5: ==1834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56365006a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5636566a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56365668846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56365668838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563650070652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56364ffd142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56364ffcbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563650062595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5636530918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5636530918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5636530918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5636530918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5636530918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5636530918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5636530918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5636530918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5636530918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5636530918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56365529645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563651ff2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563651ffd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563651da8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563651da8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563651da9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563651da8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563651da8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563651da8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56365668a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5636566937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56365667b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5636566a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f52a38bd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56364ffca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e, Step #5: N Step #5: artifact_prefix='./'; Test unit written to ./oom-b51a60734da64be0e618bacbea2865a8a7dcd669 Step #5: Base64: Tg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 51 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3686384092 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d41f72d60, 0x558d4215b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d4215b720,0x558d43fe52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b51a60734da64be0e618bacbea2865a8a7dcd669' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 55 processed earlier; will process 10921 files now Step #5: ==1870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d38ab52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d3f0f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d3f0d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d3f0d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d38abb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d38a1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d38a16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d38aad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d3badc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d3badc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d3badc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d3badc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d3badc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d3badc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d3badc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d3badc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d3badc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d3badc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d3dce145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d3aa3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d3aa485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d3a7f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d3a7f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d3a7f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d3a7f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d3a7f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d3a7f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d3f0d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d3f0de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d3f0c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d3f0f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3f65696082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d38a1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1f, Step #5: \037 Step #5: artifact_prefix='./'; Test unit written to ./oom-953efe8f531a5a87f6d2d5a65b78b05e55599abc Step #5: Base64: Hw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 52 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3686820830 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55983d0ded60, 0x55983d2c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55983d2c7720,0x55983f1512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/953efe8f531a5a87f6d2d5a65b78b05e55599abc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 56 processed earlier; will process 10920 files now Step #5: ==1906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559833c212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55983a25c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55983a23f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55983a23f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559833c27652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559833b8842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559833b82c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559833c19595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559836c488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559836c488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559836c488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559836c488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559836c488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559836c488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559836c488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559836c488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559836c488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559836c488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559838e4d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559835ba9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559835bb45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55983595fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55983595fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559835960808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55983595f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55983595f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55983595f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55983a24194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55983a24a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55983a232529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55983a25cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efefa66c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559833b8143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d, Step #5: m Step #5: artifact_prefix='./'; Test unit written to ./oom-6b0d31c0d563223024da45691584643ac78c96e8 Step #5: Base64: bQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 53 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3687256571 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a227facd60, 0x55a22819571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a228195720,0x55a22a01f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b0d31c0d563223024da45691584643ac78c96e8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 57 processed earlier; will process 10919 files now Step #5: ==1942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a21eaef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a22512a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a22510d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a22510d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a21eaf5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a21ea5642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a21ea50c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a21eae7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a221b168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a221b168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a221b168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a221b168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a221b168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a221b168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a221b168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a221b168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a221b168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a221b168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a223d1b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a220a77578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a220a825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a22082dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a22082dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a22082e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a22082d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a22082d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a22082d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a22510f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2251187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a225100529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a22512afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0016fa6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a21ea4f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4b, Step #5: K Step #5: artifact_prefix='./'; Test unit written to ./oom-a7ee38bb7be4fc44198cb2685d9601dcf2b9f569 Step #5: Base64: Sw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 54 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3687694090 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5645e0eb4d60, 0x5645e109d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5645e109d720,0x5645e2f272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a7ee38bb7be4fc44198cb2685d9601dcf2b9f569' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 58 processed earlier; will process 10918 files now Step #5: ==1978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5645d79f72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5645de032728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5645de01546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5645de01538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5645d79fd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5645d795e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5645d7958c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5645d79ef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5645daa1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5645daa1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5645daa1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5645daa1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5645daa1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5645daa1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5645daa1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5645daa1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5645daa1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5645daa1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5645dcc2345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5645d997f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5645d998a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5645d9735d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5645d9735d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5645d9736808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5645d9735944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5645d9735944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5645d9735944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5645de01794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5645de0207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5645de008529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5645de032fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4aa9476082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5645d795743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf7, Step #5: \367 Step #5: artifact_prefix='./'; Test unit written to ./oom-73b74736664ad85828ce1be2e29fb4a68d24402b Step #5: Base64: 9w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 55 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3688111741 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5633f7688d60, 0x5633f787171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5633f7871720,0x5633f96fb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/73b74736664ad85828ce1be2e29fb4a68d24402b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 59 processed earlier; will process 10917 files now Step #5: ==2014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5633ee1cb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5633f4806728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5633f47e946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5633f47e938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5633ee1d1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633ee13242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633ee12cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5633ee1c3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5633f11f28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5633f11f28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5633f11f28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5633f11f28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5633f11f28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5633f11f28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5633f11f28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5633f11f28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5633f11f28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5633f11f28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5633f33f745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633f0153578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633f015e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5633eff09d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5633eff09d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5633eff0a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5633eff09944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5633eff09944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5633eff09944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5633f47eb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5633f47f47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5633f47dc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5633f4806fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1535fbf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633ee12b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6b, Step #5: k Step #5: artifact_prefix='./'; Test unit written to ./oom-13fbd79c3d390e5d6585a21e11ff5ec1970cff0c Step #5: Base64: aw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 56 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3688558140 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5623e84bbd60, 0x5623e86a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5623e86a4720,0x5623ea52e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/13fbd79c3d390e5d6585a21e11ff5ec1970cff0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 60 processed earlier; will process 10916 files now Step #5: ==2050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5623deffe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5623e5639728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5623e561c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5623e561c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5623df004652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5623def6542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5623def5fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5623deff6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623e20258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623e20258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623e20258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623e20258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623e20258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623e20258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623e20258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623e20258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623e20258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623e20258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5623e422a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5623e0f86578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5623e0f915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5623e0d3cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5623e0d3cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5623e0d3d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5623e0d3c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5623e0d3c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5623e0d3c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5623e561e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623e56277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5623e560f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5623e5639fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f697ab49082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5623def5e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42, Step #5: B Step #5: artifact_prefix='./'; Test unit written to ./oom-ae4f281df5a5d0ff3cad6371f76d5c29b6d953ec Step #5: Base64: Qg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 57 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3688995941 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559104d70d60, 0x559104f5971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559104f59720,0x559106de32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae4f281df5a5d0ff3cad6371f76d5c29b6d953ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 61 processed earlier; will process 10915 files now Step #5: ==2086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5590fb8b32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559101eee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559101ed146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559101ed138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5590fb8b9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5590fb81a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5590fb814c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5590fb8ab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590fe8da8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590fe8da8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590fe8da8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590fe8da8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590fe8da8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590fe8da8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590fe8da8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590fe8da8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590fe8da8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590fe8da8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559100adf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5590fd83b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5590fd8465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5590fd5f1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5590fd5f1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5590fd5f2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5590fd5f1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5590fd5f1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5590fd5f1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559101ed394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559101edc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559101ec4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559101eeefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2c82832082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5590fb81343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1e, Step #5: \036 Step #5: artifact_prefix='./'; Test unit written to ./oom-7fd88c329b63b57572a0032cf14e3e9ec861ce5f Step #5: Base64: Hg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 58 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3689437866 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564b9f177d60, 0x564b9f36071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564b9f360720,0x564ba11ea2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7fd88c329b63b57572a0032cf14e3e9ec861ce5f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 62 processed earlier; will process 10914 files now Step #5: ==2122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564b95cba2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564b9c2f5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564b9c2d846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564b9c2d838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564b95cc0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564b95c2142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564b95c1bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564b95cb2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564b98ce18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564b98ce18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564b98ce18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564b98ce18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564b98ce18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564b98ce18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564b98ce18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564b98ce18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564b98ce18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564b98ce18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564b9aee645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564b97c42578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564b97c4d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564b979f8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564b979f8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564b979f9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564b979f8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564b979f8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564b979f8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564b9c2da94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564b9c2e37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564b9c2cb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564b9c2f5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb61cf5a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564b95c1a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3, Step #5: \363 Step #5: artifact_prefix='./'; Test unit written to ./oom-0a80baa1797615faddb0ccfaa6d46382a6b3e0e2 Step #5: Base64: 8w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 59 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3689881154 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56032fc2fd60, 0x56032fe1871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56032fe18720,0x560331ca22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0a80baa1797615faddb0ccfaa6d46382a6b3e0e2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 63 processed earlier; will process 10913 files now Step #5: ==2158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5603267722d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56032cdad728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56032cd9046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56032cd9038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560326778652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5603266d942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5603266d3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56032676a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5603297998c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5603297998c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5603297998c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5603297998c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5603297998c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5603297998c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5603297998c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5603297998c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5603297998c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5603297998c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56032b99e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5603286fa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5603287055a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5603284b0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5603284b0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5603284b1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5603284b0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5603284b0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5603284b0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56032cd9294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56032cd9b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56032cd83529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56032cdadfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f668194a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5603266d243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c, Step #5: < Step #5: artifact_prefix='./'; Test unit written to ./oom-c4dd3c8cdd8d7c95603dd67f1cd873d5f9148b29 Step #5: Base64: PA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 60 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3690316196 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5589cadeed60, 0x5589cafd771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5589cafd7720,0x5589cce612c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c4dd3c8cdd8d7c95603dd67f1cd873d5f9148b29' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 64 processed earlier; will process 10912 files now Step #5: ==2194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5589c19312d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5589c7f6c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5589c7f4f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5589c7f4f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5589c1937652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5589c189842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5589c1892c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5589c1929595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5589c49588c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5589c49588c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5589c49588c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5589c49588c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5589c49588c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5589c49588c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5589c49588c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5589c49588c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5589c49588c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5589c49588c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5589c6b5d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5589c38b9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5589c38c45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5589c366fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5589c366fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5589c3670808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5589c366f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5589c366f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5589c366f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5589c7f5194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5589c7f5a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5589c7f42529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5589c7f6cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f04b28b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5589c189143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc, Step #5: \014 Step #5: artifact_prefix='./'; Test unit written to ./oom-1e32e3c360501a0ede378bc45a24420dc2e53fba Step #5: Base64: DA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 61 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3690742787 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562cf029ad60, 0x562cf048371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562cf0483720,0x562cf230d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1e32e3c360501a0ede378bc45a24420dc2e53fba' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 65 processed earlier; will process 10911 files now Step #5: ==2230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ce6ddd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562ced418728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562ced3fb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562ced3fb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ce6de3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ce6d4442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ce6d3ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ce6dd5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562ce9e048c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562ce9e048c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562ce9e048c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562ce9e048c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562ce9e048c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562ce9e048c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562ce9e048c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562ce9e048c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562ce9e048c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562ce9e048c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562cec00945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ce8d65578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ce8d705a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ce8b1bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ce8b1bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ce8b1c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ce8b1b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ce8b1b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ce8b1b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562ced3fd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562ced4067b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562ced3ee529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562ced418fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2a29795082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ce6d3d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27, Step #5: ' Step #5: artifact_prefix='./'; Test unit written to ./oom-bb589d0621e5472f470fa3425a234c74b1e202e8 Step #5: Base64: Jw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 62 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3691180566 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562838869d60, 0x562838a5271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562838a52720,0x56283a8dc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bb589d0621e5472f470fa3425a234c74b1e202e8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 66 processed earlier; will process 10910 files now Step #5: ==2266== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56282f3ac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628359e7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628359ca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628359ca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56282f3b2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56282f31342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56282f30dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56282f3a4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628323d38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628323d38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628323d38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628323d38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628323d38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628323d38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628323d38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628323d38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628323d38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628323d38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628345d845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562831334578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56283133f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5628310ead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5628310ead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5628310eb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5628310ea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5628310ea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5628310ea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628359cc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628359d57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628359bd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628359e7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c8d5a0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56282f30c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0, Step #5: \000 Step #5: artifact_prefix='./'; Test unit written to ./oom-5ba93c9db0cff93f52b521d7420e43f6eda2784f Step #5: Base64: AA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 63 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3691610827 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5591a711ed60, 0x5591a730771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5591a7307720,0x5591a91912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ba93c9db0cff93f52b521d7420e43f6eda2784f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 67 processed earlier; will process 10909 files now Step #5: ==2302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55919dc612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591a429c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5591a427f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5591a427f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55919dc67652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55919dbc842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55919dbc2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55919dc59595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5591a0c888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5591a0c888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5591a0c888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5591a0c888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5591a0c888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5591a0c888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5591a0c888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5591a0c888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5591a0c888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5591a0c888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5591a2e8d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55919fbe9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55919fbf45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55919f99fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55919f99fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55919f9a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55919f99f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55919f99f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55919f99f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5591a428194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591a428a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5591a4272529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591a429cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5527e22082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55919dbc143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77, Step #5: w Step #5: artifact_prefix='./'; Test unit written to ./oom-aff024fe4ab0fece4091de044c58c9ae4233383a Step #5: Base64: dw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 64 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3692047421 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5645eb083d60, 0x5645eb26c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5645eb26c720,0x5645ed0f62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aff024fe4ab0fece4091de044c58c9ae4233383a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 68 processed earlier; will process 10908 files now Step #5: ==2338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5645e1bc62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5645e8201728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5645e81e446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5645e81e438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5645e1bcc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5645e1b2d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5645e1b27c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5645e1bbe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5645e4bed8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5645e4bed8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5645e4bed8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5645e4bed8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5645e4bed8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5645e4bed8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5645e4bed8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5645e4bed8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5645e4bed8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5645e4bed8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5645e6df245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5645e3b4e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5645e3b595a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5645e3904d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5645e3904d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5645e3905808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5645e3904944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5645e3904944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5645e3904944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5645e81e694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5645e81ef7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5645e81d7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5645e8201fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4f1f80082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5645e1b2643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa, Step #5: \012 Step #5: artifact_prefix='./'; Test unit written to ./oom-adc83b19e793491b1c6ea0fd8b46cd9f32e592fc Step #5: Base64: Cg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 65 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3692481778 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5569cb666d60, 0x5569cb84f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5569cb84f720,0x5569cd6d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/adc83b19e793491b1c6ea0fd8b46cd9f32e592fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 69 processed earlier; will process 10907 files now Step #5: ==2374== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5569c21a92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5569c87e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5569c87c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5569c87c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5569c21af652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5569c211042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5569c210ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5569c21a1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569c51d08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569c51d08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569c51d08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569c51d08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569c51d08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569c51d08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569c51d08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569c51d08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569c51d08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569c51d08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569c73d545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5569c4131578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5569c413c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5569c3ee7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5569c3ee7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5569c3ee8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5569c3ee7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5569c3ee7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5569c3ee7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5569c87c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569c87d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5569c87ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5569c87e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe4080c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5569c210943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x47, Step #5: G Step #5: artifact_prefix='./'; Test unit written to ./oom-a36a6718f54524d846894fb04b5b885b4e43e63b Step #5: Base64: Rw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 66 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3692924319 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bd9f754d60, 0x55bd9f93d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bd9f93d720,0x55bda17c72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a36a6718f54524d846894fb04b5b885b4e43e63b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 70 processed earlier; will process 10906 files now Step #5: ==2410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bd962972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bd9c8d2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bd9c8b546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bd9c8b538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bd9629d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bd961fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bd961f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bd9628f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bd992be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bd992be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bd992be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bd992be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bd992be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bd992be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bd992be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bd992be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bd992be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bd992be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bd9b4c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bd9821f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bd9822a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bd97fd5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bd97fd5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bd97fd6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bd97fd5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bd97fd5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bd97fd5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bd9c8b794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bd9c8c07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bd9c8a8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bd9c8d2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb4f8249082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bd961f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1, Step #5: \001 Step #5: artifact_prefix='./'; Test unit written to ./oom-bf8b4530d8d246dd74ac53a13471bba17941dff7 Step #5: Base64: AQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 67 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3693356808 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c7638fcd60, 0x55c763ae571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c763ae5720,0x55c76596f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bf8b4530d8d246dd74ac53a13471bba17941dff7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 71 processed earlier; will process 10905 files now Step #5: ==2446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c75a43f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c760a7a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c760a5d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c760a5d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c75a445652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c75a3a642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c75a3a0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c75a437595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c75d4668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c75d4668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c75d4668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c75d4668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c75d4668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c75d4668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c75d4668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c75d4668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c75d4668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c75d4668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c75f66b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c75c3c7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c75c3d25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c75c17dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c75c17dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c75c17e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c75c17d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c75c17d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c75c17d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c760a5f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c760a687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c760a50529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c760a7afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0e29c2c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c75a39f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b, Step #5: [ Step #5: artifact_prefix='./'; Test unit written to ./oom-1e5c2f367f02e47a8c160cda1cd9d91decbac441 Step #5: Base64: Ww== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 68 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3693786757 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56156e5bed60, 0x56156e7a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56156e7a7720,0x5615706312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1e5c2f367f02e47a8c160cda1cd9d91decbac441' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 72 processed earlier; will process 10904 files now Step #5: ==2482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615651012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56156b73c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56156b71f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56156b71f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561565107652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56156506842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561565062c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5615650f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615681288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615681288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615681288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615681288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615681288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615681288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615681288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615681288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615681288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615681288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56156a32d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561567089578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615670945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561566e3fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561566e3fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561566e40808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561566e3f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561566e3f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561566e3f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56156b72194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56156b72a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56156b712529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56156b73cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f26388082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56156506143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58, Step #5: X Step #5: artifact_prefix='./'; Test unit written to ./oom-c032adc1ff629c9b66f22749ad667e6beadf144b Step #5: Base64: WA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 69 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3694221690 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c2ddd05d60, 0x55c2ddeee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c2ddeee720,0x55c2dfd782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c032adc1ff629c9b66f22749ad667e6beadf144b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 73 processed earlier; will process 10903 files now Step #5: ==2518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c2d48482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c2dae83728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c2dae6646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c2dae6638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c2d484e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c2d47af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c2d47a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c2d4840595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c2d786f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c2d786f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c2d786f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c2d786f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c2d786f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c2d786f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c2d786f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c2d786f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c2d786f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c2d786f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c2d9a7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c2d67d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c2d67db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c2d6586d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c2d6586d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c2d6587808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c2d6586944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c2d6586944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c2d6586944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c2dae6894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c2dae717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c2dae59529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c2dae83fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f822778c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c2d47a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e, Step #5: . Step #5: artifact_prefix='./'; Test unit written to ./oom-3a52ce780950d4d969792a2559cd519d7ee8c727 Step #5: Base64: Lg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 70 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3694656576 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db7449cd60, 0x55db7468571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db74685720,0x55db7650f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a52ce780950d4d969792a2559cd519d7ee8c727' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 74 processed earlier; will process 10902 files now Step #5: ==2554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55db6afdf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db7161a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db715fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db715fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55db6afe5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55db6af4642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55db6af40c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55db6afd7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55db6e0068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55db6e0068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55db6e0068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55db6e0068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55db6e0068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55db6e0068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55db6e0068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55db6e0068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55db6e0068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55db6e0068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db7020b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55db6cf67578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55db6cf725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55db6cd1dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55db6cd1dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55db6cd1e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55db6cd1d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55db6cd1d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55db6cd1d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db715ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db716087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db715f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db7161afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb2ef97082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55db6af3f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x38, Step #5: 8 Step #5: artifact_prefix='./'; Test unit written to ./oom-fe5dbbcea5ce7e2988b8c69bcfdfde8904aabc1f Step #5: Base64: OA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 71 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3695087949 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56234c19dd60, 0x56234c38671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56234c386720,0x56234e2102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fe5dbbcea5ce7e2988b8c69bcfdfde8904aabc1f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 75 processed earlier; will process 10901 files now Step #5: ==2590== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562342ce02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56234931b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5623492fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5623492fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562342ce6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562342c4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562342c41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562342cd8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562345d078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562345d078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562345d078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562345d078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562345d078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562345d078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562345d078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562345d078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562345d078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562345d078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562347f0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562344c68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562344c735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562344a1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562344a1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562344a1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562344a1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562344a1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562344a1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56234930094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623493097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5623492f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56234931bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3282901082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562342c4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xbf, Step #5: \277 Step #5: artifact_prefix='./'; Test unit written to ./oom-d3fe83b8d87ccda2bbca5e81ce3ab1a1400bfbe8 Step #5: Base64: vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 72 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3695510998 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55defb475d60, 0x55defb65e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55defb65e720,0x55defd4e82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d3fe83b8d87ccda2bbca5e81ce3ab1a1400bfbe8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 76 processed earlier; will process 10900 files now Step #5: ==2626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55def1fb82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55def85f3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55def85d646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55def85d638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55def1fbe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55def1f1f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55def1f19c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55def1fb0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55def4fdf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55def4fdf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55def4fdf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55def4fdf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55def4fdf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55def4fdf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55def4fdf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55def4fdf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55def4fdf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55def4fdf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55def71e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55def3f40578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55def3f4b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55def3cf6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55def3cf6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55def3cf7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55def3cf6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55def3cf6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55def3cf6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55def85d894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55def85e17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55def85c9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55def85f3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f580eb9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55def1f1843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a, Step #5: : Step #5: artifact_prefix='./'; Test unit written to ./oom-05a79f06cf3f67f726dae68d18a2290f6c9a50c9 Step #5: Base64: Og== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 73 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3695943987 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b5b2659d60, 0x55b5b284271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b5b2842720,0x55b5b46cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/05a79f06cf3f67f726dae68d18a2290f6c9a50c9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 77 processed earlier; will process 10899 files now Step #5: ==2662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b5a919c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b5af7d7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b5af7ba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b5af7ba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b5a91a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b5a910342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b5a90fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b5a9194595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b5ac1c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b5ac1c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b5ac1c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b5ac1c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b5ac1c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b5ac1c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b5ac1c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b5ac1c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b5ac1c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b5ac1c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b5ae3c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b5ab124578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b5ab12f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b5aaedad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b5aaedad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b5aaedb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b5aaeda944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b5aaeda944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b5aaeda944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b5af7bc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b5af7c57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b5af7ad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b5af7d7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0446bfb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b5a90fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29, Step #5: ) Step #5: artifact_prefix='./'; Test unit written to ./oom-e7064f0b80f61dbc65915311032d27baa569ae2a Step #5: Base64: KQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 74 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3696389722 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f40a1b7d60, 0x55f40a3a071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f40a3a0720,0x55f40c22a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e7064f0b80f61dbc65915311032d27baa569ae2a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 78 processed earlier; will process 10898 files now Step #5: ==2698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f400cfa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f407335728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f40731846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f40731838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f400d00652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f400c6142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f400c5bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f400cf2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f403d218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f403d218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f403d218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f403d218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f403d218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f403d218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f403d218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f403d218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f403d218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f403d218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f405f2645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f402c82578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f402c8d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f402a38d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f402a38d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f402a39808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f402a38944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f402a38944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f402a38944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f40731a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4073237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f40730b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f407335fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f343719d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f400c5a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54, Step #5: T Step #5: artifact_prefix='./'; Test unit written to ./oom-c2c53d66948214258a26ca9ca845d7ac0c17f8e7 Step #5: Base64: VA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 75 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3696827087 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a7b002ed60, 0x55a7b021771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a7b0217720,0x55a7b20a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c2c53d66948214258a26ca9ca845d7ac0c17f8e7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 79 processed earlier; will process 10897 files now Step #5: ==2734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a7a6b712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a7ad1ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a7ad18f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a7ad18f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a7a6b77652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a7a6ad842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a7a6ad2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a7a6b69595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a7a9b988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a7a9b988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a7a9b988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a7a9b988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a7a9b988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a7a9b988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a7a9b988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a7a9b988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a7a9b988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a7a9b988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a7abd9d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a7a8af9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a7a8b045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a7a88afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a7a88afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a7a88b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a7a88af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a7a88af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a7a88af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a7ad19194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a7ad19a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a7ad182529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a7ad1acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3be21a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a7a6ad143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb, Step #5: \333 Step #5: artifact_prefix='./'; Test unit written to ./oom-1216aa524aef75e75aa9214fb78ad1ac3ba1e34b Step #5: Base64: 2w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 76 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3697247274 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55693bfe6d60, 0x55693c1cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55693c1cf720,0x55693e0592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1216aa524aef75e75aa9214fb78ad1ac3ba1e34b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 80 processed earlier; will process 10896 files now Step #5: ==2770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556932b292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556939164728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55693914746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55693914738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556932b2f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556932a9042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556932a8ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556932b21595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556935b508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556935b508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556935b508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556935b508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556935b508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556935b508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556935b508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556935b508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556935b508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556935b508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556937d5545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556934ab1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556934abc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556934867d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556934867d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556934868808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556934867944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556934867944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556934867944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55693914994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569391527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55693913a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556939164fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6309679082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556932a8943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1d, Step #5: \035 Step #5: artifact_prefix='./'; Test unit written to ./oom-5983ad8f6bfea1deda79409c844f51379c52be2d Step #5: Base64: HQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 77 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3697683283 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5626dbb41d60, 0x5626dbd2a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5626dbd2a720,0x5626ddbb42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5983ad8f6bfea1deda79409c844f51379c52be2d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 81 processed earlier; will process 10895 files now Step #5: ==2806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5626d26842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5626d8cbf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5626d8ca246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5626d8ca238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5626d268a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5626d25eb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5626d25e5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5626d267c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5626d56ab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5626d56ab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5626d56ab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5626d56ab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5626d56ab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5626d56ab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5626d56ab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5626d56ab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5626d56ab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5626d56ab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5626d78b045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5626d460c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5626d46175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5626d43c2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5626d43c2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5626d43c3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5626d43c2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5626d43c2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5626d43c2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5626d8ca494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5626d8cad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5626d8c95529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5626d8cbffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe7cdc3e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5626d25e443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26, Step #5: & Step #5: artifact_prefix='./'; Test unit written to ./oom-7c4d33785daa5c2370201ffa236b427aa37c9996 Step #5: Base64: Jg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 78 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3698119649 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559ed0fadd60, 0x559ed119671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559ed1196720,0x559ed30202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7c4d33785daa5c2370201ffa236b427aa37c9996' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 82 processed earlier; will process 10894 files now Step #5: ==2842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559ec7af02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559ece12b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559ece10e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559ece10e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559ec7af6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559ec7a5742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559ec7a51c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559ec7ae8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ecab178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ecab178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ecab178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ecab178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ecab178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ecab178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ecab178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ecab178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ecab178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ecab178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559eccd1c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559ec9a78578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559ec9a835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559ec982ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559ec982ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559ec982f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559ec982e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559ec982e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559ec982e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559ece11094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559ece1197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559ece101529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559ece12bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5de62c1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559ec7a5043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x62, Step #5: b Step #5: artifact_prefix='./'; Test unit written to ./oom-e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98 Step #5: Base64: Yg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 79 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3698562015 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5589db565d60, 0x5589db74e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5589db74e720,0x5589dd5d82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 83 processed earlier; will process 10893 files now Step #5: ==2878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5589d20a82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5589d86e3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5589d86c646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5589d86c638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5589d20ae652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5589d200f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5589d2009c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5589d20a0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5589d50cf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5589d50cf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5589d50cf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5589d50cf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5589d50cf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5589d50cf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5589d50cf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5589d50cf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5589d50cf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5589d50cf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5589d72d445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5589d4030578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5589d403b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5589d3de6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5589d3de6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5589d3de7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5589d3de6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5589d3de6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5589d3de6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5589d86c894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5589d86d17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5589d86b9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5589d86e3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5943333082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5589d200843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53, Step #5: S Step #5: artifact_prefix='./'; Test unit written to ./oom-02aa629c8b16cd17a44f3a0efec2feed43937642 Step #5: Base64: Uw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 80 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3698995342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c97911cd60, 0x55c97930571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c979305720,0x55c97b18f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/02aa629c8b16cd17a44f3a0efec2feed43937642' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 84 processed earlier; will process 10892 files now Step #5: ==2914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c96fc5f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c97629a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c97627d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c97627d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c96fc65652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c96fbc642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c96fbc0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c96fc57595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c972c868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c972c868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c972c868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c972c868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c972c868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c972c868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c972c868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c972c868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c972c868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c972c868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c974e8b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c971be7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c971bf25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c97199dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c97199dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c97199e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c97199d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c97199d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c97199d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c97627f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c9762887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c976270529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c97629afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c96569082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c96fbbf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x9, Step #5: \011 Step #5: artifact_prefix='./'; Test unit written to ./oom-ac9231da4082430afe8f4d40127814c613648d8e Step #5: Base64: CQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 81 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3699417861 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab84c45d60, 0x55ab84e2e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab84e2e720,0x55ab86cb82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ac9231da4082430afe8f4d40127814c613648d8e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 85 processed earlier; will process 10891 files now Step #5: ==2950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ab7b7882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab81dc3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab81da646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab81da638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ab7b78e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ab7b6ef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ab7b6e9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ab7b780595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab7e7af8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab7e7af8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab7e7af8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab7e7af8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab7e7af8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab7e7af8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab7e7af8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab7e7af8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab7e7af8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab7e7af8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab809b445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab7d710578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab7d71b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab7d4c6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab7d4c6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab7d4c7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab7d4c6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab7d4c6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab7d4c6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab81da894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab81db17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab81d99529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab81dc3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8f1967f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ab7b6e843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c, Step #5: \\ Step #5: artifact_prefix='./'; Test unit written to ./oom-08534f33c201a45017b502e90a800f1b708ebcb3 Step #5: Base64: XA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 82 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3699857476 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ae2248d60, 0x558ae243171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ae2431720,0x558ae42bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/08534f33c201a45017b502e90a800f1b708ebcb3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 86 processed earlier; will process 10890 files now Step #5: #1 pulse cov: 3349 ft: 3350 exec/s: 0 rss: 152Mb Step #5: ==2986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558ad8d8b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558adf3c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558adf3a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558adf3a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ad8d91652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ad8cf242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ad8cecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ad8d83595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558adbdb28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558adbdb28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558adbdb28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558adbdb28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558adbdb28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558adbdb28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558adbdb28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558adbdb28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558adbdb28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558adbdb28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558addfb745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558adad13578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558adad1e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558adaac9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558adaac9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558adaaca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558adaac9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558adaac9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558adaac9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558adf3ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558adf3b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558adf39c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558adf3c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4672e71082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ad8ceb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xfe, Step #5: \376 Step #5: artifact_prefix='./'; Test unit written to ./oom-b68542373c05c0ed25231d09955b2c699d37c45b Step #5: Base64: /g== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 83 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3700317788 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55931c276d60, 0x55931c45f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55931c45f720,0x55931e2e92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b68542373c05c0ed25231d09955b2c699d37c45b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 88 processed earlier; will process 10888 files now Step #5: ==3022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559312db92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593193f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593193d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593193d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559312dbf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559312d2042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559312d1ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559312db1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559315de08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559315de08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559315de08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559315de08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559315de08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559315de08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559315de08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559315de08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559315de08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559315de08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559317fe545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559314d41578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559314d4c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559314af7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559314af7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559314af8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559314af7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559314af7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559314af7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593193d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593193e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593193ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593193f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc7924c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559312d1943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x37, Step #5: 7 Step #5: artifact_prefix='./'; Test unit written to ./oom-902ba3cda1883801594b6e1b452790cc53948fda Step #5: Base64: Nw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 84 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3700756865 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5588d8504d60, 0x5588d86ed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5588d86ed720,0x5588da5772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/902ba3cda1883801594b6e1b452790cc53948fda' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 89 processed earlier; will process 10887 files now Step #5: ==3058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5588cf0472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5588d5682728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5588d566546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5588d566538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5588cf04d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5588cefae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5588cefa8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5588cf03f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5588d206e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5588d206e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5588d206e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5588d206e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5588d206e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5588d206e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5588d206e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5588d206e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5588d206e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5588d206e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5588d427345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5588d0fcf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5588d0fda5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5588d0d85d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5588d0d85d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5588d0d86808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5588d0d85944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5588d0d85944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5588d0d85944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5588d566794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5588d56707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5588d5658529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5588d5682fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f418dc57082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5588cefa743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36, Step #5: 6 Step #5: artifact_prefix='./'; Test unit written to ./oom-c1dfd96eea8cc2b62785275bca38ac261256e278 Step #5: Base64: Ng== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 85 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3701187223 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562738b5bd60, 0x562738d4471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562738d44720,0x56273abce2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c1dfd96eea8cc2b62785275bca38ac261256e278' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 90 processed earlier; will process 10886 files now Step #5: ==3094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56272f69e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562735cd9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562735cbc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562735cbc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56272f6a4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56272f60542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56272f5ffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56272f696595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627326c58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627326c58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627326c58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627326c58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627326c58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627326c58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627326c58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627326c58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627326c58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627326c58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5627348ca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562731626578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5627316315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5627313dcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5627313dcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5627313dd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5627313dc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5627313dc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5627313dc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562735cbe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562735cc77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562735caf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562735cd9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbfc86f3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56272f5fe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d, Step #5: - Step #5: artifact_prefix='./'; Test unit written to ./oom-3bc15c8aae3e4124dd409035f32ea2fd6835efc9 Step #5: Base64: LQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 86 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3701632418 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56205017fd60, 0x56205036871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562050368720,0x5620521f22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3bc15c8aae3e4124dd409035f32ea2fd6835efc9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 91 processed earlier; will process 10885 files now Step #5: ==3130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562046cc22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56204d2fd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56204d2e046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56204d2e038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562046cc8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562046c2942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562046c23c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562046cba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562049ce98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562049ce98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562049ce98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562049ce98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562049ce98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562049ce98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562049ce98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562049ce98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562049ce98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562049ce98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56204beee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562048c4a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562048c555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562048a00d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562048a00d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562048a01808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562048a00944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562048a00944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562048a00944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56204d2e294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56204d2eb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56204d2d3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56204d2fdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a6ef9b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562046c2243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe4, Step #5: \344 Step #5: artifact_prefix='./'; Test unit written to ./oom-7e5c0f7aba32cf3e22fd30c4513a21e6d1c3aeff Step #5: Base64: 5A== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 87 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3702052633 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563a3457ad60, 0x563a3476371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563a34763720,0x563a365ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7e5c0f7aba32cf3e22fd30c4513a21e6d1c3aeff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 92 processed earlier; will process 10884 files now Step #5: ==3166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563a2b0bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563a316f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563a316db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563a316db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563a2b0c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563a2b02442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563a2b01ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563a2b0b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563a2e0e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563a2e0e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563a2e0e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563a2e0e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563a2e0e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563a2e0e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563a2e0e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563a2e0e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563a2e0e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563a2e0e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563a302e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563a2d045578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563a2d0505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563a2cdfbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563a2cdfbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563a2cdfc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563a2cdfb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563a2cdfb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563a2cdfb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563a316dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563a316e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563a316ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563a316f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f45a1f0d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563a2b01d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40, Step #5: @ Step #5: artifact_prefix='./'; Test unit written to ./oom-9a78211436f6d425ec38f5c4e02270801f3524f8 Step #5: Base64: QA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 88 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3702495237 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559d18ad0d60, 0x559d18cb971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559d18cb9720,0x559d1ab432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9a78211436f6d425ec38f5c4e02270801f3524f8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 93 processed earlier; will process 10883 files now Step #5: ==3202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559d0f6132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559d15c4e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559d15c3146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559d15c3138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559d0f619652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559d0f57a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559d0f574c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559d0f60b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559d1263a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559d1263a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559d1263a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559d1263a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559d1263a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559d1263a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559d1263a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559d1263a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559d1263a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559d1263a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559d1483f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559d1159b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559d115a65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559d11351d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559d11351d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559d11352808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559d11351944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559d11351944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559d11351944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559d15c3394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559d15c3c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559d15c24529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559d15c4efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0894ea3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559d0f57343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b, Step #5: + Step #5: artifact_prefix='./'; Test unit written to ./oom-a979ef10cc6f6a36df6b8a323307ee3bb2e2db9c Step #5: Base64: Kw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 89 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3702926973 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5579fb903d60, 0x5579fbaec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5579fbaec720,0x5579fd9762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a979ef10cc6f6a36df6b8a323307ee3bb2e2db9c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 94 processed earlier; will process 10882 files now Step #5: ==3238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5579f24462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5579f8a81728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5579f8a6446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5579f8a6438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5579f244c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5579f23ad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5579f23a7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5579f243e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5579f546d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5579f546d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5579f546d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5579f546d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5579f546d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5579f546d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5579f546d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5579f546d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5579f546d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5579f546d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5579f767245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579f43ce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579f43d95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5579f4184d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5579f4184d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5579f4185808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5579f4184944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5579f4184944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5579f4184944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5579f8a6694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5579f8a6f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5579f8a57529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5579f8a81fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f84c8c3f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5579f23a643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5a, Step #5: Z Step #5: artifact_prefix='./'; Test unit written to ./oom-909f99a779adb66a76fc53ab56c7dd1caf35d0fd Step #5: Base64: Wg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 90 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3703360609 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a3b4ae7d60, 0x55a3b4cd071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a3b4cd0720,0x55a3b6b5a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/909f99a779adb66a76fc53ab56c7dd1caf35d0fd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 95 processed earlier; will process 10881 files now Step #5: #1 pulse cov: 3375 ft: 3376 exec/s: 0 rss: 153Mb Step #5: ==3274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3ab62a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a3b1c65728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a3b1c4846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a3b1c4838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3ab630652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a3ab59142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a3ab58bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3ab622595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3ae6518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3ae6518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3ae6518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3ae6518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3ae6518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3ae6518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3ae6518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3ae6518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3ae6518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3ae6518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a3b085645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a3ad5b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3ad5bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3ad368d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3ad368d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3ad369808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3ad368944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3ad368944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3ad368944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a3b1c4a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a3b1c537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a3b1c3b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a3b1c65fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f65f3980082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a3ab58a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c, Step #5: L Step #5: artifact_prefix='./'; Test unit written to ./oom-d160e0986aca4714714a16f29ec605af90be704d Step #5: Base64: TA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 91 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3703835559 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c94a55dd60, 0x55c94a74671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c94a746720,0x55c94c5d02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d160e0986aca4714714a16f29ec605af90be704d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 97 processed earlier; will process 10879 files now Step #5: ==3310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c9410a02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c9476db728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c9476be46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c9476be38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c9410a6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c94100742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c941001c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c941098595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c9440c78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c9440c78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c9440c78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c9440c78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c9440c78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c9440c78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c9440c78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c9440c78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c9440c78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c9440c78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c9462cc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c943028578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c9430335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c942dded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c942dded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c942ddf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c942dde944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c942dde944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c942dde944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c9476c094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c9476c97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c9476b1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c9476dbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7ad5219082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c94100043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d, Step #5: = Step #5: artifact_prefix='./'; Test unit written to ./oom-21606782c65e44cac7afbb90977d8b6f82140e76 Step #5: Base64: PQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 92 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3704261955 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cddea50d60, 0x55cddec3971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cddec39720,0x55cde0ac32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/21606782c65e44cac7afbb90977d8b6f82140e76' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 98 processed earlier; will process 10878 files now Step #5: ==3346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cdd55932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cddbbce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cddbbb146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cddbbb138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cdd5599652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cdd54fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cdd54f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cdd558b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cdd85ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cdd85ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cdd85ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cdd85ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cdd85ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cdd85ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cdd85ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cdd85ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cdd85ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cdd85ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cdda7bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cdd751b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cdd75265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cdd72d1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cdd72d1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cdd72d2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cdd72d1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cdd72d1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cdd72d1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cddbbb394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cddbbbc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cddbba4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cddbbcefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7480257082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cdd54f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xff, Step #5: \377 Step #5: artifact_prefix='./'; Test unit written to ./oom-85e53271e14006f0265921d02d4d736cdc580b0b Step #5: Base64: /w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 93 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3704677529 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560932b10d60, 0x560932cf971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560932cf9720,0x560934b832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/85e53271e14006f0265921d02d4d736cdc580b0b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 99 processed earlier; will process 10877 files now Step #5: ==3382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609296532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56092fc8e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56092fc7146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56092fc7138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560929659652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5609295ba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5609295b4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56092964b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56092c67a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56092c67a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56092c67a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56092c67a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56092c67a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56092c67a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56092c67a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56092c67a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56092c67a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56092c67a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56092e87f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56092b5db578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56092b5e65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56092b391d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56092b391d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56092b392808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56092b391944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56092b391944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56092b391944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56092fc7394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56092fc7c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56092fc64529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56092fc8efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f190f407082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5609295b343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74, Step #5: t Step #5: artifact_prefix='./'; Test unit written to ./oom-8efd86fb78a56a5145ed7739dcb00c78581c5375 Step #5: Base64: dA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 94 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3705110683 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5628a74abd60, 0x5628a769471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5628a7694720,0x5628a951e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8efd86fb78a56a5145ed7739dcb00c78581c5375' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 100 processed earlier; will process 10876 files now Step #5: ==3418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56289dfee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628a4629728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628a460c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628a460c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56289dff4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56289df5542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56289df4fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56289dfe6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628a10158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628a10158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628a10158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628a10158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628a10158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628a10158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628a10158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628a10158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628a10158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628a10158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628a321a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56289ff76578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56289ff815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56289fd2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56289fd2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56289fd2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56289fd2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56289fd2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56289fd2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628a460e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628a46177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628a45ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628a4629fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f73bc93a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56289df4e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45, Step #5: E Step #5: artifact_prefix='./'; Test unit written to ./oom-e0184adedf913b076626646d3f52c3b49c39ad6d Step #5: Base64: RQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 95 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3705544239 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5608ae83cd60, 0x5608aea2571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5608aea25720,0x5608b08af2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e0184adedf913b076626646d3f52c3b49c39ad6d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 101 processed earlier; will process 10875 files now Step #5: ==3454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608a537f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5608ab9ba728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5608ab99d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5608ab99d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608a5385652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5608a52e642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5608a52e0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608a5377595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608a83a68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608a83a68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608a83a68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608a83a68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608a83a68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608a83a68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608a83a68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608a83a68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608a83a68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608a83a68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608aa5ab45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608a7307578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608a73125a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608a70bdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608a70bdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608a70be808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608a70bd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608a70bd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608a70bd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5608ab99f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5608ab9a87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5608ab990529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5608ab9bafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe7373e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5608a52df43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c, Step #5: | Step #5: artifact_prefix='./'; Test unit written to ./oom-3eb416223e9e69e6bb8ee19793911ad1ad2027d8 Step #5: Base64: fA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 96 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3705971103 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c2186cbd60, 0x55c2188b471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c2188b4720,0x55c21a73e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3eb416223e9e69e6bb8ee19793911ad1ad2027d8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 102 processed earlier; will process 10874 files now Step #5: ==3490== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c20f20e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c215849728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c21582c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c21582c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c20f214652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c20f17542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c20f16fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c20f206595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c2122358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c2122358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c2122358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c2122358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c2122358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c2122358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c2122358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c2122358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c2122358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c2122358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c21443a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c211196578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c2111a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c210f4cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c210f4cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c210f4d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c210f4c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c210f4c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c210f4c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c21582e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c2158377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c21581f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c215849fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3745ae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c20f16e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21, Step #5: ! Step #5: artifact_prefix='./'; Test unit written to ./oom-0ab8318acaf6e678dd02e2b5c343ed41111b393d Step #5: Base64: IQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 97 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3706402615 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56274b75fd60, 0x56274b94871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56274b948720,0x56274d7d22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0ab8318acaf6e678dd02e2b5c343ed41111b393d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 103 processed earlier; will process 10873 files now Step #5: ==3526== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5627422a22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5627488dd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5627488c046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5627488c038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5627422a8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56274220942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562742203c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56274229a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627452c98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627452c98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627452c98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627452c98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627452c98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627452c98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627452c98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627452c98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627452c98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627452c98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5627474ce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56274422a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5627442355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562743fe0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562743fe0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562743fe1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562743fe0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562743fe0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562743fe0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5627488c294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627488cb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5627488b3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5627488ddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2cf4bb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56274220243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e, Step #5: ~ Step #5: artifact_prefix='./'; Test unit written to ./oom-fb3c6e4de85bd9eae26fdc63e75f10a7f39e850e Step #5: Base64: fg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 98 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3706836396 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5639af78ad60, 0x5639af97371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5639af973720,0x5639b17fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb3c6e4de85bd9eae26fdc63e75f10a7f39e850e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 104 processed earlier; will process 10872 files now Step #5: ==3562== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5639a62cd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5639ac908728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5639ac8eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5639ac8eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5639a62d3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5639a623442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5639a622ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5639a62c5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5639a92f48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5639a92f48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5639a92f48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5639a92f48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5639a92f48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5639a92f48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5639a92f48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5639a92f48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5639a92f48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5639a92f48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5639ab4f945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5639a8255578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5639a82605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5639a800bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5639a800bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5639a800c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5639a800b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5639a800b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5639a800b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5639ac8ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5639ac8f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5639ac8de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5639ac908fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f17181af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5639a622d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46, Step #5: F Step #5: artifact_prefix='./'; Test unit written to ./oom-e69f20e9f683920d3fb4329abd951e878b1f9372 Step #5: Base64: Rg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 99 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3707269373 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5575b32e7d60, 0x5575b34d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5575b34d0720,0x5575b535a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e69f20e9f683920d3fb4329abd951e878b1f9372' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 105 processed earlier; will process 10871 files now Step #5: ==3598== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5575a9e2a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5575b0465728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5575b044846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5575b044838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5575a9e30652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5575a9d9142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5575a9d8bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5575a9e22595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5575ace518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5575ace518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5575ace518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5575ace518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5575ace518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5575ace518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5575ace518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5575ace518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5575ace518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5575ace518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5575af05645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5575abdb2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5575abdbd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5575abb68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5575abb68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5575abb69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5575abb68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5575abb68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5575abb68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5575b044a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5575b04537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5575b043b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5575b0465fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b3b540082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5575a9d8a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3b, Step #5: ; Step #5: artifact_prefix='./'; Test unit written to ./oom-2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312 Step #5: Base64: Ow== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 100 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3707708239 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55688e06dd60, 0x55688e25671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55688e256720,0x5568900e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d14ab97cc3dc294c51c0d6814f4ea45f4b4e312' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 106 processed earlier; will process 10870 files now Step #5: ==3634== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556884bb02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55688b1eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55688b1ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55688b1ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556884bb6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556884b1742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556884b11c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556884ba8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556887bd78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556887bd78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556887bd78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556887bd78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556887bd78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556887bd78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556887bd78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556887bd78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556887bd78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556887bd78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556889ddc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556886b38578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556886b435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568868eed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568868eed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568868ef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568868ee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568868ee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568868ee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55688b1d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55688b1d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55688b1c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55688b1ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6b6311082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556884b1043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65, Step #5: e Step #5: artifact_prefix='./'; Test unit written to ./oom-58e6b3a414a1e090dfc6029add0f3555ccba127f Step #5: Base64: ZQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 101 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3708136591 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cd5161dd60, 0x55cd5180671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cd51806720,0x55cd536902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58e6b3a414a1e090dfc6029add0f3555ccba127f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 107 processed earlier; will process 10869 files now Step #5: ==3670== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cd481602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cd4e79b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cd4e77e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cd4e77e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cd48166652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cd480c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cd480c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cd48158595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cd4b1878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cd4b1878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cd4b1878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cd4b1878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cd4b1878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cd4b1878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cd4b1878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cd4b1878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cd4b1878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cd4b1878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cd4d38c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cd4a0e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cd4a0f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cd49e9ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cd49e9ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cd49e9f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cd49e9e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cd49e9e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cd49e9e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cd4e78094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cd4e7897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cd4e771529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cd4e79bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdaf30dc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cd480c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xff,0xd7, Step #5: \377\327 Step #5: artifact_prefix='./'; Test unit written to ./oom-45187832dae51e95536168a4d2493f59c3f89765 Step #5: Base64: /9c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 102 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3708562549 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561e2ce5ad60, 0x561e2d04371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561e2d043720,0x561e2eecd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/45187832dae51e95536168a4d2493f59c3f89765' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 108 processed earlier; will process 10868 files now Step #5: #1 pulse cov: 3432 ft: 3433 exec/s: 0 rss: 154Mb Step #5: ==3706== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e2399d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561e29fd8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561e29fbb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561e29fbb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e239a3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e2390442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e238fec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e23995595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561e269c48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561e269c48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561e269c48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561e269c48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561e269c48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561e269c48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561e269c48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561e269c48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561e269c48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561e269c48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561e28bc945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561e25925578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561e259305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561e256dbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561e256dbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561e256dc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561e256db944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561e256db944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561e256db944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561e29fbd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561e29fc67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561e29fae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561e29fd8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7884ddf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e238fd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xb0, Step #5: \337\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-36e94f025d21074fcb7030aadc4bfa07ca2b7b7a Step #5: Base64: 37A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 103 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3709039477 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563c0971dd60, 0x563c0990671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563c09906720,0x563c0b7902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/36e94f025d21074fcb7030aadc4bfa07ca2b7b7a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 110 processed earlier; will process 10866 files now Step #5: #1 pulse cov: 3424 ft: 3425 exec/s: 0 rss: 153Mb Step #5: ==3742== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563c002602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563c0689b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563c0687e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563c0687e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563c00266652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563c001c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563c001c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563c00258595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563c032878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563c032878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563c032878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563c032878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563c032878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563c032878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563c032878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563c032878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563c032878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563c032878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563c0548c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563c021e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563c021f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563c01f9ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563c01f9ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563c01f9f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563c01f9e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563c01f9e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563c01f9e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563c0688094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563c068897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563c06871529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563c0689bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2cd3422082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563c001c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x2d, Step #5: ^- Step #5: artifact_prefix='./'; Test unit written to ./oom-fe4cd9ca3a9eb28f7b8896024cd7671400a752da Step #5: Base64: Xi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 104 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3709516946 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560226c33d60, 0x560226e1c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560226e1c720,0x560228ca62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fe4cd9ca3a9eb28f7b8896024cd7671400a752da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 112 processed earlier; will process 10864 files now Step #5: ==3778== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56021d7762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560223db1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560223d9446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560223d9438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56021d77c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56021d6dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56021d6d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56021d76e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56022079d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56022079d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56022079d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56022079d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56022079d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56022079d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56022079d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56022079d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56022079d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56022079d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602229a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56021f6fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56021f7095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56021f4b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56021f4b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56021f4b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56021f4b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56021f4b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56021f4b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560223d9694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560223d9f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560223d87529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560223db1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f42278f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56021d6d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0xf5, Step #5: h\365 Step #5: artifact_prefix='./'; Test unit written to ./oom-fef014e3f6581801769ee8a87ba219e5750df8f1 Step #5: Base64: aPU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 105 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3709949354 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562e75ad8d60, 0x562e75cc171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562e75cc1720,0x562e77b4b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fef014e3f6581801769ee8a87ba219e5750df8f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 113 processed earlier; will process 10863 files now Step #5: ==3814== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562e6c61b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562e72c56728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562e72c3946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562e72c3938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562e6c621652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562e6c58242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562e6c57cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562e6c613595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562e6f6428c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562e6f6428c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562e6f6428c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562e6f6428c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562e6f6428c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562e6f6428c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562e6f6428c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562e6f6428c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562e6f6428c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562e6f6428c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562e7184745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562e6e5a3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562e6e5ae5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562e6e359d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562e6e359d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562e6e35a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562e6e359944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562e6e359944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562e6e359944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562e72c3b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562e72c447b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562e72c2c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562e72c56fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f438893e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562e6c57b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0xb8, Step #5: \334\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-6dbbd4386d98401453b8d69faa8e03ea7c5af70f Step #5: Base64: 3Lg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 106 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3710379302 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55672682ed60, 0x556726a1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556726a17720,0x5567288a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6dbbd4386d98401453b8d69faa8e03ea7c5af70f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 114 processed earlier; will process 10862 files now Step #5: ==3850== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55671d3712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5567239ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55672398f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55672398f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55671d377652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55671d2d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55671d2d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55671d369595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567203988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567203988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567203988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567203988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567203988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567203988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567203988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567203988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567203988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567203988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55672259d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55671f2f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55671f3045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55671f0afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55671f0afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55671f0b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55671f0af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55671f0af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55671f0af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55672399194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55672399a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556723982529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5567239acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8dfe23082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55671d2d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdd,0x80, Step #5: \335\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-b4125bc162e82d1b43018cc73becd538b97fbeb0 Step #5: Base64: 3YA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 107 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3710825039 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564c5bf0fd60, 0x564c5c0f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564c5c0f8720,0x564c5df822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b4125bc162e82d1b43018cc73becd538b97fbeb0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 115 processed earlier; will process 10861 files now Step #5: #1 pulse cov: 3413 ft: 3414 exec/s: 0 rss: 153Mb Step #5: ==3886== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564c52a522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564c5908d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564c5907046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564c5907038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564c52a58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564c529b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564c529b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564c52a4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564c55a798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564c55a798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564c55a798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564c55a798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564c55a798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564c55a798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564c55a798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564c55a798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564c55a798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564c55a798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564c57c7e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564c549da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564c549e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564c54790d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564c54790d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564c54791808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564c54790944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564c54790944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564c54790944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564c5907294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564c5907b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564c59063529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564c5908dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8a2862b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564c529b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x75,0x64, Step #5: ud Step #5: artifact_prefix='./'; Test unit written to ./oom-29b1930481ec92d813a66ca893468ae710b71a85 Step #5: Base64: dWQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 108 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3711301079 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d225bcd60, 0x558d227a571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d227a5720,0x558d2462f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/29b1930481ec92d813a66ca893468ae710b71a85' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 117 processed earlier; will process 10859 files now Step #5: ==3922== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d190ff2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d1f73a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d1f71d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d1f71d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d19105652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d1906642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d19060c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d190f7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d1c1268c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d1c1268c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d1c1268c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d1c1268c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d1c1268c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d1c1268c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d1c1268c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d1c1268c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d1c1268c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d1c1268c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d1e32b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d1b087578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d1b0925a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d1ae3dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d1ae3dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d1ae3e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d1ae3d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d1ae3d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d1ae3d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d1f71f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d1f7287b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d1f710529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d1f73afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f056a689082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d1905f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x11, Step #5: \001\021 Step #5: artifact_prefix='./'; Test unit written to ./oom-51c6a3c0b55b51f8cfb2144afd716577a1b41906 Step #5: Base64: ARE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 109 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3711733113 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5628e1110d60, 0x5628e12f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5628e12f9720,0x5628e31832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/51c6a3c0b55b51f8cfb2144afd716577a1b41906' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 118 processed earlier; will process 10858 files now Step #5: ==3958== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5628d7c532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628de28e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628de27146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628de27138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5628d7c59652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5628d7bba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5628d7bb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5628d7c4b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628dac7a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628dac7a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628dac7a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628dac7a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628dac7a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628dac7a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628dac7a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628dac7a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628dac7a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628dac7a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628dce7f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5628d9bdb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5628d9be65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5628d9991d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5628d9991d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5628d9992808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5628d9991944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5628d9991944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5628d9991944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628de27394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628de27c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628de264529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628de28efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f07ab448082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5628d7bb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0x9, Step #5: \015\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-cf7f6cad30f4b0c598985b7e799f505f59821e45 Step #5: Base64: DQk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 110 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3712162019 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ef7a777d60, 0x55ef7a96071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ef7a960720,0x55ef7c7ea2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cf7f6cad30f4b0c598985b7e799f505f59821e45' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 119 processed earlier; will process 10857 files now Step #5: ==3994== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ef712ba2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ef778f5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ef778d846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ef778d838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ef712c0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ef7122142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ef7121bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ef712b2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ef742e18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ef742e18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ef742e18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ef742e18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ef742e18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ef742e18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ef742e18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ef742e18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ef742e18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ef742e18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ef764e645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ef73242578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ef7324d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ef72ff8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ef72ff8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ef72ff9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ef72ff8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ef72ff8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ef72ff8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ef778da94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ef778e37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ef778cb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ef778f5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4573a9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ef7121a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x22, Step #5: \\\" Step #5: artifact_prefix='./'; Test unit written to ./oom-ab006bb8aacdf6e68299bc1dffccc9bcc8ac3eaf Step #5: Base64: XCI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 111 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3712597688 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8bcf6fd60, 0x55a8bd15871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a8bd158720,0x55a8befe22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab006bb8aacdf6e68299bc1dffccc9bcc8ac3eaf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 120 processed earlier; will process 10856 files now Step #5: ==4030== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8b3ab22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8ba0ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8ba0d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8ba0d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8b3ab8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a8b3a1942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a8b3a13c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8b3aaa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8b6ad98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8b6ad98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8b6ad98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8b6ad98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8b6ad98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8b6ad98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8b6ad98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8b6ad98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8b6ad98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8b6ad98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8b8cde45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8b5a3a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8b5a455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a8b57f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a8b57f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a8b57f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a8b57f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a8b57f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a8b57f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8ba0d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8ba0db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8ba0c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8ba0edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fad6f494082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a8b3a1243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x42, Step #5: BB Step #5: artifact_prefix='./'; Test unit written to ./oom-71c9db717578b9ee49a59e69375c16c0627dffef Step #5: Base64: QkI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 112 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3713036878 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fadc30ad60, 0x55fadc4f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fadc4f3720,0x55fade37d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71c9db717578b9ee49a59e69375c16c0627dffef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 121 processed earlier; will process 10855 files now Step #5: ==4066== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fad2e4d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fad9488728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fad946b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fad946b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fad2e53652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fad2db442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fad2daec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fad2e45595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fad5e748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fad5e748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fad5e748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fad5e748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fad5e748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fad5e748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fad5e748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fad5e748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fad5e748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fad5e748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fad807945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fad4dd5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fad4de05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fad4b8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fad4b8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fad4b8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fad4b8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fad4b8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fad4b8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fad946d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fad94767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fad945e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fad9488fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faec307f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fad2dad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x0, Step #5: B\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-ab69fa1ab6bb831506efcad83900fee751e85f6f Step #5: Base64: QgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 113 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3713473915 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc504c2d60, 0x55dc506ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc506ab720,0x55dc525352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab69fa1ab6bb831506efcad83900fee751e85f6f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 122 processed earlier; will process 10854 files now Step #5: ==4102== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc470052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc4d640728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc4d62346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc4d62338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc4700b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc46f6c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc46f66c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc46ffd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc4a02c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc4a02c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc4a02c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc4a02c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc4a02c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc4a02c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc4a02c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc4a02c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc4a02c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc4a02c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc4c23145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc48f8d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc48f985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc48d43d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc48d43d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc48d44808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc48d43944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc48d43944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc48d43944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc4d62594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc4d62e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc4d616529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc4d640fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2740d2e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc46f6543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x7f, Step #5: -\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-3c9eb921ca2d4f4f404ad203d62811d5970c4489 Step #5: Base64: LX8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 114 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3713913027 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5570f48dbd60, 0x5570f4ac471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5570f4ac4720,0x5570f694e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3c9eb921ca2d4f4f404ad203d62811d5970c4489' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 123 processed earlier; will process 10853 files now Step #5: ==4138== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5570eb41e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5570f1a59728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5570f1a3c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5570f1a3c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5570eb424652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5570eb38542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5570eb37fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5570eb416595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570ee4458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570ee4458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570ee4458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570ee4458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570ee4458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570ee4458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570ee4458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570ee4458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570ee4458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570ee4458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5570f064a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5570ed3a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570ed3b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5570ed15cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5570ed15cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5570ed15d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5570ed15c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5570ed15c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5570ed15c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5570f1a3e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5570f1a477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5570f1a2f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5570f1a59fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fefd4030082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5570eb37e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x55, Step #5: \000U Step #5: artifact_prefix='./'; Test unit written to ./oom-91418a422359befed98b3bfab17cf0b725b5e7e6 Step #5: Base64: AFU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 115 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3714343405 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f5ddbd6d60, 0x55f5dddbf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f5dddbf720,0x55f5dfc492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/91418a422359befed98b3bfab17cf0b725b5e7e6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 124 processed earlier; will process 10852 files now Step #5: ==4174== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f5d47192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f5dad54728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f5dad3746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f5dad3738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f5d471f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f5d468042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f5d467ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f5d4711595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f5d77408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f5d77408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f5d77408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f5d77408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f5d77408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f5d77408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f5d77408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f5d77408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f5d77408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f5d77408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f5d994545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f5d66a1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f5d66ac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f5d6457d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f5d6457d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f5d6458808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f5d6457944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f5d6457944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f5d6457944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f5dad3994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f5dad427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f5dad2a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f5dad54fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4fcde08082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f5d467943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x31, Step #5: 31 Step #5: artifact_prefix='./'; Test unit written to ./oom-632667547e7cd3e0466547863e1207a8c0c0c549 Step #5: Base64: MzE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 116 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3714776958 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5565459fdd60, 0x556545be671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556545be6720,0x556547a702c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/632667547e7cd3e0466547863e1207a8c0c0c549' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 125 processed earlier; will process 10851 files now Step #5: ==4210== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55653c5402d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556542b7b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556542b5e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556542b5e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55653c546652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55653c4a742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55653c4a1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55653c538595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55653f5678c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55653f5678c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55653f5678c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55653f5678c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55653f5678c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55653f5678c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55653f5678c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55653f5678c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55653f5678c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55653f5678c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55654176c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55653e4c8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55653e4d35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55653e27ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55653e27ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55653e27f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55653e27e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55653e27e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55653e27e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556542b6094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556542b697b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556542b51529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556542b7bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f232d910082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55653c4a043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x21, Step #5: #! Step #5: artifact_prefix='./'; Test unit written to ./oom-2d46bc445fe5eef1125228cce271ca63a02b246d Step #5: Base64: IyE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 117 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3715195646 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562329b4ad60, 0x562329d3371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562329d33720,0x56232bbbd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d46bc445fe5eef1125228cce271ca63a02b246d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 126 processed earlier; will process 10850 files now Step #5: ==4246== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56232068d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562326cc8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562326cab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562326cab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562320693652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5623205f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5623205eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562320685595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623236b48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623236b48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623236b48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623236b48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623236b48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623236b48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623236b48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623236b48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623236b48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623236b48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5623258b945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562322615578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5623226205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5623223cbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5623223cbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5623223cc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5623223cb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5623223cb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5623223cb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562326cad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562326cb67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562326c9e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562326cc8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4040ed7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5623205ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x38, Step #5: -8 Step #5: artifact_prefix='./'; Test unit written to ./oom-413eb32104d697d2d75b5dfde422a9c299130f44 Step #5: Base64: LTg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 118 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3715633166 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a78f23d60, 0x557a7910c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a7910c720,0x557a7af962c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/413eb32104d697d2d75b5dfde422a9c299130f44' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 127 processed earlier; will process 10849 files now Step #5: ==4282== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a6fa662d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a760a1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a7608446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a7608438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a6fa6c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a6f9cd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a6f9c7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a6fa5e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a72a8d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a72a8d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a72a8d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a72a8d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a72a8d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a72a8d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a72a8d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a72a8d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a72a8d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a72a8d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a74c9245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a719ee578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a719f95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a717a4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a717a4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a717a5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a717a4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a717a4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a717a4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a7608694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a7608f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a76077529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a760a1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3d8944082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a6f9c643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x9f, Step #5: \333\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-15ca59afdbcfbda0855ad34d4909e5dda2157d22 Step #5: Base64: 258= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 119 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3716065458 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea3ec97d60, 0x55ea3ee8071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea3ee80720,0x55ea40d0a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/15ca59afdbcfbda0855ad34d4909e5dda2157d22' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 128 processed earlier; will process 10848 files now Step #5: ==4318== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea357da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea3be15728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea3bdf846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea3bdf838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea357e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea3574142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea3573bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea357d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea388018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea388018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea388018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea388018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea388018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea388018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea388018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea388018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea388018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea388018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea3aa0645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea37762578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea3776d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea37518d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea37518d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea37519808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea37518944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea37518944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea37518944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea3bdfa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea3be037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea3bdeb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea3be15fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8626faf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea3573a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc,0xc, Step #5: \014\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-5df9b5633e8ea2c33bb86c4eb4c2c39bed290561 Step #5: Base64: DAw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 120 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3716486984 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556f01ab6d60, 0x556f01c9f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556f01c9f720,0x556f03b292c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5df9b5633e8ea2c33bb86c4eb4c2c39bed290561' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 129 processed earlier; will process 10847 files now Step #5: ==4354== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ef85f92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556efec34728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556efec1746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556efec1738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ef85ff652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ef856042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ef855ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ef85f1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556efb6208c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556efb6208c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556efb6208c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556efb6208c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556efb6208c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556efb6208c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556efb6208c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556efb6208c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556efb6208c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556efb6208c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556efd82545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556efa581578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556efa58c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556efa337d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556efa337d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556efa338808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556efa337944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556efa337944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556efa337944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556efec1994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556efec227b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556efec0a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556efec34fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0244b7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ef855943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0x97, Step #5: \337\227 Step #5: artifact_prefix='./'; Test unit written to ./oom-b6a88117a976fc912ab9c438e291b84c2e59d0c5 Step #5: Base64: 35c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 121 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3716921606 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561d7d21dd60, 0x561d7d40671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561d7d406720,0x561d7f2902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6a88117a976fc912ab9c438e291b84c2e59d0c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 130 processed earlier; will process 10846 files now Step #5: ==4390== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561d73d602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561d7a39b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561d7a37e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561d7a37e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561d73d66652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561d73cc742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561d73cc1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561d73d58595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561d76d878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561d76d878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561d76d878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561d76d878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561d76d878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561d76d878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561d76d878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561d76d878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561d76d878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561d76d878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561d78f8c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561d75ce8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561d75cf35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561d75a9ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561d75a9ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561d75a9f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561d75a9e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561d75a9e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561d75a9e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561d7a38094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561d7a3897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561d7a371529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561d7a39bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25a91ed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561d73cc043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x6e, Step #5: in Step #5: artifact_prefix='./'; Test unit written to ./oom-af10ef20dd9060bbeead0afbc55381a66af442ef Step #5: Base64: aW4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 122 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3717354059 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5600d8157d60, 0x5600d834071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5600d8340720,0x5600da1ca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af10ef20dd9060bbeead0afbc55381a66af442ef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 131 processed earlier; will process 10845 files now Step #5: ==4426== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600cec9a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5600d52d5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5600d52b846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5600d52b838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5600ceca0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600cec0142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600cebfbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600cec92595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600d1cc18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600d1cc18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600d1cc18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600d1cc18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600d1cc18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600d1cc18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600d1cc18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600d1cc18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600d1cc18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600d1cc18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600d3ec645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5600d0c22578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600d0c2d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600d09d8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600d09d8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600d09d9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600d09d8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600d09d8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600d09d8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5600d52ba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5600d52c37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5600d52ab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5600d52d5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd15bf02082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600cebfa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xd, Step #5: \015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-d67d4422dccb731ed3fcb61ffdb76a979af68dde Step #5: Base64: DQ0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 123 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3717790374 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab3826dd60, 0x55ab3845671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab38456720,0x55ab3a2e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d67d4422dccb731ed3fcb61ffdb76a979af68dde' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 132 processed earlier; will process 10844 files now Step #5: ==4462== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ab2edb02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab353eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab353ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab353ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ab2edb6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ab2ed1742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ab2ed11c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ab2eda8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab31dd78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab31dd78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab31dd78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab31dd78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab31dd78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab31dd78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab31dd78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab31dd78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab31dd78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab31dd78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab33fdc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab30d38578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab30d435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab30aeed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab30aeed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab30aef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab30aee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab30aee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab30aee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab353d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab353d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab353c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab353ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd699836082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ab2ed1043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x3d, Step #5: == Step #5: artifact_prefix='./'; Test unit written to ./oom-6947818ac409551f11fbaa78f0ea6391960aa5b8 Step #5: Base64: PT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 124 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3718227753 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5571b9b52d60, 0x5571b9d3b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5571b9d3b720,0x5571bbbc52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6947818ac409551f11fbaa78f0ea6391960aa5b8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 133 processed earlier; will process 10843 files now Step #5: ==4498== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571b06952d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5571b6cd0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5571b6cb346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5571b6cb338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571b069b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5571b05fc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5571b05f6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5571b068d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571b36bc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571b36bc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571b36bc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571b36bc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571b36bc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571b36bc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571b36bc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571b36bc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571b36bc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571b36bc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5571b58c145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5571b261d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571b26285a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571b23d3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571b23d3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571b23d4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571b23d3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571b23d3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571b23d3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5571b6cb594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571b6cbe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5571b6ca6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5571b6cd0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9fcb893082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5571b05f543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d,0x46, Step #5: mF Step #5: artifact_prefix='./'; Test unit written to ./oom-f3b7b4d8014783269099a7416ad6e596f26af61d Step #5: Base64: bUY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 125 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3718667727 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f02ed0bd60, 0x55f02eef471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f02eef4720,0x55f030d7e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f3b7b4d8014783269099a7416ad6e596f26af61d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 134 processed earlier; will process 10842 files now Step #5: ==4534== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f02584e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f02be89728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f02be6c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f02be6c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f025854652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f0257b542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f0257afc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f025846595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f0288758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f0288758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f0288758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f0288758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f0288758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f0288758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f0288758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f0288758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f0288758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f0288758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f02aa7a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f0277d6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f0277e15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f02758cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f02758cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f02758d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f02758c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f02758c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f02758c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f02be6e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f02be777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f02be5f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f02be89fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f96b6fe4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f0257ae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24, Step #5: $$ Step #5: artifact_prefix='./'; Test unit written to ./oom-89f0403865a685eab3831c406205bbfe40f946d4 Step #5: Base64: JCQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 126 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3719105833 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557aead72d60, 0x557aeaf5b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557aeaf5b720,0x557aecde52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/89f0403865a685eab3831c406205bbfe40f946d4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 135 processed earlier; will process 10841 files now Step #5: ==4570== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557ae18b52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ae7ef0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ae7ed346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ae7ed338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557ae18bb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557ae181c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557ae1816c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557ae18ad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557ae48dc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557ae48dc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557ae48dc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557ae48dc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557ae48dc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557ae48dc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557ae48dc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557ae48dc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557ae48dc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557ae48dc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ae6ae145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557ae383d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557ae38485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557ae35f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557ae35f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557ae35f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557ae35f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557ae35f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557ae35f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ae7ed594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ae7ede7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ae7ec6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ae7ef0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc0fa8b2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557ae181543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xa, Step #5: =\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-9ae22869553bb63a4f4133b33d9b0e315b842f7e Step #5: Base64: PQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 127 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3719535328 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56009f8c1d60, 0x56009faaa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56009faaa720,0x5600a19342c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ae22869553bb63a4f4133b33d9b0e315b842f7e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 136 processed earlier; will process 10840 files now Step #5: ==4606== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600964042d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56009ca3f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56009ca2246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56009ca2238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56009640a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56009636b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560096365c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600963fc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56009942b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56009942b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56009942b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56009942b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56009942b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56009942b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56009942b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56009942b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56009942b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56009942b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56009b63045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56009838c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600983975a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560098142d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560098142d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560098143808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560098142944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560098142944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560098142944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56009ca2494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56009ca2d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56009ca15529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56009ca3ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2ef52ab082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56009636443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x19,0x1, Step #5: \031\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-9cd8d204202598ce7de6a301ea4a5de001876308 Step #5: Base64: GQE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 128 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3719975482 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b82f5dd60, 0x558b8314671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b83146720,0x558b84fd02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9cd8d204202598ce7de6a301ea4a5de001876308' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 137 processed earlier; will process 10839 files now Step #5: ==4642== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b79aa02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b800db728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b800be46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b800be38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b79aa6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b79a0742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b79a01c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b79a98595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b7cac78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b7cac78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b7cac78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b7cac78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b7cac78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b7cac78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b7cac78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b7cac78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b7cac78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b7cac78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b7eccc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b7ba28578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b7ba335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b7b7ded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b7b7ded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b7b7df808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b7b7de944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b7b7de944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b7b7de944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b800c094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b800c97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b800b1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b800dbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc469146082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b79a0043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x22, Step #5: \"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-dd29ecf524b030a65261e3059c48ab9e1ecb2585 Step #5: Base64: IiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 129 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3720414153 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f5a8b72d60, 0x55f5a8d5b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f5a8d5b720,0x55f5aabe52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dd29ecf524b030a65261e3059c48ab9e1ecb2585' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 138 processed earlier; will process 10838 files now Step #5: ==4678== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f59f6b52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f5a5cf0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f5a5cd346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f5a5cd338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f59f6bb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f59f61c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f59f616c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f59f6ad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f5a26dc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f5a26dc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f5a26dc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f5a26dc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f5a26dc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f5a26dc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f5a26dc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f5a26dc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f5a26dc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f5a26dc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f5a48e145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f5a163d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f5a16485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f5a13f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f5a13f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f5a13f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f5a13f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f5a13f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f5a13f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f5a5cd594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f5a5cde7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f5a5cc6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f5a5cf0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4264f36082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f59f61543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd0,0x82, Step #5: \320\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-4a3534317f31a18033ccc2856a238d8b504e6b11 Step #5: Base64: 0II= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 130 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3720854805 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5629a8d38d60, 0x5629a8f2171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5629a8f21720,0x5629aadab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a3534317f31a18033ccc2856a238d8b504e6b11' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 139 processed earlier; will process 10837 files now Step #5: ==4714== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56299f87b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5629a5eb6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5629a5e9946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5629a5e9938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56299f881652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56299f7e242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56299f7dcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56299f873595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629a28a28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629a28a28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629a28a28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629a28a28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629a28a28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629a28a28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629a28a28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629a28a28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629a28a28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629a28a28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5629a4aa745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5629a1803578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5629a180e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5629a15b9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5629a15b9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5629a15ba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5629a15b9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5629a15b9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5629a15b9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5629a5e9b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5629a5ea47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5629a5e8c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5629a5eb6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f69fc432082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56299f7db43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x8, Step #5: a\010 Step #5: artifact_prefix='./'; Test unit written to ./oom-1436c49b27e334782f2fd587dfca3263612a3675 Step #5: Base64: YQg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 131 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3721295126 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f7f0b0d60, 0x561f7f29971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f7f299720,0x561f811232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1436c49b27e334782f2fd587dfca3263612a3675' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 140 processed earlier; will process 10836 files now Step #5: ==4750== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f75bf32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f7c22e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f7c21146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f7c21138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f75bf9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f75b5a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f75b54c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f75beb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f78c1a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f78c1a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f78c1a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f78c1a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f78c1a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f78c1a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f78c1a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f78c1a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f78c1a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f78c1a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f7ae1f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f77b7b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f77b865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f77931d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f77931d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f77932808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f77931944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f77931944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f77931944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f7c21394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f7c21c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f7c204529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f7c22efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f90b0c4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f75b5343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x45, Step #5: =E Step #5: artifact_prefix='./'; Test unit written to ./oom-add0fd3c2be52079d8e3184f4934a42fdedb36bb Step #5: Base64: PUU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 132 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3721732789 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dbd1dabd60, 0x55dbd1f9471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dbd1f94720,0x55dbd3e1e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/add0fd3c2be52079d8e3184f4934a42fdedb36bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 141 processed earlier; will process 10835 files now Step #5: ==4786== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dbc88ee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dbcef29728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dbcef0c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dbcef0c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dbc88f4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dbc885542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dbc884fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dbc88e6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dbcb9158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dbcb9158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dbcb9158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dbcb9158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dbcb9158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dbcb9158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dbcb9158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dbcb9158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dbcb9158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dbcb9158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dbcdb1a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dbca876578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dbca8815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dbca62cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dbca62cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dbca62d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dbca62c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dbca62c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dbca62c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dbcef0e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dbcef177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dbceeff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dbcef29fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb4501e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dbc884e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x0, Step #5: \003\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-688934845f22049cb14668832efa33d45013b6b9 Step #5: Base64: AwA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 133 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3722178104 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560c53515d60, 0x560c536fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560c536fe720,0x560c555882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/688934845f22049cb14668832efa33d45013b6b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 142 processed earlier; will process 10834 files now Step #5: ==4822== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c4a0582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560c50693728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560c5067646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560c5067638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c4a05e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c49fbf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c49fb9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c4a050595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560c4d07f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560c4d07f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560c4d07f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560c4d07f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560c4d07f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560c4d07f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560c4d07f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560c4d07f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560c4d07f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560c4d07f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560c4f28445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560c4bfe0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560c4bfeb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560c4bd96d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560c4bd96d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560c4bd97808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560c4bd96944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560c4bd96944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560c4bd96944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560c5067894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560c506817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560c50669529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560c50693fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbec91d6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c49fb843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x35,0x2e, Step #5: 5. Step #5: artifact_prefix='./'; Test unit written to ./oom-d2835fcfb3bce92c9b822f1932f63e4e027da70d Step #5: Base64: NS4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 134 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3722618021 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564c26343d60, 0x564c2652c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564c2652c720,0x564c283b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d2835fcfb3bce92c9b822f1932f63e4e027da70d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 143 processed earlier; will process 10833 files now Step #5: ==4858== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564c1ce862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564c234c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564c234a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564c234a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564c1ce8c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564c1cded42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564c1cde7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564c1ce7e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564c1fead8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564c1fead8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564c1fead8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564c1fead8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564c1fead8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564c1fead8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564c1fead8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564c1fead8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564c1fead8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564c1fead8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564c220b245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564c1ee0e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564c1ee195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564c1ebc4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564c1ebc4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564c1ebc5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564c1ebc4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564c1ebc4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564c1ebc4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564c234a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564c234af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564c23497529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564c234c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e6f513082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564c1cde643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34,0x7d, Step #5: 4} Step #5: artifact_prefix='./'; Test unit written to ./oom-e20b35ed30c70770e13a928519aa91468bd08d65 Step #5: Base64: NH0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 135 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3723049160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cefc801d60, 0x55cefc9ea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cefc9ea720,0x55cefe8742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e20b35ed30c70770e13a928519aa91468bd08d65' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 144 processed earlier; will process 10832 files now Step #5: ==4894== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cef33442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cef997f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cef996246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cef996238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cef334a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cef32ab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cef32a5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cef333c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cef636b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cef636b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cef636b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cef636b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cef636b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cef636b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cef636b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cef636b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cef636b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cef636b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cef857045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cef52cc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cef52d75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cef5082d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cef5082d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cef5083808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cef5082944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cef5082944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cef5082944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cef996494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cef996d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cef9955529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cef997ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff2eb6b2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cef32a443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x77, Step #5: \013w Step #5: artifact_prefix='./'; Test unit written to ./oom-2a084d4cc0a1af20e2ca59f5a7b6ee842a67ee8e Step #5: Base64: C3c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 136 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3723482224 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581ad070d60, 0x5581ad25971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581ad259720,0x5581af0e32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2a084d4cc0a1af20e2ca59f5a7b6ee842a67ee8e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 145 processed earlier; will process 10831 files now Step #5: ==4930== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581a3bb32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581aa1ee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581aa1d146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581aa1d138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581a3bb9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581a3b1a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581a3b14c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581a3bab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581a6bda8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581a6bda8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581a6bda8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581a6bda8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581a6bda8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581a6bda8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581a6bda8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581a6bda8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581a6bda8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581a6bda8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581a8ddf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581a5b3b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581a5b465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581a58f1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581a58f1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581a58f2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581a58f1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581a58f1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581a58f1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581aa1d394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581aa1dc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581aa1c4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581aa1eefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe7e9c74082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581a3b1343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c,0x34, Step #5: |4 Step #5: artifact_prefix='./'; Test unit written to ./oom-7d3ef85a50063c2afed6dc77afe3729c54979508 Step #5: Base64: fDQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 137 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3723915297 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56155d14ad60, 0x56155d33371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56155d333720,0x56155f1bd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d3ef85a50063c2afed6dc77afe3729c54979508' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 146 processed earlier; will process 10830 files now Step #5: ==4966== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561553c8d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56155a2c8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56155a2ab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56155a2ab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561553c93652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561553bf442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561553beec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561553c85595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561556cb48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561556cb48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561556cb48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561556cb48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561556cb48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561556cb48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561556cb48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561556cb48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561556cb48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561556cb48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561558eb945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561555c15578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561555c205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615559cbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615559cbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615559cc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615559cb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615559cb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615559cb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56155a2ad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56155a2b67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56155a29e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56155a2c8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f23bc583082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561553bed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e,0x47, Step #5: NG Step #5: artifact_prefix='./'; Test unit written to ./oom-224d733e3ac2260ce34b5981dc16e230662c72af Step #5: Base64: Tkc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 138 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3724348196 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560110784d60, 0x56011096d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56011096d720,0x5601127f72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/224d733e3ac2260ce34b5981dc16e230662c72af' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 147 processed earlier; will process 10829 files now Step #5: ==5002== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601072c72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56010d902728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56010d8e546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56010d8e538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5601072cd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56010722e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560107228c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5601072bf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56010a2ee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56010a2ee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56010a2ee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56010a2ee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56010a2ee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56010a2ee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56010a2ee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56010a2ee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56010a2ee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56010a2ee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56010c4f345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56010924f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56010925a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560109005d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560109005d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560109006808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560109005944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560109005944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560109005944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56010d8e794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56010d8f07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56010d8d8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56010d902fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe2fd48f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56010722743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x38,0x14, Step #5: 8\024 Step #5: artifact_prefix='./'; Test unit written to ./oom-ccd6e0afee7af28ca399ec1a3b8ef301ecbb2d82 Step #5: Base64: OBQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 139 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3724790014 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec1896fd60, 0x55ec18b5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec18b58720,0x55ec1a9e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ccd6e0afee7af28ca399ec1a3b8ef301ecbb2d82' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 148 processed earlier; will process 10828 files now Step #5: ==5038== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec0f4b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec15aed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec15ad046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec15ad038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec0f4b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec0f41942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec0f413c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec0f4aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec124d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec124d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec124d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec124d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec124d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec124d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec124d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec124d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec124d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec124d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec146de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec1143a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec114455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec111f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec111f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec111f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec111f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec111f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec111f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec15ad294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec15adb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec15ac3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec15aedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcb6cd80082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec0f41243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcb,0x81, Step #5: \313\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-e6b7f3d9b617f1d00d3b23b476f18a1dcb8b90a5 Step #5: Base64: y4E= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 140 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3725227368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5647171f2d60, 0x5647173db71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5647173db720,0x5647192652c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e6b7f3d9b617f1d00d3b23b476f18a1dcb8b90a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 149 processed earlier; will process 10827 files now Step #5: ==5074== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56470dd352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564714370728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56471435346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56471435338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56470dd3b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56470dc9c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56470dc96c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56470dd2d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564710d5c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564710d5c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564710d5c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564710d5c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564710d5c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564710d5c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564710d5c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564710d5c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564710d5c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564710d5c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564712f6145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56470fcbd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56470fcc85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56470fa73d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56470fa73d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56470fa74808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56470fa73944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56470fa73944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56470fa73944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56471435594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56471435e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564714346529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564714370fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe409cb5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56470dc9543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x6a, Step #5: tj Step #5: artifact_prefix='./'; Test unit written to ./oom-546b05909706652891a87f7bfe385ae147f61f91 Step #5: Base64: dGo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 141 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3725664877 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e259cffd60, 0x55e259ee871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e259ee8720,0x55e25bd722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/546b05909706652891a87f7bfe385ae147f61f91' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 150 processed earlier; will process 10826 files now Step #5: ==5110== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e2508422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e256e7d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e256e6046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e256e6038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e250848652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e2507a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e2507a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e25083a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e2538698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e2538698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e2538698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e2538698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e2538698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e2538698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e2538698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e2538698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e2538698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e2538698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e255a6e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e2527ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e2527d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e252580d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e252580d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e252581808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e252580944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e252580944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e252580944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e256e6294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e256e6b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e256e53529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e256e7dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb994b3c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e2507a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x25, Step #5: ?% Step #5: artifact_prefix='./'; Test unit written to ./oom-fc0521f02cd0d2a1ac6beeee7e4cfc92202e0953 Step #5: Base64: PyU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 142 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3726098782 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555692ef4d60, 0x5556930dd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556930dd720,0x555694f672c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc0521f02cd0d2a1ac6beeee7e4cfc92202e0953' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 151 processed earlier; will process 10825 files now Step #5: ==5146== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555689a372d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555690072728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55569005546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55569005538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555689a3d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55568999e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555689998c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555689a2f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55568ca5e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55568ca5e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55568ca5e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55568ca5e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55568ca5e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55568ca5e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55568ca5e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55568ca5e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55568ca5e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55568ca5e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55568ec6345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55568b9bf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55568b9ca5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55568b775d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55568b775d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55568b776808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55568b775944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55568b775944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55568b775944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55569005794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556900607b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555690048529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555690072fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5581983082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55568999743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x2b, Step #5: B+ Step #5: artifact_prefix='./'; Test unit written to ./oom-a96ddd562d17c0ce477825adcff2ef5c3f14c3b3 Step #5: Base64: Qis= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 143 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3726542177 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56078ed16d60, 0x56078eeff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56078eeff720,0x560790d892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a96ddd562d17c0ce477825adcff2ef5c3f14c3b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 152 processed earlier; will process 10824 files now Step #5: ==5182== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5607858592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56078be94728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56078be7746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56078be7738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56078585f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5607857c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5607857bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560785851595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5607888808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5607888808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5607888808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5607888808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5607888808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5607888808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5607888808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5607888808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5607888808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5607888808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56078aa8545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5607877e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5607877ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560787597d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560787597d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560787598808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560787597944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560787597944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560787597944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56078be7994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56078be827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56078be6a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56078be94fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb4be218082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5607857b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf,0xf, Step #5: \017\017 Step #5: artifact_prefix='./'; Test unit written to ./oom-9af20251e31f563588a4c4a674a397350b2191e3 Step #5: Base64: Dw8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 144 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3726972687 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f84e523d60, 0x55f84e70c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f84e70c720,0x55f8505962c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9af20251e31f563588a4c4a674a397350b2191e3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 153 processed earlier; will process 10823 files now Step #5: #1 pulse cov: 3414 ft: 3415 exec/s: 0 rss: 151Mb Step #5: ==5218== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f8450662d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f84b6a1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f84b68446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f84b68438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f84506c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f844fcd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f844fc7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f84505e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f84808d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f84808d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f84808d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f84808d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f84808d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f84808d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f84808d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f84808d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f84808d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f84808d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f84a29245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f846fee578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f846ff95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f846da4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f846da4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f846da5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f846da4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f846da4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f846da4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f84b68694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f84b68f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f84b677529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f84b6a1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4773922082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f844fc643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f, Step #5: // Step #5: artifact_prefix='./'; Test unit written to ./oom-ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610 Step #5: Base64: Ly8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 145 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3727442368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d8ab913d60, 0x55d8abafc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d8abafc720,0x55d8ad9862c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 155 processed earlier; will process 10821 files now Step #5: ==5254== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d8a24562d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d8a8a91728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d8a8a7446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d8a8a7438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d8a245c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d8a23bd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d8a23b7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d8a244e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d8a547d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d8a547d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d8a547d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d8a547d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d8a547d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d8a547d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d8a547d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d8a547d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d8a547d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d8a547d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d8a768245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d8a43de578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d8a43e95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d8a4194d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d8a4194d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d8a4195808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d8a4194944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d8a4194944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d8a4194944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d8a8a7694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d8a8a7f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d8a8a67529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d8a8a91fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba4bdcc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d8a23b643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0xa3, Step #5: \\\243 Step #5: artifact_prefix='./'; Test unit written to ./oom-ca65efd4798518d8db5c0cad67015b768f577587 Step #5: Base64: XKM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 146 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3727874891 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b281fed60, 0x560b283e771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b283e7720,0x560b2a2712c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ca65efd4798518d8db5c0cad67015b768f577587' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 156 processed earlier; will process 10820 files now Step #5: ==5290== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b1ed412d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b2537c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b2535f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b2535f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b1ed47652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b1eca842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b1eca2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b1ed39595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b21d688c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b21d688c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b21d688c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b21d688c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b21d688c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b21d688c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b21d688c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b21d688c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b21d688c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b21d688c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b23f6d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b20cc9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b20cd45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b20a7fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b20a7fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b20a80808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b20a7f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b20a7f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b20a7f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b2536194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b2536a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b25352529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b2537cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fed4d2d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b1eca143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x7a, Step #5: dz Step #5: artifact_prefix='./'; Test unit written to ./oom-57f378cca8e1bd5ea94400ff922e6451409e0765 Step #5: Base64: ZHo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 147 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3728310806 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556596d46d60, 0x556596f2f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556596f2f720,0x556598db92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/57f378cca8e1bd5ea94400ff922e6451409e0765' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 157 processed earlier; will process 10819 files now Step #5: ==5326== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55658d8892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556593ec4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556593ea746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556593ea738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55658d88f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55658d7f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55658d7eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55658d881595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5565908b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5565908b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5565908b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5565908b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5565908b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5565908b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5565908b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5565908b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5565908b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5565908b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556592ab545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55658f811578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55658f81c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55658f5c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55658f5c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55658f5c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55658f5c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55658f5c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55658f5c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556593ea994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556593eb27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556593e9a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556593ec4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f160c9c7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55658d7e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x25, Step #5: 1% Step #5: artifact_prefix='./'; Test unit written to ./oom-a78a731c5a6e500a99ac9aab58e38e2b342e4f0d Step #5: Base64: MSU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 148 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3728745357 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55790aa1dd60, 0x55790ac0671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55790ac06720,0x55790ca902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a78a731c5a6e500a99ac9aab58e38e2b342e4f0d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 158 processed earlier; will process 10818 files now Step #5: ==5362== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5579015602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557907b9b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557907b7e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557907b7e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557901566652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5579014c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5579014c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557901558595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5579045878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5579045878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5579045878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5579045878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5579045878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5579045878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5579045878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5579045878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5579045878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5579045878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55790678c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579034e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579034f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55790329ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55790329ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55790329f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55790329e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55790329e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55790329e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557907b8094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557907b897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557907b71529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557907b9bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f55fd5c6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5579014c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x63, Step #5: :c Step #5: artifact_prefix='./'; Test unit written to ./oom-516957e653d8f6be0ec7a766870297980290faac Step #5: Base64: OmM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 149 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3729185193 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5652b187bd60, 0x5652b1a6471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5652b1a64720,0x5652b38ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/516957e653d8f6be0ec7a766870297980290faac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 159 processed earlier; will process 10817 files now Step #5: ==5398== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5652a83be2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5652ae9f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5652ae9dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5652ae9dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5652a83c4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5652a832542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5652a831fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5652a83b6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652ab3e58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652ab3e58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652ab3e58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652ab3e58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652ab3e58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652ab3e58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652ab3e58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652ab3e58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652ab3e58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652ab3e58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5652ad5ea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5652aa346578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652aa3515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5652aa0fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5652aa0fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5652aa0fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5652aa0fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5652aa0fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5652aa0fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5652ae9de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652ae9e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5652ae9cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5652ae9f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa8746f0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5652a831e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x2f, Step #5: \001/ Step #5: artifact_prefix='./'; Test unit written to ./oom-87dfa8dd501cceafd6b478922c0f50ded4cf79be Step #5: Base64: AS8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 150 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3729621495 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562457f63d60, 0x56245814c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56245814c720,0x562459fd62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87dfa8dd501cceafd6b478922c0f50ded4cf79be' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 160 processed earlier; will process 10816 files now Step #5: ==5434== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56244eaa62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5624550e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5624550c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5624550c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56244eaac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56244ea0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56244ea07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56244ea9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562451acd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562451acd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562451acd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562451acd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562451acd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562451acd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562451acd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562451acd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562451acd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562451acd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562453cd245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562450a2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562450a395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5624507e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5624507e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5624507e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5624507e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5624507e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5624507e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5624550c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5624550cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5624550b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5624550e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffb5068b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56244ea0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x41, Step #5: DA Step #5: artifact_prefix='./'; Test unit written to ./oom-593c323390e39a524395f3227c9aef6ba349fd18 Step #5: Base64: REE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 151 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3730059481 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a7796fd60, 0x558a77b5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a77b58720,0x558a799e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/593c323390e39a524395f3227c9aef6ba349fd18' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 161 processed earlier; will process 10815 files now Step #5: #1 pulse cov: 6482 ft: 6482 exec/s: 0 rss: 164Mb Step #5: ==5470== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a6e4b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a74aed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a74ad046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a74ad038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a6e4b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a6e41942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a6e413c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a6e4aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a714d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a714d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a714d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a714d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a714d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a714d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a714d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a714d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a714d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a714d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a736de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a7043a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a704455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a701f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a701f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a701f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a701f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a701f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a701f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a74ad294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a74adb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a74ac3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a74aedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc0bf0b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a6e41243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7d,0x27, Step #5: }' Step #5: artifact_prefix='./'; Test unit written to ./oom-69b832bec722a825df3b6a18ee4d5ed1241b01b6 Step #5: Base64: fSc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 152 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3730549966 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55992eb82d60, 0x55992ed6b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55992ed6b720,0x559930bf52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/69b832bec722a825df3b6a18ee4d5ed1241b01b6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 163 processed earlier; will process 10813 files now Step #5: ==5506== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599256c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55992bd00728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55992bce346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55992bce338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5599256cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55992562c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559925626c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5599256bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5599286ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5599286ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5599286ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5599286ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5599286ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5599286ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5599286ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5599286ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5599286ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5599286ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55992a8f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55992764d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599276585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559927403d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559927403d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559927404808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559927403944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559927403944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559927403944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55992bce594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55992bcee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55992bcd6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55992bd00fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4252a64082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55992562543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3e,0x58, Step #5: >X Step #5: artifact_prefix='./'; Test unit written to ./oom-912162280b9be2f4fbfef5b2cce5451d6569d3c8 Step #5: Base64: Plg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 153 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3730987092 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560f2605cd60, 0x560f2624571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560f26245720,0x560f280cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/912162280b9be2f4fbfef5b2cce5451d6569d3c8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 164 processed earlier; will process 10812 files now Step #5: ==5542== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560f1cb9f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560f231da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560f231bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560f231bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560f1cba5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560f1cb0642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560f1cb00c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560f1cb97595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560f1fbc68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560f1fbc68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560f1fbc68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560f1fbc68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560f1fbc68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560f1fbc68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560f1fbc68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560f1fbc68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560f1fbc68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560f1fbc68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560f21dcb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560f1eb27578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560f1eb325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560f1e8ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560f1e8ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560f1e8de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560f1e8dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560f1e8dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560f1e8dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560f231bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560f231c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560f231b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560f231dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fad9f0f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560f1caff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x25, Step #5: %% Step #5: artifact_prefix='./'; Test unit written to ./oom-e11557a88106e7fe5bb613921c6f637bccd31989 Step #5: Base64: JSU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 154 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3731422215 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec7b384d60, 0x55ec7b56d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec7b56d720,0x55ec7d3f72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e11557a88106e7fe5bb613921c6f637bccd31989' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 165 processed earlier; will process 10811 files now Step #5: ==5578== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec71ec72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec78502728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec784e546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec784e538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec71ecd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec71e2e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec71e28c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec71ebf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec74eee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec74eee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec74eee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec74eee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec74eee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec74eee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec74eee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec74eee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec74eee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec74eee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec770f345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec73e4f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec73e5a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec73c05d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec73c05d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec73c06808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec73c05944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec73c05944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec73c05944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec784e794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec784f07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec784d8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec78502fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9049d30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec71e2743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0xb8, Step #5: \302\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-756515a75ad2f92f30c281cb747eee315a22ea8a Step #5: Base64: wrg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 155 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3731861331 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560aed0f7d60, 0x560aed2e071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560aed2e0720,0x560aef16a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/756515a75ad2f92f30c281cb747eee315a22ea8a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 166 processed earlier; will process 10810 files now Step #5: ==5614== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ae3c3a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560aea275728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560aea25846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560aea25838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ae3c40652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ae3ba142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ae3b9bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ae3c32595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ae6c618c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ae6c618c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ae6c618c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ae6c618c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ae6c618c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ae6c618c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ae6c618c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ae6c618c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ae6c618c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ae6c618c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ae8e6645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ae5bc2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ae5bcd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ae5978d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ae5978d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ae5979808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ae5978944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ae5978944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ae5978944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560aea25a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560aea2637b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560aea24b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560aea275fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f547adb5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ae3b9a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd1,0xa0, Step #5: \321\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-66171f13d83204083bd22e3a5881edfc602d6318 Step #5: Base64: 0aA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 156 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3732310039 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b32881d60, 0x558b32a6a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b32a6a720,0x558b348f42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/66171f13d83204083bd22e3a5881edfc602d6318' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 167 processed earlier; will process 10809 files now Step #5: ==5650== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b293c42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b2f9ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b2f9e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b2f9e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b293ca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b2932b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b29325c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b293bc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b2c3eb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b2c3eb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b2c3eb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b2c3eb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b2c3eb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b2c3eb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b2c3eb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b2c3eb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b2c3eb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b2c3eb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b2e5f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b2b34c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b2b3575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b2b102d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b2b102d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b2b103808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b2b102944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b2b102944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b2b102944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b2f9e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b2f9ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b2f9d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b2f9fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3825cff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b2932443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x2b, Step #5: {+ Step #5: artifact_prefix='./'; Test unit written to ./oom-425047c038625bcecd4f691e0365190485985a27 Step #5: Base64: eys= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 157 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3732751445 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556e5d4ead60, 0x556e5d6d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556e5d6d3720,0x556e5f55d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/425047c038625bcecd4f691e0365190485985a27' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 168 processed earlier; will process 10808 files now Step #5: ==5686== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556e5402d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556e5a668728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556e5a64b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556e5a64b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556e54033652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556e53f9442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556e53f8ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556e54025595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556e570548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556e570548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556e570548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556e570548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556e570548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556e570548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556e570548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556e570548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556e570548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556e570548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556e5925945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556e55fb5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556e55fc05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556e55d6bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556e55d6bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556e55d6c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556e55d6b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556e55d6b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556e55d6b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556e5a64d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556e5a6567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556e5a63e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556e5a668fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcee2924082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556e53f8d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0xbb, Step #5: \333\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-4bc6e4c25fe60d30c976d7718c4103472db79dcb Step #5: Base64: 27s= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 158 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3733194461 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b03d67d60, 0x557b03f5071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b03f50720,0x557b05dda2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4bc6e4c25fe60d30c976d7718c4103472db79dcb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 169 processed earlier; will process 10807 files now Step #5: ==5722== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557afa8aa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b00ee5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b00ec846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b00ec838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557afa8b0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557afa81142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557afa80bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557afa8a2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557afd8d18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557afd8d18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557afd8d18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557afd8d18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557afd8d18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557afd8d18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557afd8d18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557afd8d18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557afd8d18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557afd8d18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557affad645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557afc832578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557afc83d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557afc5e8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557afc5e8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557afc5e9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557afc5e8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557afc5e8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557afc5e8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b00eca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b00ed37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b00ebb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b00ee5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f09eb31b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557afa80a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0xb, Step #5: \013\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-528f35403f03cffb7c48def06f9729651237f5ff Step #5: Base64: Cws= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 159 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3733626960 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585d97acd60, 0x5585d999571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585d9995720,0x5585db81f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/528f35403f03cffb7c48def06f9729651237f5ff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 170 processed earlier; will process 10806 files now Step #5: ==5758== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585d02ef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585d692a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585d690d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585d690d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585d02f5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585d025642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585d0250c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585d02e7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585d33168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585d33168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585d33168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585d33168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585d33168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585d33168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585d33168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585d33168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585d33168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585d33168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585d551b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585d2277578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585d22825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5585d202dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5585d202dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5585d202e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5585d202d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5585d202d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5585d202d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585d690f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585d69187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585d6900529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585d692afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1bddcff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585d024f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x32, Step #5: P2 Step #5: artifact_prefix='./'; Test unit written to ./oom-f0b89ee9977fb93bf3a71343d5a95ac58463bb40 Step #5: Base64: UDI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 160 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3734065456 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5628c9c49d60, 0x5628c9e3271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5628c9e32720,0x5628cbcbc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f0b89ee9977fb93bf3a71343d5a95ac58463bb40' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 171 processed earlier; will process 10805 files now Step #5: ==5794== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5628c078c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628c6dc7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628c6daa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628c6daa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5628c0792652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5628c06f342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5628c06edc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5628c0784595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628c37b38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628c37b38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628c37b38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628c37b38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628c37b38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628c37b38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628c37b38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628c37b38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628c37b38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628c37b38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628c59b845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5628c2714578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5628c271f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5628c24cad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5628c24cad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5628c24cb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5628c24ca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5628c24ca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5628c24ca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628c6dac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628c6db57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628c6d9d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628c6dc7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8056f6c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5628c06ec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34,0x7b, Step #5: 4{ Step #5: artifact_prefix='./'; Test unit written to ./oom-212bbdfc5828efb2397caaeb2738f85ba1f48d18 Step #5: Base64: NHs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 161 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3734505117 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557ca676ad60, 0x557ca695371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557ca6953720,0x557ca87dd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/212bbdfc5828efb2397caaeb2738f85ba1f48d18' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 172 processed earlier; will process 10804 files now Step #5: ==5830== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c9d2ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ca38e8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ca38cb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ca38cb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c9d2b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c9d21442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c9d20ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c9d2a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557ca02d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557ca02d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557ca02d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557ca02d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557ca02d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557ca02d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557ca02d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557ca02d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557ca02d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557ca02d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ca24d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c9f235578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c9f2405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c9efebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c9efebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c9efec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c9efeb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c9efeb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c9efeb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ca38cd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ca38d67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ca38be529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ca38e8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f257de52082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c9d20d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x71,0x52, Step #5: qR Step #5: artifact_prefix='./'; Test unit written to ./oom-95955b6461512cb08586c3fa871f117fea39ba0b Step #5: Base64: cVI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 162 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3734943820 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ed75dafd60, 0x55ed75f9871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ed75f98720,0x55ed77e222c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/95955b6461512cb08586c3fa871f117fea39ba0b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 173 processed earlier; will process 10803 files now Step #5: ==5866== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ed6c8f22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ed72f2d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ed72f1046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ed72f1038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ed6c8f8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ed6c85942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ed6c853c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ed6c8ea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ed6f9198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ed6f9198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ed6f9198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ed6f9198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ed6f9198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ed6f9198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ed6f9198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ed6f9198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ed6f9198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ed6f9198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ed71b1e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ed6e87a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ed6e8855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ed6e630d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ed6e630d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ed6e631808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ed6e630944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ed6e630944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ed6e630944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ed72f1294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ed72f1b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ed72f03529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ed72f2dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2357a44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ed6c85243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x4d, Step #5: MM Step #5: artifact_prefix='./'; Test unit written to ./oom-4a3a8927b85daa16f0fe11b6bbb759eee3095858 Step #5: Base64: TU0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 163 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3735383514 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565271340d60, 0x56527152971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565271529720,0x5652733b32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a3a8927b85daa16f0fe11b6bbb759eee3095858' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 174 processed earlier; will process 10802 files now Step #5: ==5902== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565267e832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56526e4be728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56526e4a146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56526e4a138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565267e89652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565267dea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565267de4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565267e7b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56526aeaa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56526aeaa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56526aeaa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56526aeaa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56526aeaa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56526aeaa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56526aeaa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56526aeaa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56526aeaa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56526aeaa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56526d0af45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565269e0b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565269e165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565269bc1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565269bc1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565269bc2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565269bc1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565269bc1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565269bc1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56526e4a394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56526e4ac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56526e494529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56526e4befa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08b47e1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565267de343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x20, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-099600a10a944114aac406d136b625fb416dd779 Step #5: Base64: ICA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 164 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3735802175 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ee20086d60, 0x55ee2026f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ee2026f720,0x55ee220f92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/099600a10a944114aac406d136b625fb416dd779' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 175 processed earlier; will process 10801 files now Step #5: ==5938== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ee16bc92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ee1d204728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ee1d1e746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ee1d1e738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ee16bcf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ee16b3042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ee16b2ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ee16bc1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ee19bf08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ee19bf08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ee19bf08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ee19bf08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ee19bf08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ee19bf08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ee19bf08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ee19bf08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ee19bf08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ee19bf08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ee1bdf545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ee18b51578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ee18b5c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ee18907d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ee18907d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ee18908808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ee18907944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ee18907944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ee18907944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ee1d1e994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ee1d1f27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ee1d1da529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ee1d204fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f127cc5e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ee16b2943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x2c, Step #5: ', Step #5: artifact_prefix='./'; Test unit written to ./oom-809401f14c20f5e5a279a9efaa4c97436332a2a1 Step #5: Base64: Jyw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 165 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3736239893 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ff0a795d60, 0x55ff0a97e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ff0a97e720,0x55ff0c8082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/809401f14c20f5e5a279a9efaa4c97436332a2a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 176 processed earlier; will process 10800 files now Step #5: ==5974== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ff012d82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ff07913728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ff078f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ff078f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ff012de652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ff0123f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ff01239c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ff012d0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ff042ff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ff042ff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ff042ff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ff042ff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ff042ff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ff042ff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ff042ff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ff042ff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ff042ff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ff042ff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ff0650445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ff03260578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ff0326b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ff03016d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ff03016d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ff03017808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ff03016944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ff03016944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ff03016944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ff078f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ff079017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ff078e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ff07913fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac17273082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ff0123843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd0,0xbf, Step #5: \320\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-9caf4a95f812be6ab203095bb2ffda9f7256fe6a Step #5: Base64: 0L8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 166 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3736673631 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a9c0305d60, 0x55a9c04ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a9c04ee720,0x55a9c23782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9caf4a95f812be6ab203095bb2ffda9f7256fe6a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 177 processed earlier; will process 10799 files now Step #5: ==6010== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a9b6e482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a9bd483728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a9bd46646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a9bd46638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a9b6e4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a9b6daf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a9b6da9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a9b6e40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a9b9e6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a9b9e6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a9b9e6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a9b9e6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a9b9e6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a9b9e6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a9b9e6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a9b9e6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a9b9e6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a9b9e6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a9bc07445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a9b8dd0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a9b8ddb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a9b8b86d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a9b8b86d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a9b8b87808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a9b8b86944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a9b8b86944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a9b8b86944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a9bd46894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a9bd4717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a9bd459529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a9bd483fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f69affdb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a9b6da843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x76, Step #5: :v Step #5: artifact_prefix='./'; Test unit written to ./oom-5ff572ca7c69f86f416f8f4dd907e2e6df55909a Step #5: Base64: OnY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 167 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3737106158 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d07b348d60, 0x55d07b53171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d07b531720,0x55d07d3bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ff572ca7c69f86f416f8f4dd907e2e6df55909a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 178 processed earlier; will process 10798 files now Step #5: ==6046== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d071e8b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d0784c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d0784a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d0784a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d071e91652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d071df242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d071decc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d071e83595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d074eb28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d074eb28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d074eb28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d074eb28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d074eb28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d074eb28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d074eb28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d074eb28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d074eb28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d074eb28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d0770b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d073e13578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d073e1e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d073bc9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d073bc9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d073bca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d073bc9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d073bc9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d073bc9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d0784ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d0784b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d07849c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d0784c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a1f9a6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d071deb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x7e, Step #5: 0~ Step #5: artifact_prefix='./'; Test unit written to ./oom-d9dc4752a25d754c51d466823879b43997c6e571 Step #5: Base64: MH4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 168 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3737538647 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e020820d60, 0x55e020a0971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e020a09720,0x55e0228932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d9dc4752a25d754c51d466823879b43997c6e571' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 179 processed earlier; will process 10797 files now Step #5: ==6082== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e0173632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e01d99e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e01d98146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e01d98138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e017369652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e0172ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e0172c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e01735b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e01a38a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e01a38a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e01a38a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e01a38a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e01a38a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e01a38a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e01a38a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e01a38a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e01a38a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e01a38a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e01c58f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e0192eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e0192f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e0190a1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e0190a1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e0190a2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e0190a1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e0190a1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e0190a1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e01d98394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e01d98c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e01d974529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e01d99efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2179135082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e0172c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x2d, Step #5: ~- Step #5: artifact_prefix='./'; Test unit written to ./oom-977014b1ee2a39f414ea34da42cafd40e3847427 Step #5: Base64: fi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 169 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3737973562 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5557b14b7d60, 0x5557b16a071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5557b16a0720,0x5557b352a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/977014b1ee2a39f414ea34da42cafd40e3847427' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 180 processed earlier; will process 10796 files now Step #5: ==6118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5557a7ffa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5557ae635728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5557ae61846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5557ae61838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5557a8000652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5557a7f6142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5557a7f5bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5557a7ff2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5557ab0218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5557ab0218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5557ab0218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5557ab0218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5557ab0218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5557ab0218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5557ab0218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5557ab0218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5557ab0218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5557ab0218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5557ad22645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5557a9f82578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5557a9f8d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5557a9d38d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5557a9d38d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5557a9d39808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5557a9d38944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5557a9d38944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5557a9d38944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5557ae61a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5557ae6237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5557ae60b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5557ae635fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8de7353082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5557a7f5a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xce,0x91, Step #5: \316\221 Step #5: artifact_prefix='./'; Test unit written to ./oom-56ef110565e8b5c12f9f7e4066673a87dd94c9ac Step #5: Base64: zpE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 170 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3738405604 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bec6fc6d60, 0x55bec71af71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bec71af720,0x55bec90392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56ef110565e8b5c12f9f7e4066673a87dd94c9ac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 181 processed earlier; will process 10795 files now Step #5: ==6154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bebdb092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bec4144728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bec412746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bec412738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bebdb0f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bebda7042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bebda6ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bebdb01595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bec0b308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bec0b308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bec0b308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bec0b308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bec0b308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bec0b308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bec0b308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bec0b308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bec0b308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bec0b308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bec2d3545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bebfa91578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bebfa9c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bebf847d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bebf847d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bebf848808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bebf847944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bebf847944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bebf847944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bec412994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bec41327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bec411a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bec4144fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f388ef12082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bebda6943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x5, Step #5: +\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-c22a45bb1e6dd3772187f60986fce38daf4ebeb8 Step #5: Base64: KwU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 171 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3738851517 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca4c1e1d60, 0x55ca4c3ca71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca4c3ca720,0x55ca4e2542c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c22a45bb1e6dd3772187f60986fce38daf4ebeb8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 182 processed earlier; will process 10794 files now Step #5: ==6190== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca42d242d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca4935f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca4934246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca4934238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca42d2a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca42c8b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca42c85c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca42d1c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca45d4b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca45d4b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca45d4b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca45d4b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca45d4b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca45d4b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca45d4b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca45d4b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca45d4b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca45d4b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca47f5045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca44cac578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca44cb75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca44a62d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca44a62d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca44a63808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca44a62944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca44a62944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca44a62944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca4934494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca4934d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca49335529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca4935ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f182c878082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca42c8443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x61, Step #5: da Step #5: artifact_prefix='./'; Test unit written to ./oom-cdd4f874095045f4ae6670038cbbd05fac9d4802 Step #5: Base64: ZGE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 172 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3739289355 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565517979d60, 0x565517b6271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565517b62720,0x5655199ec2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cdd4f874095045f4ae6670038cbbd05fac9d4802' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 183 processed earlier; will process 10793 files now Step #5: ==6226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56550e4bc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565514af7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x565514ada46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x565514ada38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56550e4c2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56550e42342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56550e41dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56550e4b4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5655114e38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5655114e38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5655114e38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5655114e38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5655114e38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5655114e38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5655114e38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5655114e38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5655114e38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5655114e38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5655136e845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565510444578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56551044f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5655101fad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5655101fad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5655101fb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5655101fa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5655101fa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5655101fa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x565514adc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x565514ae57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565514acd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565514af7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8f6ca30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56550e41c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0x38, Step #5: n8 Step #5: artifact_prefix='./'; Test unit written to ./oom-8474f7b38e608554cdf62452ff87d009cab04549 Step #5: Base64: bjg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 173 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3739723036 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55992cdf0d60, 0x55992cfd971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55992cfd9720,0x55992ee632c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8474f7b38e608554cdf62452ff87d009cab04549' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 184 processed earlier; will process 10792 files now Step #5: ==6262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599239332d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559929f6e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559929f5146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559929f5138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559923939652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55992389a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559923894c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55992392b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55992695a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55992695a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55992695a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55992695a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55992695a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55992695a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55992695a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55992695a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55992695a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55992695a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559928b5f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5599258bb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599258c65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559925671d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559925671d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559925672808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559925671944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559925671944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559925671944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559929f5394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559929f5c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559929f44529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559929f6efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f74bf8d2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55992389343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6a,0x7a, Step #5: jz Step #5: artifact_prefix='./'; Test unit written to ./oom-4e375e814be137a4f94f9d2b2a5f4ca930cc7a5a Step #5: Base64: ano= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 174 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3740152392 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558fad215d60, 0x558fad3fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558fad3fe720,0x558faf2882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4e375e814be137a4f94f9d2b2a5f4ca930cc7a5a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 185 processed earlier; will process 10791 files now Step #5: ==6298== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558fa3d582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558faa393728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558faa37646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558faa37638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558fa3d5e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558fa3cbf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558fa3cb9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558fa3d50595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558fa6d7f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558fa6d7f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558fa6d7f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558fa6d7f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558fa6d7f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558fa6d7f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558fa6d7f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558fa6d7f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558fa6d7f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558fa6d7f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558fa8f8445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558fa5ce0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558fa5ceb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558fa5a96d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558fa5a96d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558fa5a97808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558fa5a96944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558fa5a96944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558fa5a96944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558faa37894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558faa3817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558faa369529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558faa393fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5f8157c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558fa3cb843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc8,0xa0, Step #5: \310\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-da366823fe847be8e2dcc8984824a372548708b7 Step #5: Base64: yKA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 175 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3740588231 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ccb898fd60, 0x55ccb8b7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ccb8b78720,0x55ccbaa022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/da366823fe847be8e2dcc8984824a372548708b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 186 processed earlier; will process 10790 files now Step #5: ==6334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ccaf4d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ccb5b0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ccb5af046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ccb5af038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ccaf4d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ccaf43942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ccaf433c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ccaf4ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ccb24f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ccb24f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ccb24f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ccb24f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ccb24f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ccb24f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ccb24f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ccb24f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ccb24f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ccb24f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ccb46fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ccb145a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ccb14655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ccb1210d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ccb1210d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ccb1211808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ccb1210944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ccb1210944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ccb1210944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ccb5af294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ccb5afb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ccb5ae3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ccb5b0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f919d7a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ccaf43243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x22, Step #5: '\" Step #5: artifact_prefix='./'; Test unit written to ./oom-ce4310c274a623bf708c2156890bf00667718582 Step #5: Base64: JyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 176 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3741026109 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56477983bd60, 0x564779a2471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564779a24720,0x56477b8ae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ce4310c274a623bf708c2156890bf00667718582' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 187 processed earlier; will process 10789 files now Step #5: ==6370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56477037e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5647769b9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56477699c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56477699c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564770384652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5647702e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5647702dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564770376595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5647733a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5647733a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5647733a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5647733a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5647733a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5647733a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5647733a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5647733a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5647733a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5647733a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5647755aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564772306578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5647723115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5647720bcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5647720bcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5647720bd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5647720bc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5647720bc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5647720bc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56477699e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5647769a77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56477698f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5647769b9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f725ce40082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5647702de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3d, Step #5: <= Step #5: artifact_prefix='./'; Test unit written to ./oom-8a681a2f041f4625cceacf20f0cf8ebf4248b5f1 Step #5: Base64: PD0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 177 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3741466293 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b889e6d60, 0x563b88bcf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b88bcf720,0x563b8aa592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8a681a2f041f4625cceacf20f0cf8ebf4248b5f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 188 processed earlier; will process 10788 files now Step #5: ==6406== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563b7f5292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b85b64728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b85b4746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b85b4738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563b7f52f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563b7f49042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563b7f48ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563b7f521595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b825508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b825508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b825508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b825508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b825508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b825508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b825508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b825508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b825508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b825508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b8475545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b814b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b814bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b81267d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b81267d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b81268808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b81267944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b81267944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b81267944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b85b4994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b85b527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b85b3a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b85b64fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc459325082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563b7f48943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x2e, Step #5: 9. Step #5: artifact_prefix='./'; Test unit written to ./oom-5c72da08f13e3df6d60f53d6513dd6552e66c36a Step #5: Base64: OS4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 178 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3741912955 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5583d2c33d60, 0x5583d2e1c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5583d2e1c720,0x5583d4ca62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c72da08f13e3df6d60f53d6513dd6552e66c36a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 189 processed earlier; will process 10787 files now Step #5: #1 pulse cov: 3508 ft: 3509 exec/s: 0 rss: 155Mb Step #5: ==6442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583c97762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5583cfdb1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5583cfd9446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5583cfd9438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5583c977c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5583c96dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5583c96d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5583c976e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583cc79d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583cc79d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583cc79d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583cc79d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583cc79d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583cc79d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583cc79d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583cc79d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583cc79d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583cc79d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5583ce9a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5583cb6fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5583cb7095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5583cb4b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5583cb4b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5583cb4b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5583cb4b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5583cb4b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5583cb4b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5583cfd9694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5583cfd9f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5583cfd87529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5583cfdb1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f622ddd3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5583c96d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x38,0x62, Step #5: 8b Step #5: artifact_prefix='./'; Test unit written to ./oom-2a8e26e8fcd7896301e9cc38ce6a001900857fad Step #5: Base64: OGI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 179 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3742405195 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e2e3791d60, 0x55e2e397a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e2e397a720,0x55e2e58042c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2a8e26e8fcd7896301e9cc38ce6a001900857fad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 191 processed earlier; will process 10785 files now Step #5: ==6478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e2da2d42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e2e090f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e2e08f246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e2e08f238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e2da2da652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e2da23b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e2da235c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e2da2cc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e2dd2fb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e2dd2fb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e2dd2fb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e2dd2fb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e2dd2fb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e2dd2fb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e2dd2fb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e2dd2fb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e2dd2fb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e2dd2fb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e2df50045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e2dc25c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e2dc2675a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e2dc012d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e2dc012d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e2dc013808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e2dc012944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e2dc012944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e2dc012944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e2e08f494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e2e08fd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e2e08e5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e2e090ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcbe63b4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e2da23443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xbf, Step #5: \337\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-300f01aa690f416a005dfb5fd24a7b2f3243f686 Step #5: Base64: 378= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 180 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3742844893 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e899df1d60, 0x55e899fda71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e899fda720,0x55e89be642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/300f01aa690f416a005dfb5fd24a7b2f3243f686' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 192 processed earlier; will process 10784 files now Step #5: ==6514== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8909342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e896f6f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e896f5246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e896f5238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e89093a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e89089b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e890895c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e89092c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e89395b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e89395b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e89395b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e89395b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e89395b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e89395b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e89395b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e89395b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e89395b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e89395b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e895b6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8928bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8928c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e892672d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e892672d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e892673808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e892672944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e892672944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e892672944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e896f5494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e896f5d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e896f45529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e896f6ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f04135082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e89089443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x60, Step #5: `` Step #5: artifact_prefix='./'; Test unit written to ./oom-222b2b4ab2fdd2dd8ef261d8953351ac6bc457fa Step #5: Base64: YGA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 181 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3743396745 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ef0f84d60, 0x562ef116d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ef116d720,0x562ef2ff72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/222b2b4ab2fdd2dd8ef261d8953351ac6bc457fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 193 processed earlier; will process 10783 files now Step #5: ==6550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ee7ac72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562eee102728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562eee0e546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562eee0e538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ee7acd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ee7a2e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ee7a28c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ee7abf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562eeaaee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562eeaaee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562eeaaee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562eeaaee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562eeaaee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562eeaaee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562eeaaee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562eeaaee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562eeaaee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562eeaaee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562eeccf345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ee9a4f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ee9a5a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ee9805d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ee9805d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ee9806808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ee9805944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ee9805944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ee9805944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562eee0e794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562eee0f07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562eee0d8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562eee102fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc2e5b7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ee7a2743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x20, Step #5: x Step #5: artifact_prefix='./'; Test unit written to ./oom-93bb4c5d2dc83169102545d02af706edf8e38bb6 Step #5: Base64: eCA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 182 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3743841133 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625bfbf6d60, 0x5625bfddf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625bfddf720,0x5625c1c692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93bb4c5d2dc83169102545d02af706edf8e38bb6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 194 processed earlier; will process 10782 files now Step #5: ==6586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5625b67392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625bcd74728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625bcd5746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625bcd5738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5625b673f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625b66a042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625b669ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5625b6731595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625b97608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625b97608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625b97608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625b97608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625b97608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625b97608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625b97608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625b97608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625b97608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625b97608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625bb96545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5625b86c1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5625b86cc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5625b8477d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5625b8477d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5625b8478808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5625b8477944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5625b8477944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5625b8477944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625bcd5994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625bcd627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625bcd4a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625bcd74fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb2a3cb4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625b669943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d,0x6d, Step #5: mm Step #5: artifact_prefix='./'; Test unit written to ./oom-b8d09b4d8580aacbd9efc4540a9b88d2feb9d7e5 Step #5: Base64: bW0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 183 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3744278130 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ecdf86bd60, 0x55ecdfa5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ecdfa54720,0x55ece18de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8d09b4d8580aacbd9efc4540a9b88d2feb9d7e5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 195 processed earlier; will process 10781 files now Step #5: ==6622== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ecd63ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ecdc9e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ecdc9cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ecdc9cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ecd63b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ecd631542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ecd630fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ecd63a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ecd93d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ecd93d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ecd93d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ecd93d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ecd93d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ecd93d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ecd93d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ecd93d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ecd93d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ecd93d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ecdb5da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ecd8336578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ecd83415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ecd80ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ecd80ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ecd80ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ecd80ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ecd80ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ecd80ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ecdc9ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ecdc9d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ecdc9bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ecdc9e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa6ed7d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ecd630e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0x85, Step #5: \302\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-207344f7426e2ec664f98775fad0ff35b164eefd Step #5: Base64: woU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 184 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3744705074 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ef5a5ced60, 0x55ef5a7b771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ef5a7b7720,0x55ef5c6412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/207344f7426e2ec664f98775fad0ff35b164eefd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 196 processed earlier; will process 10780 files now Step #5: ==6658== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ef511112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ef5774c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ef5772f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ef5772f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ef51117652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ef5107842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ef51072c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ef51109595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ef541388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ef541388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ef541388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ef541388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ef541388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ef541388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ef541388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ef541388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ef541388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ef541388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ef5633d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ef53099578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ef530a45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ef52e4fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ef52e4fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ef52e50808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ef52e4f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ef52e4f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ef52e4f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ef5773194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ef5773a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ef57722529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ef5774cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8b69313082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ef5107143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0x80, Step #5: \336\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-c9046012bc6665e959a901060409356a337165b3 Step #5: Base64: 3oA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 185 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3745139258 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560beeba5d60, 0x560beed8e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560beed8e720,0x560bf0c182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9046012bc6665e959a901060409356a337165b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 197 processed earlier; will process 10779 files now Step #5: ==6694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560be56e82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560bebd23728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560bebd0646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560bebd0638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560be56ee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560be564f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560be5649c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560be56e0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560be870f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560be870f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560be870f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560be870f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560be870f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560be870f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560be870f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560be870f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560be870f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560be870f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560bea91445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560be7670578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560be767b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560be7426d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560be7426d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560be7427808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560be7426944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560be7426944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560be7426944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560bebd0894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560bebd117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560bebcf9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560bebd23fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5e7c11c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560be564843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x62, Step #5: :b Step #5: artifact_prefix='./'; Test unit written to ./oom-b93ccefa28585e0321e57bd439d521347671fff9 Step #5: Base64: OmI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 186 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3745577167 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5599aac11d60, 0x5599aadfa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5599aadfa720,0x5599acc842c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b93ccefa28585e0321e57bd439d521347671fff9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 198 processed earlier; will process 10778 files now Step #5: ==6730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599a17542d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5599a7d8f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5599a7d7246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5599a7d7238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5599a175a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5599a16bb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5599a16b5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5599a174c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5599a477b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5599a477b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5599a477b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5599a477b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5599a477b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5599a477b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5599a477b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5599a477b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5599a477b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5599a477b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5599a698045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5599a36dc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599a36e75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5599a3492d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5599a3492d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5599a3493808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5599a3492944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5599a3492944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5599a3492944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5599a7d7494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5599a7d7d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5599a7d65529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5599a7d8ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f50ca3a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5599a16b443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0x29, Step #5: )) Step #5: artifact_prefix='./'; Test unit written to ./oom-4f51b4c667c3dcfab932d2b098c3a3eecffb6256 Step #5: Base64: KSk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 187 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3746013326 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562792338d60, 0x56279252171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562792521720,0x5627943ab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f51b4c667c3dcfab932d2b098c3a3eecffb6256' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 199 processed earlier; will process 10777 files now Step #5: ==6766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562788e7b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56278f4b6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56278f49946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56278f49938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562788e81652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562788de242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562788ddcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562788e73595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56278bea28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56278bea28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56278bea28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56278bea28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56278bea28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56278bea28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56278bea28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56278bea28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56278bea28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56278bea28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56278e0a745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56278ae03578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56278ae0e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56278abb9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56278abb9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56278abba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56278abb9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56278abb9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56278abb9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56278f49b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56278f4a47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56278f48c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56278f4b6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f766a59d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562788ddb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x58, Step #5: \"X Step #5: artifact_prefix='./'; Test unit written to ./oom-2f450c6f58a464501c103b96cdbf5743776727fd Step #5: Base64: Ilg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 188 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3746451530 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb95097d60, 0x55bb9528071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb95280720,0x55bb9710a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f450c6f58a464501c103b96cdbf5743776727fd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 200 processed earlier; will process 10776 files now Step #5: ==6802== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bb8bbda2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bb92215728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bb921f846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bb921f838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb8bbe0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb8bb4142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb8bb3bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb8bbd2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bb8ec018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bb8ec018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bb8ec018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bb8ec018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bb8ec018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bb8ec018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bb8ec018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bb8ec018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bb8ec018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bb8ec018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bb90e0645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb8db62578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb8db6d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb8d918d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb8d918d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb8d919808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb8d918944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb8d918944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb8d918944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bb921fa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bb922037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bb921eb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bb92215fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f919e312082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb8bb3a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x35,0x40, Step #5: 5@ Step #5: artifact_prefix='./'; Test unit written to ./oom-3a59146c793108f8f188cf1784d67915983c00d2 Step #5: Base64: NUA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 189 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3746887359 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5601cee11d60, 0x5601ceffa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5601ceffa720,0x5601d0e842c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a59146c793108f8f188cf1784d67915983c00d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 201 processed earlier; will process 10775 files now Step #5: ==6838== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601c59542d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5601cbf8f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5601cbf7246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5601cbf7238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5601c595a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5601c58bb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5601c58b5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5601c594c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601c897b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601c897b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601c897b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601c897b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601c897b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601c897b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601c897b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601c897b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601c897b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601c897b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601cab8045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601c78dc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601c78e75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601c7692d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601c7692d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601c7693808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601c7692944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601c7692944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601c7692944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5601cbf7494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601cbf7d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5601cbf65529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5601cbf8ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f373c58f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5601c58b443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0x3d, Step #5: \015= Step #5: artifact_prefix='./'; Test unit written to ./oom-050dc032cf71bd509f8b98d54b18f1bf729ee893 Step #5: Base64: DT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 190 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3747318319 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb0cb37d60, 0x55bb0cd2071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb0cd20720,0x55bb0ebaa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/050dc032cf71bd509f8b98d54b18f1bf729ee893' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 202 processed earlier; will process 10774 files now Step #5: ==6874== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bb0367a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bb09cb5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bb09c9846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bb09c9838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb03680652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb035e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb035dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb03672595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bb066a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bb066a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bb066a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bb066a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bb066a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bb066a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bb066a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bb066a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bb066a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bb066a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bb088a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb05602578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb0560d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb053b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb053b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb053b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb053b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb053b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb053b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bb09c9a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bb09ca37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bb09c8b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bb09cb5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f43427a0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb035da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x2e, Step #5: <. Step #5: artifact_prefix='./'; Test unit written to ./oom-9186eeba7415eeb2feace4cdeda47122075e5702 Step #5: Base64: PC4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 191 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3747763554 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b1db4e7d60, 0x55b1db6d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b1db6d0720,0x55b1dd55a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9186eeba7415eeb2feace4cdeda47122075e5702' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 203 processed earlier; will process 10773 files now Step #5: ==6910== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b1d202a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b1d8665728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b1d864846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b1d864838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b1d2030652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b1d1f9142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b1d1f8bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b1d2022595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1d50518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1d50518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1d50518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1d50518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1d50518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1d50518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1d50518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1d50518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1d50518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1d50518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b1d725645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b1d3fb2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1d3fbd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b1d3d68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b1d3d68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b1d3d69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b1d3d68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b1d3d68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b1d3d68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b1d864a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1d86537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b1d863b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b1d8665fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6bcc28e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b1d1f8a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x70,0x3e, Step #5: p> Step #5: artifact_prefix='./'; Test unit written to ./oom-7f7467397cea7de51f29dc50cac2190d921b443e Step #5: Base64: cD4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 192 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3748194998 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5645b0d3dd60, 0x5645b0f2671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5645b0f26720,0x5645b2db02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f7467397cea7de51f29dc50cac2190d921b443e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 204 processed earlier; will process 10772 files now Step #5: ==6946== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5645a78802d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5645adebb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5645ade9e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5645ade9e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5645a7886652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5645a77e742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5645a77e1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5645a7878595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5645aa8a78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5645aa8a78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5645aa8a78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5645aa8a78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5645aa8a78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5645aa8a78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5645aa8a78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5645aa8a78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5645aa8a78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5645aa8a78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5645acaac45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5645a9808578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5645a98135a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5645a95bed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5645a95bed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5645a95bf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5645a95be944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5645a95be944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5645a95be944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5645adea094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5645adea97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5645ade91529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5645adebbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2601e84082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5645a77e043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xb6, Step #5: \336\266 Step #5: artifact_prefix='./'; Test unit written to ./oom-1128415b8b72ea41b312c2d633d23df2bf17e9b2 Step #5: Base64: 3rY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 193 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3748634892 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b482b88d60, 0x55b482d7171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b482d71720,0x55b484bfb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1128415b8b72ea41b312c2d633d23df2bf17e9b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 205 processed earlier; will process 10771 files now Step #5: ==6982== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b4796cb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b47fd06728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b47fce946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b47fce938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b4796d1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b47963242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b47962cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b4796c3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b47c6f28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b47c6f28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b47c6f28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b47c6f28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b47c6f28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b47c6f28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b47c6f28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b47c6f28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b47c6f28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b47c6f28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b47e8f745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b47b653578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b47b65e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b47b409d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b47b409d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b47b40a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b47b409944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b47b409944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b47b409944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b47fceb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b47fcf47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b47fcdc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b47fd06fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f444fb74082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b47962b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xa, Step #5: \015\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-ba8ab5a0280b953aa97435ff8946cbcbb2755a27 Step #5: Base64: DQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 194 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3749057908 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5567b887ad60, 0x5567b8a6371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5567b8a63720,0x5567ba8ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ba8ab5a0280b953aa97435ff8946cbcbb2755a27' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 206 processed earlier; will process 10770 files now Step #5: ==7018== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5567af3bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5567b59f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5567b59db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5567b59db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5567af3c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5567af32442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5567af31ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5567af3b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567b23e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567b23e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567b23e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567b23e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567b23e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567b23e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567b23e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567b23e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567b23e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567b23e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5567b45e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5567b1345578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5567b13505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5567b10fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5567b10fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5567b10fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5567b10fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5567b10fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5567b10fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5567b59dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5567b59e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5567b59ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5567b59f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd6f1ef5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5567af31d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd3,0x9e, Step #5: \323\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-5eff8e9d5a4491e0a48117a5d68ee542bd1419a2 Step #5: Base64: 054= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 195 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3749496236 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab32a2cd60, 0x55ab32c1571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab32c15720,0x55ab34a9f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5eff8e9d5a4491e0a48117a5d68ee542bd1419a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 207 processed earlier; will process 10769 files now Step #5: ==7054== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ab2956f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab2fbaa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab2fb8d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab2fb8d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ab29575652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ab294d642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ab294d0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ab29567595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab2c5968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab2c5968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab2c5968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab2c5968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab2c5968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab2c5968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab2c5968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab2c5968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab2c5968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab2c5968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab2e79b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab2b4f7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab2b5025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab2b2add3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab2b2add3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab2b2ae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab2b2ad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab2b2ad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab2b2ad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab2fb8f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab2fb987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab2fb80529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab2fbaafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd11740a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ab294cf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0x9f, Step #5: \303\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-00b39d61cc9b61a36437c4de643ec56b831e36d5 Step #5: Base64: w58= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 196 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3749932837 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5607ec5c0d60, 0x5607ec7a971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5607ec7a9720,0x5607ee6332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00b39d61cc9b61a36437c4de643ec56b831e36d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 208 processed earlier; will process 10768 files now Step #5: ==7090== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5607e31032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5607e973e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5607e972146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5607e972138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5607e3109652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5607e306a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5607e3064c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5607e30fb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5607e612a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5607e612a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5607e612a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5607e612a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5607e612a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5607e612a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5607e612a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5607e612a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5607e612a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5607e612a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5607e832f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5607e508b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5607e50965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5607e4e41d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5607e4e41d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5607e4e42808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5607e4e41944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5607e4e41944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5607e4e41944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5607e972394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5607e972c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5607e9714529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5607e973efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fefb22e9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5607e306343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xff,0xe3, Step #5: \377\343 Step #5: artifact_prefix='./'; Test unit written to ./oom-86a198ddea021234efca100a42c44529b64eab35 Step #5: Base64: /+M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 197 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3750351406 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556397001d60, 0x5563971ea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5563971ea720,0x5563990742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/86a198ddea021234efca100a42c44529b64eab35' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 209 processed earlier; will process 10767 files now Step #5: ==7126== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55638db442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55639417f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55639416246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55639416238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55638db4a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55638daab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55638daa5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55638db3c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556390b6b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556390b6b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556390b6b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556390b6b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556390b6b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556390b6b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556390b6b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556390b6b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556390b6b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556390b6b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556392d7045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55638facc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55638fad75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55638f882d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55638f882d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55638f883808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55638f882944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55638f882944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55638f882944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55639416494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55639416d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556394155529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55639417ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac7a720082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55638daa443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x7d, Step #5: R} Step #5: artifact_prefix='./'; Test unit written to ./oom-74df03bcb36ae030d669f9da8ef9cab66f9b16d8 Step #5: Base64: Un0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 198 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3750796608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56346fc41d60, 0x56346fe2a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56346fe2a720,0x563471cb42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/74df03bcb36ae030d669f9da8ef9cab66f9b16d8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 210 processed earlier; will process 10766 files now Step #5: ==7162== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634667842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56346cdbf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56346cda246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56346cda238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56346678a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5634666eb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5634666e5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56346677c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634697ab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634697ab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634697ab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634697ab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634697ab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634697ab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634697ab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634697ab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634697ab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634697ab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56346b9b045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56346870c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634687175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5634684c2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5634684c2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5634684c3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5634684c2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5634684c2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5634684c2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56346cda494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56346cdad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56346cd95529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56346cdbffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4202d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5634666e443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc5,0x80, Step #5: \305\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-1a687df598ea74c17de01a00731ab6d893ad567c Step #5: Base64: xYA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 199 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3751241543 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f91bb93d60, 0x55f91bd7c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f91bd7c720,0x55f91dc062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a687df598ea74c17de01a00731ab6d893ad567c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 211 processed earlier; will process 10765 files now Step #5: ==7198== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f9126d62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f918d11728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f918cf446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f918cf438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9126dc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f91263d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f912637c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9126ce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9156fd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9156fd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9156fd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9156fd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9156fd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9156fd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9156fd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9156fd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9156fd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9156fd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f91790245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f91465e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9146695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f914414d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f914414d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f914415808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f914414944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f914414944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f914414944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f918cf694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f918cff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f918ce7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f918d11fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faaf060e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f91263643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x35, Step #5: 95 Step #5: artifact_prefix='./'; Test unit written to ./oom-8e63fd3e77796b102589b1ba1e4441c7982e4132 Step #5: Base64: OTU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 200 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3751675892 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56281766ad60, 0x56281785371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562817853720,0x5628196dd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8e63fd3e77796b102589b1ba1e4441c7982e4132' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 212 processed earlier; will process 10764 files now Step #5: ==7234== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56280e1ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628147e8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628147cb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628147cb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56280e1b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56280e11442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56280e10ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56280e1a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628111d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628111d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628111d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628111d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628111d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628111d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628111d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628111d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628111d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628111d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628133d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562810135578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5628101405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56280feebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56280feebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56280feec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56280feeb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56280feeb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56280feeb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628147cd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628147d67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628147be529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628147e8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f082e599082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56280e10d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x56,0x4, Step #5: V\004 Step #5: artifact_prefix='./'; Test unit written to ./oom-8cf383be82f3e9e4c87eb09082b77ea5f672b0a0 Step #5: Base64: VgQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 201 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3752117061 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cee2f03d60, 0x55cee30ec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cee30ec720,0x55cee4f762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8cf383be82f3e9e4c87eb09082b77ea5f672b0a0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 213 processed earlier; will process 10763 files now Step #5: ==7270== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ced9a462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cee0081728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cee006446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cee006438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ced9a4c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ced99ad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ced99a7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ced9a3e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cedca6d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cedca6d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cedca6d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cedca6d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cedca6d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cedca6d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cedca6d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cedca6d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cedca6d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cedca6d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cedec7245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cedb9ce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cedb9d95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cedb784d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cedb784d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cedb785808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cedb784944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cedb784944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cedb784944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cee006694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cee006f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cee0057529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cee0081fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc84db30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ced99a643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x2d, Step #5: =- Step #5: artifact_prefix='./'; Test unit written to ./oom-0021b2b4b9f15dd7038c16779068114ecec5be13 Step #5: Base64: PS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 202 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3752561341 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c9c3c1ad60, 0x55c9c3e0371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c9c3e03720,0x55c9c5c8d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0021b2b4b9f15dd7038c16779068114ecec5be13' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 214 processed earlier; will process 10762 files now Step #5: ==7306== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c9ba75d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c9c0d98728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c9c0d7b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c9c0d7b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c9ba763652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c9ba6c442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c9ba6bec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c9ba755595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c9bd7848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c9bd7848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c9bd7848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c9bd7848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c9bd7848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c9bd7848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c9bd7848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c9bd7848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c9bd7848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c9bd7848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c9bf98945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c9bc6e5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c9bc6f05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c9bc49bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c9bc49bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c9bc49c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c9bc49b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c9bc49b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c9bc49b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c9c0d7d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c9c0d867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c9c0d6e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c9c0d98fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f640bf1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c9ba6bd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x67,0x67, Step #5: gg Step #5: artifact_prefix='./'; Test unit written to ./oom-f3226f91f77a87d909b8920adc91f9a301a7316b Step #5: Base64: Z2c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 203 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3752997810 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55965b910d60, 0x55965baf971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55965baf9720,0x55965d9832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f3226f91f77a87d909b8920adc91f9a301a7316b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 215 processed earlier; will process 10761 files now Step #5: ==7342== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5596524532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559658a8e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559658a7146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559658a7138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559652459652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5596523ba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5596523b4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55965244b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55965547a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55965547a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55965547a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55965547a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55965547a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55965547a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55965547a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55965547a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55965547a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55965547a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55965767f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5596543db578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5596543e65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559654191d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559654191d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559654192808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559654191944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559654191944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559654191944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559658a7394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559658a7c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559658a64529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559658a8efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6091220082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5596523b343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x5a, Step #5: \\Z Step #5: artifact_prefix='./'; Test unit written to ./oom-2f88fa0b60564b0dea0ce8cf54e11752cb8bf66a Step #5: Base64: XFo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 204 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3753433059 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a869c6d60, 0x558a86baf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a86baf720,0x558a88a392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f88fa0b60564b0dea0ce8cf54e11752cb8bf66a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 216 processed earlier; will process 10760 files now Step #5: ==7378== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a7d5092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a83b44728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a83b2746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a83b2738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a7d50f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a7d47042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a7d46ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a7d501595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a805308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a805308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a805308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a805308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a805308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a805308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a805308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a805308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a805308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a805308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a8273545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a7f491578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a7f49c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a7f247d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a7f247d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a7f248808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a7f247944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a7f247944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a7f247944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a83b2994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a83b327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a83b1a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a83b44fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff36ccff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a7d46943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x4d, Step #5: AM Step #5: artifact_prefix='./'; Test unit written to ./oom-80d305c58f97edfae92a3627f5a66d9bef4d8d46 Step #5: Base64: QU0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 205 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3753870803 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5618d5257d60, 0x5618d544071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5618d5440720,0x5618d72ca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80d305c58f97edfae92a3627f5a66d9bef4d8d46' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 217 processed earlier; will process 10759 files now Step #5: ==7414== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5618cbd9a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5618d23d5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5618d23b846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5618d23b838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5618cbda0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5618cbd0142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5618cbcfbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5618cbd92595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5618cedc18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5618cedc18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5618cedc18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5618cedc18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5618cedc18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5618cedc18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5618cedc18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5618cedc18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5618cedc18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5618cedc18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5618d0fc645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5618cdd22578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5618cdd2d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5618cdad8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5618cdad8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5618cdad9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5618cdad8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5618cdad8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5618cdad8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5618d23ba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5618d23c37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5618d23ab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5618d23d5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b58165082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5618cbcfa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xbb, Step #5: \337\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-eb2d143c24fa95837538b25c55acfcdcb4a486ca Step #5: Base64: 37s= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 206 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3754303608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619d62fbd60, 0x5619d64e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619d64e4720,0x5619d836e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eb2d143c24fa95837538b25c55acfcdcb4a486ca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 218 processed earlier; will process 10758 files now Step #5: ==7450== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5619cce3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619d3479728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619d345c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619d345c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5619cce44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5619ccda542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5619ccd9fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5619cce36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619cfe658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619cfe658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619cfe658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619cfe658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619cfe658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619cfe658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619cfe658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619cfe658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619cfe658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619cfe658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619d206a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619cedc6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619cedd15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619ceb7cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619ceb7cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619ceb7d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619ceb7c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619ceb7c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619ceb7c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619d345e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619d34677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619d344f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619d3479fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e6d5a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5619ccd9e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4b,0x3b, Step #5: K; Step #5: artifact_prefix='./'; Test unit written to ./oom-939959f9e4f323bd3845d7986e2c4d763336f418 Step #5: Base64: Szs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 207 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3754740137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5608eb90fd60, 0x5608ebaf871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5608ebaf8720,0x5608ed9822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/939959f9e4f323bd3845d7986e2c4d763336f418' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 219 processed earlier; will process 10757 files now Step #5: ==7486== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608e24522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5608e8a8d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5608e8a7046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5608e8a7038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608e2458652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5608e23b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5608e23b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608e244a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608e54798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608e54798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608e54798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608e54798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608e54798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608e54798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608e54798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608e54798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608e54798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608e54798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608e767e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608e43da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608e43e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608e4190d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608e4190d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608e4191808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608e4190944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608e4190944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608e4190944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5608e8a7294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5608e8a7b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5608e8a63529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5608e8a8dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8dc9b84082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5608e23b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x4e, Step #5: \012N Step #5: artifact_prefix='./'; Test unit written to ./oom-600d84307ed0c74c26c3a10055f127e1e057b7f9 Step #5: Base64: Ck4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 208 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3755169447 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561db6a70d60, 0x561db6c5971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561db6c59720,0x561db8ae32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/600d84307ed0c74c26c3a10055f127e1e057b7f9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 220 processed earlier; will process 10756 files now Step #5: ==7522== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561dad5b32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561db3bee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561db3bd146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561db3bd138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561dad5b9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561dad51a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561dad514c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561dad5ab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561db05da8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561db05da8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561db05da8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561db05da8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561db05da8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561db05da8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561db05da8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561db05da8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561db05da8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561db05da8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561db27df45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561daf53b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561daf5465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561daf2f1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561daf2f1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561daf2f2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561daf2f1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561daf2f1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561daf2f1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561db3bd394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561db3bdc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561db3bc4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561db3beefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffa1848e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561dad51343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xbd, Step #5: \337\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-8f33f14f402f89f17b4b9370f8f0ba0ae929a94d Step #5: Base64: 370= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 209 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3755605574 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c571c30d60, 0x55c571e1971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c571e19720,0x55c573ca32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8f33f14f402f89f17b4b9370f8f0ba0ae929a94d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 221 processed earlier; will process 10755 files now Step #5: ==7558== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5687732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c56edae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c56ed9146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c56ed9138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c568779652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c5686da42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c5686d4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c56876b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c56b79a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c56b79a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c56b79a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c56b79a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c56b79a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c56b79a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c56b79a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c56b79a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c56b79a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c56b79a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c56d99f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c56a6fb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c56a7065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c56a4b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c56a4b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c56a4b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c56a4b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c56a4b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c56a4b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c56ed9394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c56ed9c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c56ed84529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c56edaefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe81701d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c5686d343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0xb3, Step #5: \303\263 Step #5: artifact_prefix='./'; Test unit written to ./oom-a6abd767c025f163792b3f6d1fec94a731abce06 Step #5: Base64: w7M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 210 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3756040393 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d74631d60, 0x556d7481a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d7481a720,0x556d766a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a6abd767c025f163792b3f6d1fec94a731abce06' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 222 processed earlier; will process 10754 files now Step #5: ==7594== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d6b1742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d717af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d7179246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d7179238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d6b17a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d6b0db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d6b0d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d6b16c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d6e19b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d6e19b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d6e19b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d6e19b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d6e19b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d6e19b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d6e19b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d6e19b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d6e19b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d6e19b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d703a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d6d0fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d6d1075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d6ceb2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d6ceb2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d6ceb3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d6ceb2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d6ceb2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d6ceb2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d7179494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d7179d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d71785529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d717affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe048417082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d6b0d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa, Step #5: \012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-71853c6197a6a7f222db0f1978c7cb232b87c5ee Step #5: Base64: Cgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 211 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3756455888 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56461a227d60, 0x56461a41071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56461a410720,0x56461c29a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71853c6197a6a7f222db0f1978c7cb232b87c5ee' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 223 processed earlier; will process 10753 files now Step #5: ==7630== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564610d6a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5646173a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56461738846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56461738838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564610d70652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564610cd142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564610ccbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564610d62595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564613d918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564613d918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564613d918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564613d918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564613d918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564613d918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564613d918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564613d918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564613d918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564613d918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564615f9645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564612cf2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564612cfd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564612aa8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564612aa8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564612aa9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564612aa8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564612aa8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564612aa8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56461738a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5646173937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56461737b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5646173a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc126705082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564610cca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2d, Step #5: /- Step #5: artifact_prefix='./'; Test unit written to ./oom-dfec926c1e11575719960ca972a0834a44a5eef0 Step #5: Base64: Ly0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 212 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3756888402 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb8e461d60, 0x55bb8e64a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb8e64a720,0x55bb904d42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dfec926c1e11575719960ca972a0834a44a5eef0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 224 processed earlier; will process 10752 files now Step #5: ==7666== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bb84fa42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bb8b5df728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bb8b5c246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bb8b5c238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb84faa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb84f0b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb84f05c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb84f9c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bb87fcb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bb87fcb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bb87fcb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bb87fcb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bb87fcb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bb87fcb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bb87fcb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bb87fcb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bb87fcb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bb87fcb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bb8a1d045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb86f2c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb86f375a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb86ce2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb86ce2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb86ce3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb86ce2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb86ce2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb86ce2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bb8b5c494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bb8b5cd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bb8b5b5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bb8b5dffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd5c65a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb84f0443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0x80, Step #5: \337\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-824ab64f3a678275c864d1b52da7b11d3406664b Step #5: Base64: 34A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 213 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3757319290 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c804468d60, 0x55c80465171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c804651720,0x55c8064db2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/824ab64f3a678275c864d1b52da7b11d3406664b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 225 processed earlier; will process 10751 files now Step #5: ==7702== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c7fafab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c8015e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c8015c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c8015c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c7fafb1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c7faf1242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c7faf0cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c7fafa3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c7fdfd28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c7fdfd28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c7fdfd28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c7fdfd28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c7fdfd28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c7fdfd28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c7fdfd28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c7fdfd28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c7fdfd28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c7fdfd28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c8001d745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c7fcf33578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c7fcf3e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c7fcce9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c7fcce9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c7fccea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c7fcce9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c7fcce9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c7fcce9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c8015cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c8015d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c8015bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c8015e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc95d833082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c7faf0b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6,0x58, Step #5: \006X Step #5: artifact_prefix='./'; Test unit written to ./oom-61a6cc0e0b32b26b5a281e3d6cf689c7bd4f9cd8 Step #5: Base64: Blg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 214 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3757759857 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56270817bd60, 0x56270836471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562708364720,0x56270a1ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/61a6cc0e0b32b26b5a281e3d6cf689c7bd4f9cd8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 226 processed earlier; will process 10750 files now Step #5: ==7738== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5626fecbe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5627052f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5627052dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5627052dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5626fecc4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5626fec2542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5626fec1fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5626fecb6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562701ce58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562701ce58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562701ce58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562701ce58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562701ce58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562701ce58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562701ce58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562701ce58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562701ce58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562701ce58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562703eea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562700c46578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562700c515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5627009fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5627009fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5627009fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5627009fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5627009fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5627009fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5627052de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627052e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5627052cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5627052f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe71b32a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5626fec1e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa, Step #5: -\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-60215a10e730f79c20b7d4fcaabec120335e379e Step #5: Base64: LQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 215 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3758203233 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564cbe631d60, 0x564cbe81a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564cbe81a720,0x564cc06a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/60215a10e730f79c20b7d4fcaabec120335e379e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 227 processed earlier; will process 10749 files now Step #5: ==7774== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564cb51742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564cbb7af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564cbb79246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564cbb79238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564cb517a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564cb50db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564cb50d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564cb516c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564cb819b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564cb819b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564cb819b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564cb819b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564cb819b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564cb819b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564cb819b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564cb819b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564cb819b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564cb819b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564cba3a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564cb70fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564cb71075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564cb6eb2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564cb6eb2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564cb6eb3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564cb6eb2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564cb6eb2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564cb6eb2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564cbb79494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564cbb79d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564cbb785529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564cbb7affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97b65a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564cb50d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xec,0x80,0x80, Step #5: \354\200\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-bcb64d8b87b1ab82146841cd5dd045dab2a1110e Step #5: Base64: 7ICA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 216 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3758637167 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d7eb245d60, 0x55d7eb42e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d7eb42e720,0x55d7ed2b82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bcb64d8b87b1ab82146841cd5dd045dab2a1110e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 228 processed earlier; will process 10748 files now Step #5: ==7810== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d7e1d882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d7e83c3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d7e83a646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d7e83a638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d7e1d8e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d7e1cef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d7e1ce9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d7e1d80595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d7e4daf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d7e4daf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d7e4daf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d7e4daf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d7e4daf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d7e4daf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d7e4daf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d7e4daf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d7e4daf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d7e4daf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d7e6fb445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d7e3d10578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d7e3d1b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d7e3ac6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d7e3ac6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d7e3ac7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d7e3ac6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d7e3ac6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d7e3ac6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d7e83a894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d7e83b17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d7e8399529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d7e83c3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f80fba86082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d7e1ce843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x60,0x60, Step #5: \012`` Step #5: artifact_prefix='./'; Test unit written to ./oom-adc83da3952a34f74e17e469ebf30cd7d2a1cbe2 Step #5: Base64: CmBg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 217 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3759176258 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cb7f1f8d60, 0x55cb7f3e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cb7f3e1720,0x55cb8126b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/adc83da3952a34f74e17e469ebf30cd7d2a1cbe2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 229 processed earlier; will process 10747 files now Step #5: ==7846== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cb75d3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cb7c376728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cb7c35946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cb7c35938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cb75d41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cb75ca242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cb75c9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cb75d33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cb78d628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cb78d628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cb78d628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cb78d628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cb78d628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cb78d628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cb78d628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cb78d628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cb78d628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cb78d628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cb7af6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cb77cc3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cb77cce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cb77a79d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cb77a79d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cb77a7a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cb77a79944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cb77a79944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cb77a79944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cb7c35b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cb7c3647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cb7c34c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cb7c376fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f366efaf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cb75c9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x93,0x86, Step #5: \342\223\206 Step #5: artifact_prefix='./'; Test unit written to ./oom-7261f3dce28bb395b7739643ededd00871c23700 Step #5: Base64: 4pOG Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 218 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3759614458 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56013b338d60, 0x56013b52171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56013b521720,0x56013d3ab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7261f3dce28bb395b7739643ededd00871c23700' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 230 processed earlier; will process 10746 files now Step #5: ==7882== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560131e7b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5601384b6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56013849946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56013849938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560131e81652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560131de242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560131ddcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560131e73595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560134ea28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560134ea28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560134ea28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560134ea28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560134ea28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560134ea28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560134ea28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560134ea28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560134ea28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560134ea28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601370a745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560133e03578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560133e0e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560133bb9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560133bb9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560133bba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560133bb9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560133bb9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560133bb9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56013849b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601384a47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56013848c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5601384b6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd6328c3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560131ddb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x3a,0x21, Step #5: S:! Step #5: artifact_prefix='./'; Test unit written to ./oom-c651fdc7ad1ade44871da1e83871b5e93e3a14bf Step #5: Base64: Uzoh Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 219 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3760044915 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5637673bed60, 0x5637675a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5637675a7720,0x5637694312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c651fdc7ad1ade44871da1e83871b5e93e3a14bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 231 processed earlier; will process 10745 files now Step #5: ==7918== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56375df012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56376453c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56376451f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56376451f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56375df07652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56375de6842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56375de62c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56375def9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563760f288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563760f288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563760f288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563760f288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563760f288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563760f288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563760f288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563760f288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563760f288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563760f288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56376312d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56375fe89578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56375fe945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56375fc3fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56375fc3fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56375fc40808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56375fc3f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56375fc3f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56375fc3f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56376452194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56376452a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563764512529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56376453cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2fcc9f0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56375de6143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x71,0xd,0xa, Step #5: q\015\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-cc7c53bb3812eb5d01f09ff1f872ce686a9ae68e Step #5: Base64: cQ0K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 220 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3760482425 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca9022ed60, 0x55ca9041771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca90417720,0x55ca922a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc7c53bb3812eb5d01f09ff1f872ce686a9ae68e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 232 processed earlier; will process 10744 files now Step #5: ==7954== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca86d712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca8d3ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca8d38f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca8d38f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca86d77652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca86cd842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca86cd2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca86d69595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca89d988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca89d988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca89d988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca89d988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca89d988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca89d988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca89d988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca89d988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca89d988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca89d988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca8bf9d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca88cf9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca88d045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca88aafd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca88aafd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca88ab0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca88aaf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca88aaf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca88aaf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca8d39194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca8d39a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca8d382529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca8d3acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fddf820a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca86cd143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa5,0xa2, Step #5: \341\245\242 Step #5: artifact_prefix='./'; Test unit written to ./oom-d6a1839e3313db98fc7a4f71fccc548fc66ee93d Step #5: Base64: 4aWi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 221 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3760933800 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564f7fc3ed60, 0x564f7fe2771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564f7fe27720,0x564f81cb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d6a1839e3313db98fc7a4f71fccc548fc66ee93d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 233 processed earlier; will process 10743 files now Step #5: ==7990== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564f767812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564f7cdbc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564f7cd9f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564f7cd9f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564f76787652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564f766e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564f766e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564f76779595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564f797a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564f797a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564f797a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564f797a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564f797a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564f797a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564f797a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564f797a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564f797a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564f797a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564f7b9ad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564f78709578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564f787145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564f784bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564f784bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564f784c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564f784bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564f784bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564f784bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564f7cda194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564f7cdaa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564f7cd92529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564f7cdbcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2794767082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564f766e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x69,0x68, Step #5: Bih Step #5: artifact_prefix='./'; Test unit written to ./oom-e88722af7a000688f1fa5a8f808ce1a50b0a4485 Step #5: Base64: Qmlo Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 222 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3761365090 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b77378d60, 0x559b7756171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b77561720,0x559b793eb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e88722af7a000688f1fa5a8f808ce1a50b0a4485' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 234 processed earlier; will process 10742 files now Step #5: ==8026== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b6debb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b744f6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b744d946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b744d938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b6dec1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b6de2242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b6de1cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b6deb3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b70ee28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b70ee28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b70ee28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b70ee28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b70ee28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b70ee28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b70ee28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b70ee28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b70ee28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b70ee28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b730e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b6fe43578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b6fe4e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b6fbf9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b6fbf9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b6fbfa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b6fbf9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b6fbf9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b6fbf9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b744db94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b744e47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b744cc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b744f6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff138631082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b6de1b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x52,0x6d, Step #5: fRm Step #5: artifact_prefix='./'; Test unit written to ./oom-ae9fb5f8d32ba152bbf78d0a71c61daf023d2117 Step #5: Base64: ZlJt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 223 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3761797569 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5595fbc8ad60, 0x5595fbe7371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5595fbe73720,0x5595fdcfd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae9fb5f8d32ba152bbf78d0a71c61daf023d2117' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 235 processed earlier; will process 10741 files now Step #5: ==8062== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5595f27cd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5595f8e08728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5595f8deb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5595f8deb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5595f27d3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5595f273442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5595f272ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5595f27c5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5595f57f48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5595f57f48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5595f57f48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5595f57f48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5595f57f48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5595f57f48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5595f57f48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5595f57f48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5595f57f48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5595f57f48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5595f79f945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5595f4755578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5595f47605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5595f450bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5595f450bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5595f450c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5595f450b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5595f450b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5595f450b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5595f8ded94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5595f8df67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5595f8dde529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5595f8e08fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c36a9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5595f272d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x21,0x7b, Step #5: #!{ Step #5: artifact_prefix='./'; Test unit written to ./oom-15e5550f706e26a363ecd990d6d087b8e378f744 Step #5: Base64: IyF7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 224 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3762223180 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564e36576d60, 0x564e3675f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564e3675f720,0x564e385e92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/15e5550f706e26a363ecd990d6d087b8e378f744' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 236 processed earlier; will process 10740 files now Step #5: ==8098== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564e2d0b92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564e336f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564e336d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564e336d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564e2d0bf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564e2d02042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564e2d01ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564e2d0b1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564e300e08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564e300e08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564e300e08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564e300e08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564e300e08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564e300e08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564e300e08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564e300e08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564e300e08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564e300e08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564e322e545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564e2f041578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564e2f04c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564e2edf7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564e2edf7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564e2edf8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564e2edf7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564e2edf7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564e2edf7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564e336d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564e336e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564e336ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564e336f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8b3696b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564e2d01943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x10,0x60, Step #5: `\020` Step #5: artifact_prefix='./'; Test unit written to ./oom-5196fe7c6860c51a30878f7b55eb361f47e42679 Step #5: Base64: YBBg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 225 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3762798097 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5582962e0d60, 0x5582964c971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5582964c9720,0x5582983532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5196fe7c6860c51a30878f7b55eb361f47e42679' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 237 processed earlier; will process 10739 files now Step #5: ==8134== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55828ce232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55829345e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55829344146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55829344138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55828ce29652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55828cd8a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55828cd84c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55828ce1b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55828fe4a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55828fe4a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55828fe4a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55828fe4a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55828fe4a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55828fe4a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55828fe4a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55828fe4a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55828fe4a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55828fe4a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55829204f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55828edab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55828edb65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55828eb61d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55828eb61d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55828eb62808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55828eb61944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55828eb61944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55828eb61944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55829344394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55829344c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558293434529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55829345efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f6082d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55828cd8343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x68,0x9, Step #5: Ph\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-7712499daf8a47339144b773f877d59e39e0f3ff Step #5: Base64: UGgJ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 226 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3763233990 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5579088e6d60, 0x557908acf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557908acf720,0x55790a9592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7712499daf8a47339144b773f877d59e39e0f3ff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 238 processed earlier; will process 10738 files now Step #5: ==8170== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5578ff4292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557905a64728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557905a4746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557905a4738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5578ff42f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5578ff39042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5578ff38ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5578ff421595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5579024508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5579024508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5579024508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5579024508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5579024508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5579024508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5579024508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5579024508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5579024508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5579024508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55790465545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579013b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579013bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557901167d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557901167d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557901168808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557901167944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557901167944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557901167944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557905a4994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557905a527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557905a3a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557905a64fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4cac10082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5578ff38943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xb9, Step #5: \357\273\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-bae05ef8acb4c5cf1f3cf13acba05b10e7699d2a Step #5: Base64: 77u5 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 227 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3763677212 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b164d2ad60, 0x55b164f1371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b164f13720,0x55b166d9d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bae05ef8acb4c5cf1f3cf13acba05b10e7699d2a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 239 processed earlier; will process 10737 files now Step #5: ==8206== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b15b86d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b161ea8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b161e8b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b161e8b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b15b873652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b15b7d442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b15b7cec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b15b865595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b15e8948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b15e8948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b15e8948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b15e8948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b15e8948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b15e8948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b15e8948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b15e8948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b15e8948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b15e8948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b160a9945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b15d7f5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b15d8005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b15d5abd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b15d5abd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b15d5ac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b15d5ab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b15d5ab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b15d5ab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b161e8d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b161e967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b161e7e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b161ea8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd1b0855082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b15b7cd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0xa,0xa, Step #5: 1\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-971555ab39d1dfe8dff8b78c2b20e85e01c06595 Step #5: Base64: MQoK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 228 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3764116118 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f76a635d60, 0x55f76a81e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f76a81e720,0x55f76c6a82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/971555ab39d1dfe8dff8b78c2b20e85e01c06595' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 240 processed earlier; will process 10736 files now Step #5: ==8242== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7611782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7677b3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f76779646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f76779638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f76117e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7610df42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7610d9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f761170595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f76419f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f76419f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f76419f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f76419f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f76419f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f76419f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f76419f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f76419f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f76419f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f76419f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7663a445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f763100578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f76310b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f762eb6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f762eb6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f762eb7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f762eb6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f762eb6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f762eb6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f76779894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7677a17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f767789529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7677b3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe880eeb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7610d843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbe,0x80, Step #5: \357\276\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-e44b211526fd04d50cea9df7b509bf14f4293aac Step #5: Base64: 776A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 229 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3764548446 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563c3d701d60, 0x563c3d8ea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563c3d8ea720,0x563c3f7742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e44b211526fd04d50cea9df7b509bf14f4293aac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 241 processed earlier; will process 10735 files now Step #5: ==8278== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563c342442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563c3a87f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563c3a86246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563c3a86238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563c3424a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563c341ab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563c341a5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563c3423c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563c3726b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563c3726b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563c3726b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563c3726b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563c3726b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563c3726b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563c3726b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563c3726b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563c3726b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563c3726b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563c3947045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563c361cc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563c361d75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563c35f82d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563c35f82d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563c35f83808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563c35f82944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563c35f82944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563c35f82944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563c3a86494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563c3a86d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563c3a855529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563c3a87ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa6ef225082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563c341a443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbf,0xaf, Step #5: \357\277\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-e84d59f312345d714845b6d1122138692dd9ed5c Step #5: Base64: 77+v Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 230 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3764984084 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a714d2cd60, 0x55a714f1571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a714f15720,0x55a716d9f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e84d59f312345d714845b6d1122138692dd9ed5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 242 processed earlier; will process 10734 files now Step #5: ==8314== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a70b86f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a711eaa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a711e8d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a711e8d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a70b875652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a70b7d642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a70b7d0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a70b867595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a70e8968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a70e8968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a70e8968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a70e8968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a70e8968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a70e8968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a70e8968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a70e8968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a70e8968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a70e8968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a710a9b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a70d7f7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a70d8025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a70d5add3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a70d5add3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a70d5ae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a70d5ad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a70d5ad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a70d5ad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a711e8f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a711e987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a711e80529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a711eaafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5266819082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a70b7cf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbf,0xbf, Step #5: \357\277\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-c6d9a44d71abe180a4025ae4005313e09b917437 Step #5: Base64: 77+/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 231 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3765422096 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557d6360ed60, 0x557d637f771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557d637f7720,0x557d656812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c6d9a44d71abe180a4025ae4005313e09b917437' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 243 processed earlier; will process 10733 files now Step #5: ==8350== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557d5a1512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557d6078c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557d6076f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557d6076f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557d5a157652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557d5a0b842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557d5a0b2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557d5a149595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557d5d1788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557d5d1788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557d5d1788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557d5d1788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557d5d1788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557d5d1788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557d5d1788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557d5d1788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557d5d1788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557d5d1788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557d5f37d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557d5c0d9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557d5c0e45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557d5be8fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557d5be8fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557d5be90808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557d5be8f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557d5be8f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557d5be8f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557d6077194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557d6077a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557d60762529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557d6078cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9d6923a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557d5a0b143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xee,0xbd,0xbd, Step #5: \356\275\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-9d6309ae005072c0b683729784cc445acba86b47 Step #5: Base64: 7r29 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 232 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3765871499 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d3241ccd60, 0x55d3243b571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d3243b5720,0x55d32623f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9d6309ae005072c0b683729784cc445acba86b47' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 244 processed earlier; will process 10732 files now Step #5: #1 pulse cov: 3476 ft: 3477 exec/s: 0 rss: 154Mb Step #5: ==8386== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d31ad0f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d32134a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d32132d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d32132d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d31ad15652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d31ac7642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d31ac70c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d31ad07595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d31dd368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d31dd368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d31dd368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d31dd368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d31dd368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d31dd368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d31dd368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d31dd368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d31dd368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d31dd368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d31ff3b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d31cc97578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d31cca25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d31ca4dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d31ca4dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d31ca4e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d31ca4d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d31ca4d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d31ca4d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d32132f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d3213387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d321320529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d32134afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fadff5cb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d31ac6f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x9f,0xbf, Step #5: \342\237\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-2683a9b5d4f177ad84ffc4c5c1a85e405661628a Step #5: Base64: 4p+/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 233 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3766351037 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561a870a8d60, 0x561a8729171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561a87291720,0x561a8911b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2683a9b5d4f177ad84ffc4c5c1a85e405661628a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 246 processed earlier; will process 10730 files now Step #5: ==8422== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561a7dbeb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561a84226728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561a8420946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561a8420938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561a7dbf1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561a7db5242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561a7db4cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561a7dbe3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561a80c128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561a80c128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561a80c128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561a80c128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561a80c128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561a80c128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561a80c128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561a80c128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561a80c128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561a80c128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561a82e1745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561a7fb73578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561a7fb7e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561a7f929d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561a7f929d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561a7f92a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561a7f929944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561a7f929944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561a7f929944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561a8420b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561a842147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561a841fc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561a84226fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa0041de082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561a7db4b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x13,0x13,0x14, Step #5: \023\023\024 Step #5: artifact_prefix='./'; Test unit written to ./oom-60a78cfb6c88b107c2ffbdfad6f5e0658c3f9b66 Step #5: Base64: ExMU Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 234 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3766788601 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d0776e5d60, 0x55d0778ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d0778ce720,0x55d0797582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/60a78cfb6c88b107c2ffbdfad6f5e0658c3f9b66' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 247 processed earlier; will process 10729 files now Step #5: ==8458== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d06e2282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d074863728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d07484646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d07484638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d06e22e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d06e18f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d06e189c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d06e220595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d07124f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d07124f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d07124f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d07124f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d07124f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d07124f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d07124f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d07124f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d07124f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d07124f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d07345445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d0701b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d0701bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d06ff66d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d06ff66d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d06ff67808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d06ff66944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d06ff66944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d06ff66944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d07484894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d0748517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d074839529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d074863fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fea28a43082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d06e18843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x3c,0x3e, Step #5: e<> Step #5: artifact_prefix='./'; Test unit written to ./oom-8d658082cda438ddd9f4a5925d5bc992e7f0fd38 Step #5: Base64: ZTw+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 235 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3767226895 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ccb35fbd60, 0x55ccb37e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ccb37e4720,0x55ccb566e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d658082cda438ddd9f4a5925d5bc992e7f0fd38' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 248 processed earlier; will process 10728 files now Step #5: ==8494== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ccaa13e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ccb0779728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ccb075c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ccb075c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ccaa144652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ccaa0a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ccaa09fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ccaa136595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ccad1658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ccad1658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ccad1658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ccad1658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ccad1658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ccad1658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ccad1658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ccad1658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ccad1658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ccad1658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ccaf36a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ccac0c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ccac0d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ccabe7cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ccabe7cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ccabe7d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ccabe7c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ccabe7c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ccabe7c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ccb075e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ccb07677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ccb074f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ccb0779fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbab9574082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ccaa09e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0xdf,0xba, Step #5: ^\337\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-689577d7d15650c265fce2a79ea656cc9bd01e43 Step #5: Base64: Xt+6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 236 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3767670429 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a9f74c3d60, 0x55a9f76ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a9f76ac720,0x55a9f95362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/689577d7d15650c265fce2a79ea656cc9bd01e43' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 249 processed earlier; will process 10727 files now Step #5: ==8530== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a9ee0062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a9f4641728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a9f462446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a9f462438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a9ee00c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a9edf6d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a9edf67c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a9edffe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a9f102d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a9f102d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a9f102d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a9f102d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a9f102d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a9f102d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a9f102d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a9f102d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a9f102d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a9f102d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a9f323245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a9eff8e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a9eff995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a9efd44d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a9efd44d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a9efd45808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a9efd44944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a9efd44944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a9efd44944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a9f462694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a9f462f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a9f4617529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a9f4641fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f250e82a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a9edf6643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5,0xde,0xaa, Step #5: \005\336\252 Step #5: artifact_prefix='./'; Test unit written to ./oom-f5c163b24e377b4190904dd3476e1889e839f90f Step #5: Base64: Bd6q Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 237 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3768113839 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606c7cd7d60, 0x5606c7ec071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606c7ec0720,0x5606c9d4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f5c163b24e377b4190904dd3476e1889e839f90f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 250 processed earlier; will process 10726 files now Step #5: ==8566== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606be81a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5606c4e55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5606c4e3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5606c4e3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606be820652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5606be78142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5606be77bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606be812595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5606c18418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5606c18418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5606c18418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5606c18418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5606c18418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5606c18418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5606c18418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5606c18418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5606c18418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5606c18418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606c3a4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5606c07a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5606c07ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5606c0558d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5606c0558d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5606c0559808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5606c0558944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5606c0558944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5606c0558944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5606c4e3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606c4e437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5606c4e2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5606c4e55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f8c35c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5606be77a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x31,0x20, Step #5: =1 Step #5: artifact_prefix='./'; Test unit written to ./oom-ed3c2345ab243ef922a635f253c605e69f382487 Step #5: Base64: PTEg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 238 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3768550784 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e7938b3d60, 0x55e793a9c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e793a9c720,0x55e7959262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ed3c2345ab243ef922a635f253c605e69f382487' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 251 processed earlier; will process 10725 files now Step #5: #1 pulse cov: 3439 ft: 3440 exec/s: 0 rss: 153Mb Step #5: ==8602== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e78a3f62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e790a31728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e790a1446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e790a1438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e78a3fc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e78a35d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e78a357c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e78a3ee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e78d41d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e78d41d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e78d41d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e78d41d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e78d41d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e78d41d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e78d41d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e78d41d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e78d41d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e78d41d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e78f62245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e78c37e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e78c3895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e78c134d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e78c134d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e78c135808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e78c134944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e78c134944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e78c134944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e790a1694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e790a1f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e790a07529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e790a31fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4285c64082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e78a35643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x55,0x58,0x45, Step #5: UXE Step #5: artifact_prefix='./'; Test unit written to ./oom-b7df275e728fad550e74a5e2b837bb3cf8df4db3 Step #5: Base64: VVhF Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 239 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3769033981 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55adbb00ad60, 0x55adbb1f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55adbb1f3720,0x55adbd07d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b7df275e728fad550e74a5e2b837bb3cf8df4db3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 253 processed earlier; will process 10723 files now Step #5: ==8638== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55adb1b4d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55adb8188728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55adb816b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55adb816b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55adb1b53652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55adb1ab442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55adb1aaec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55adb1b45595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55adb4b748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55adb4b748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55adb4b748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55adb4b748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55adb4b748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55adb4b748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55adb4b748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55adb4b748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55adb4b748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55adb4b748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55adb6d7945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55adb3ad5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55adb3ae05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55adb388bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55adb388bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55adb388c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55adb388b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55adb388b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55adb388b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55adb816d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55adb81767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55adb815e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55adb8188fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4a0fba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55adb1aad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x56, Step #5: \000\000V Step #5: artifact_prefix='./'; Test unit written to ./oom-84fc0d3933a29894a5aa989d712899445e63b48d Step #5: Base64: AABW Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 240 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3769470241 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ba1b063d60, 0x55ba1b24c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ba1b24c720,0x55ba1d0d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/84fc0d3933a29894a5aa989d712899445e63b48d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 254 processed earlier; will process 10722 files now Step #5: ==8674== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ba11ba62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ba181e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ba181c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ba181c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ba11bac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ba11b0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ba11b07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ba11b9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ba14bcd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ba14bcd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ba14bcd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ba14bcd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ba14bcd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ba14bcd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ba14bcd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ba14bcd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ba14bcd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ba14bcd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ba16dd245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ba13b2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ba13b395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ba138e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ba138e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ba138e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ba138e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ba138e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ba138e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ba181c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ba181cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ba181b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ba181e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe008e99082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ba11b0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x70,0x3a, Step #5: fp: Step #5: artifact_prefix='./'; Test unit written to ./oom-aeee7c618c783f8fc5b800cce25ee1ed53a4543a Step #5: Base64: ZnA6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 241 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3769909339 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55904f556d60, 0x55904f73f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55904f73f720,0x5590515c92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aeee7c618c783f8fc5b800cce25ee1ed53a4543a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 255 processed earlier; will process 10721 files now Step #5: ==8710== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5590460992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55904c6d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55904c6b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55904c6b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55904609f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55904600042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559045ffac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559046091595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590490c08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590490c08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590490c08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590490c08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590490c08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590490c08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590490c08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590490c08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590490c08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590490c08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55904b2c545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559048021578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55904802c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559047dd7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559047dd7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559047dd8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559047dd7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559047dd7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559047dd7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55904c6b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55904c6c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55904c6aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55904c6d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb483b25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559045ff943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xbc,0x69, Step #5: +\274i Step #5: artifact_prefix='./'; Test unit written to ./oom-a683e18ea147b03ad36ea5b91aa9191deacc8a48 Step #5: Base64: K7xp Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 242 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3770348367 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f6b6b5dd60, 0x55f6b6d4671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f6b6d46720,0x55f6b8bd02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a683e18ea147b03ad36ea5b91aa9191deacc8a48' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 256 processed earlier; will process 10720 files now Step #5: #1 pulse cov: 3409 ft: 3410 exec/s: 0 rss: 152Mb Step #5: ==8746== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f6ad6a02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f6b3cdb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f6b3cbe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f6b3cbe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f6ad6a6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f6ad60742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f6ad601c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f6ad698595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f6b06c78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f6b06c78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f6b06c78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f6b06c78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f6b06c78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f6b06c78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f6b06c78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f6b06c78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f6b06c78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f6b06c78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f6b28cc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f6af628578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f6af6335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f6af3ded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f6af3ded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f6af3df808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f6af3de944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f6af3de944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f6af3de944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f6b3cc094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f6b3cc97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f6b3cb1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f6b3cdbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2301a9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f6ad60043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x5f,0x32, Step #5: 6_2 Step #5: artifact_prefix='./'; Test unit written to ./oom-730feb7544e8ec19d790ceacb33fced413b7492d Step #5: Base64: Nl8y Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 243 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3770838783 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5593f0830d60, 0x5593f0a1971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593f0a19720,0x5593f28a32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/730feb7544e8ec19d790ceacb33fced413b7492d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 258 processed earlier; will process 10718 files now Step #5: ==8782== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5593e73732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593ed9ae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593ed99146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593ed99138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5593e7379652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5593e72da42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5593e72d4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5593e736b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5593ea39a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5593ea39a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5593ea39a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5593ea39a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5593ea39a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5593ea39a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5593ea39a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5593ea39a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5593ea39a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5593ea39a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593ec59f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5593e92fb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5593e93065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5593e90b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5593e90b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5593e90b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5593e90b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5593e90b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5593e90b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593ed99394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593ed99c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593ed984529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593ed9aefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe7a1dae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5593e72d343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x25,0x60, Step #5: `%` Step #5: artifact_prefix='./'; Test unit written to ./oom-128cc5fd032db964245830c5c3cba5e0cb754e00 Step #5: Base64: YCVg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 244 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3771399791 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55579b2aad60, 0x55579b49371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55579b493720,0x55579d31d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/128cc5fd032db964245830c5c3cba5e0cb754e00' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 259 processed earlier; will process 10717 files now Step #5: ==8818== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555791ded2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555798428728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55579840b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55579840b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555791df3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555791d5442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555791d4ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555791de5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555794e148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555794e148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555794e148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555794e148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555794e148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555794e148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555794e148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555794e148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555794e148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555794e148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55579701945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555793d75578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555793d805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555793b2bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555793b2bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555793b2c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555793b2b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555793b2b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555793b2b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55579840d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5557984167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5557983fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555798428fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6c9f249082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555791d4d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xd0,0xb0, Step #5: \"\320\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-3174df16d25cb110c2e7df57cc7bdb9ece3bbd02 Step #5: Base64: ItCw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 245 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3771843969 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1be279d60, 0x55e1be46271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1be462720,0x55e1c02ec2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3174df16d25cb110c2e7df57cc7bdb9ece3bbd02' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 260 processed earlier; will process 10716 files now Step #5: ==8854== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1b4dbc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1bb3f7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1bb3da46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1bb3da38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1b4dc2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1b4d2342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1b4d1dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1b4db4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1b7de38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1b7de38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1b7de38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1b7de38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1b7de38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1b7de38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1b7de38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1b7de38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1b7de38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1b7de38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1b9fe845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1b6d44578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1b6d4f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1b6afad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1b6afad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1b6afb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1b6afa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1b6afa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1b6afa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1bb3dc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1bb3e57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1bb3cd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1bb3f7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a2e3b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1b4d1c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x68,0xd, Step #5: #h\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-2523f0420e16e5024d2121da59b67fe9030ba255 Step #5: Base64: I2gN Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 246 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3772287473 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5612ebf87d60, 0x5612ec17071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5612ec170720,0x5612edffa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2523f0420e16e5024d2121da59b67fe9030ba255' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 261 processed earlier; will process 10715 files now Step #5: ==8890== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612e2aca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5612e9105728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5612e90e846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5612e90e838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612e2ad0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5612e2a3142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5612e2a2bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612e2ac2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612e5af18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612e5af18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612e5af18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612e5af18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612e5af18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612e5af18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612e5af18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612e5af18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612e5af18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612e5af18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5612e7cf645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5612e4a52578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612e4a5d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612e4808d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612e4808d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612e4809808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612e4808944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612e4808944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612e4808944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5612e90ea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5612e90f37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5612e90db529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5612e9105fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f92556d4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5612e2a2a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x8,0x3d, Step #5: \003\010= Step #5: artifact_prefix='./'; Test unit written to ./oom-b83431aa86105e70e76f009146611941846672b3 Step #5: Base64: Awg9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 247 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3772731133 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8a7d1fd60, 0x55a8a7f0871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a8a7f08720,0x55a8a9d922c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b83431aa86105e70e76f009146611941846672b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 262 processed earlier; will process 10714 files now Step #5: ==8926== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a89e8622d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8a4e9d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8a4e8046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8a4e8038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a89e868652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a89e7c942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a89e7c3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a89e85a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8a18898c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8a18898c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8a18898c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8a18898c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8a18898c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8a18898c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8a18898c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8a18898c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8a18898c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8a18898c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8a3a8e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8a07ea578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8a07f55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a8a05a0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a8a05a0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a8a05a1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a8a05a0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a8a05a0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a8a05a0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8a4e8294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8a4e8b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8a4e73529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8a4e9dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9185c8e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a89e7c243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x7e,0x7e, Step #5: ~~~ Step #5: artifact_prefix='./'; Test unit written to ./oom-40ef8e2f391a7167d3643c402aff5290167914a6 Step #5: Base64: fn5+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 248 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3773187497 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cdfd683d60, 0x55cdfd86c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cdfd86c720,0x55cdff6f62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/40ef8e2f391a7167d3643c402aff5290167914a6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 263 processed earlier; will process 10713 files now Step #5: ==8962== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cdf41c62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cdfa801728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cdfa7e446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cdfa7e438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cdf41cc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cdf412d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cdf4127c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cdf41be595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cdf71ed8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cdf71ed8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cdf71ed8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cdf71ed8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cdf71ed8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cdf71ed8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cdf71ed8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cdf71ed8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cdf71ed8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cdf71ed8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cdf93f245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cdf614e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cdf61595a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cdf5f04d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cdf5f04d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cdf5f05808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cdf5f04944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cdf5f04944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cdf5f04944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cdfa7e694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cdfa7ef7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cdfa7d7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cdfa801fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f806414a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cdf412643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x70,0x3b, Step #5: %p; Step #5: artifact_prefix='./'; Test unit written to ./oom-525215b60d735fcb7bb526d0985b5e6e010354e4 Step #5: Base64: JXA7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 249 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3773631415 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56529851ad60, 0x56529870371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565298703720,0x56529a58d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/525215b60d735fcb7bb526d0985b5e6e010354e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 264 processed earlier; will process 10712 files now Step #5: ==8998== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56528f05d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565295698728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56529567b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56529567b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56528f063652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56528efc442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56528efbec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56528f055595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652920848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652920848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652920848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652920848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652920848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652920848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652920848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652920848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652920848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652920848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56529428945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565290fe5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565290ff05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565290d9bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565290d9bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565290d9c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565290d9b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565290d9b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565290d9b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56529567d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652956867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56529566e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565295698fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1bdca35082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56528efbd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x58, Step #5: +\012X Step #5: artifact_prefix='./'; Test unit written to ./oom-351f52f1b08f6ac022592e5f38574ef8394b05ec Step #5: Base64: KwpY Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 250 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3774072890 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558583eecd60, 0x5585840d571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585840d5720,0x558585f5f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/351f52f1b08f6ac022592e5f38574ef8394b05ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 265 processed earlier; will process 10711 files now Step #5: ==9034== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55857aa2f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55858106a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55858104d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55858104d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55857aa35652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55857a99642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55857a990c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55857aa27595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55857da568c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55857da568c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55857da568c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55857da568c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55857da568c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55857da568c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55857da568c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55857da568c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55857da568c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55857da568c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55857fc5b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55857c9b7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55857c9c25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55857c76dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55857c76dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55857c76e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55857c76d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55857c76d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55857c76d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55858104f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585810587b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558581040529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55858106afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1d4e1e8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55857a98f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbf,0x88, Step #5: \357\277\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-a59b89ed9e83d711df11a0a3e5ce9cde95127f8e Step #5: Base64: 77+I Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 251 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3774517282 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d5f2afd60, 0x558d5f49871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d5f498720,0x558d613222c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a59b89ed9e83d711df11a0a3e5ce9cde95127f8e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 266 processed earlier; will process 10710 files now Step #5: ==9070== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d55df22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d5c42d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d5c41046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d5c41038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d55df8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d55d5942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d55d53c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d55dea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d58e198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d58e198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d58e198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d58e198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d58e198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d58e198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d58e198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d58e198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d58e198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d58e198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d5b01e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d57d7a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d57d855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d57b30d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d57b30d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d57b31808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d57b30944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d57b30944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d57b30944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d5c41294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d5c41b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d5c403529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d5c42dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff171c3b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d55d5243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0x21,0xd, Step #5: \015!\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-97414ad2eb20046f2ee0a7d5b7b91d841f834057 Step #5: Base64: DSEN Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 252 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3774966545 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a89322fd60, 0x55a89341871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a893418720,0x55a8952a22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/97414ad2eb20046f2ee0a7d5b7b91d841f834057' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 267 processed earlier; will process 10709 files now Step #5: ==9106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a889d722d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8903ad728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a89039046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a89039038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a889d78652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a889cd942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a889cd3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a889d6a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a88cd998c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a88cd998c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a88cd998c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a88cd998c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a88cd998c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a88cd998c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a88cd998c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a88cd998c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a88cd998c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a88cd998c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a88ef9e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a88bcfa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a88bd055a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a88bab0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a88bab0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a88bab1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a88bab0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a88bab0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a88bab0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a89039294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a89039b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a890383529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8903adfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8380515082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a889cd243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x4d,0xbc, Step #5: IM\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-02a0a8b32a77218b3d01a51bca023d978ac7f5bb Step #5: Base64: SU28 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 253 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3775409404 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560269c85d60, 0x560269e6e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560269e6e720,0x56026bcf82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/02a0a8b32a77218b3d01a51bca023d978ac7f5bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 268 processed earlier; will process 10708 files now Step #5: #1 pulse cov: 10267 ft: 10268 exec/s: 0 rss: 174Mb Step #5: ==9142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5602607c82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560266e03728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560266de646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560266de638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5602607ce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56026072f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560260729c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5602607c0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5602637ef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5602637ef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5602637ef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5602637ef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5602637ef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5602637ef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5602637ef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5602637ef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5602637ef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5602637ef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602659f445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560262750578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56026275b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560262506d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560262506d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560262507808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560262506944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560262506944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560262506944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560266de894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560266df17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560266dd9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560266e03fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee15b7b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56026072843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xee,0x90,0x87, Step #5: \356\220\207 Step #5: artifact_prefix='./'; Test unit written to ./oom-be431467c8f203373bc0916fb07325df6b31ec68 Step #5: Base64: 7pCH Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 254 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3775923330 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa0e71fd60, 0x55aa0e90871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa0e908720,0x55aa107922c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be431467c8f203373bc0916fb07325df6b31ec68' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 270 processed earlier; will process 10706 files now Step #5: ==9178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa052622d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa0b89d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa0b88046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa0b88038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa05268652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa051c942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa051c3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa0525a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa082898c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa082898c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa082898c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa082898c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa082898c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa082898c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa082898c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa082898c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa082898c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa082898c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa0a48e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa071ea578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa071f55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa06fa0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa06fa0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa06fa1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa06fa0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa06fa0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa06fa0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa0b88294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa0b88b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa0b873529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa0b89dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f74a901a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa051c243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xb2,0xbe, Step #5: \357\262\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-46718c7289d6f7152b7b930c21a4c829af890fd2 Step #5: Base64: 77K+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 255 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3776362492 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b178cb8d60, 0x55b178ea171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b178ea1720,0x55b17ad2b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/46718c7289d6f7152b7b930c21a4c829af890fd2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 271 processed earlier; will process 10705 files now Step #5: ==9214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b16f7fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b175e36728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b175e1946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b175e1938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b16f801652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b16f76242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b16f75cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b16f7f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1728228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1728228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1728228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1728228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1728228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1728228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1728228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1728228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1728228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1728228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b174a2745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b171783578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b17178e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b171539d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b171539d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b17153a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b171539944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b171539944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b171539944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b175e1b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b175e247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b175e0c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b175e36fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9d979f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b16f75b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3d,0x3f, Step #5: <=? Step #5: artifact_prefix='./'; Test unit written to ./oom-f7b62011a4ee56a3ecd16469b80d7a977eec175e Step #5: Base64: PD0/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 256 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3776800474 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555aa7b28d60, 0x555aa7d1171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555aa7d11720,0x555aa9b9b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7b62011a4ee56a3ecd16469b80d7a977eec175e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 272 processed earlier; will process 10704 files now Step #5: ==9250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a9e66b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555aa4ca6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555aa4c8946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555aa4c8938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a9e671652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a9e5d242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a9e5ccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a9e663595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555aa16928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555aa16928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555aa16928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555aa16928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555aa16928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555aa16928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555aa16928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555aa16928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555aa16928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555aa16928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555aa389745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555aa05f3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555aa05fe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555aa03a9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555aa03a9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555aa03aa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555aa03a9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555aa03a9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555aa03a9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555aa4c8b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555aa4c947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555aa4c7c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555aa4ca6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4b5057082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a9e5cb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e,0x44,0xa, Step #5: ND\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-80257e1c3def92a619011e2a21c8a7d63360d61d Step #5: Base64: TkQK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 257 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3777238547 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fd7662ed60, 0x55fd7681771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fd76817720,0x55fd786a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80257e1c3def92a619011e2a21c8a7d63360d61d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 273 processed earlier; will process 10703 files now Step #5: ==9286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd6d1712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fd737ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fd7378f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fd7378f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd6d177652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd6d0d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd6d0d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd6d169595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fd701988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fd701988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fd701988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fd701988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fd701988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fd701988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fd701988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fd701988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fd701988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fd701988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fd7239d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fd6f0f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fd6f1045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fd6eeafd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fd6eeafd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fd6eeb0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fd6eeaf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fd6eeaf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fd6eeaf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fd7379194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fd7379a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fd73782529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fd737acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdb744b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd6d0d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa, Step #5: \012\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-7c338ed2840d2bf55f9f5e4eed04f66c80840eb3 Step #5: Base64: CgoK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 258 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3777658168 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5646ea9a6d60, 0x5646eab8f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5646eab8f720,0x5646eca192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7c338ed2840d2bf55f9f5e4eed04f66c80840eb3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 274 processed earlier; will process 10702 files now Step #5: ==9322== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5646e14e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5646e7b24728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5646e7b0746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5646e7b0738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5646e14ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5646e145042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5646e144ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5646e14e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5646e45108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5646e45108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5646e45108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5646e45108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5646e45108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5646e45108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5646e45108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5646e45108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5646e45108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5646e45108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5646e671545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5646e3471578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5646e347c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5646e3227d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5646e3227d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5646e3228808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5646e3227944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5646e3227944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5646e3227944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5646e7b0994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5646e7b127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5646e7afa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5646e7b24fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0902ddb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5646e144943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x12,0x0,0x12, Step #5: \022\000\022 Step #5: artifact_prefix='./'; Test unit written to ./oom-fe0c0272b4088e37022964fec42c8bda4a5effec Step #5: Base64: EgAS Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 259 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3778096048 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555f2eacbd60, 0x555f2ecb471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555f2ecb4720,0x555f30b3e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fe0c0272b4088e37022964fec42c8bda4a5effec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 275 processed earlier; will process 10701 files now Step #5: ==9358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555f2560e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555f2bc49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555f2bc2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555f2bc2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555f25614652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555f2557542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555f2556fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555f25606595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555f286358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555f286358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555f286358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555f286358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555f286358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555f286358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555f286358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555f286358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555f286358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555f286358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555f2a83a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555f27596578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555f275a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555f2734cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555f2734cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555f2734d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555f2734c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555f2734c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555f2734c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555f2bc2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555f2bc377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555f2bc1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555f2bc49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7763edd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555f2556e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0x25, Step #5: -\012% Step #5: artifact_prefix='./'; Test unit written to ./oom-003bfc0ec2fccad39afd2df8a0ba377fb4d869a4 Step #5: Base64: LQol Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 260 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3778543930 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5601174ead60, 0x5601176d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5601176d3720,0x56011955d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/003bfc0ec2fccad39afd2df8a0ba377fb4d869a4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 276 processed earlier; will process 10700 files now Step #5: ==9394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56010e02d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560114668728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56011464b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56011464b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56010e033652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56010df9442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56010df8ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56010e025595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601110548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601110548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601110548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601110548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601110548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601110548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601110548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601110548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601110548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601110548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56011325945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56010ffb5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56010ffc05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56010fd6bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56010fd6bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56010fd6c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56010fd6b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56010fd6b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56010fd6b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56011464d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601146567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56011463e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560114668fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c52747082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56010df8d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x2d,0xf6, Step #5: -\366 Step #5: artifact_prefix='./'; Test unit written to ./oom-86b7365c36868b040ca4e4caf5446debe0bf52b4 Step #5: Base64: IC32 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 261 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3778988262 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564584868d60, 0x564584a5171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564584a51720,0x5645868db2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/86b7365c36868b040ca4e4caf5446debe0bf52b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 277 processed earlier; will process 10699 files now Step #5: ==9430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56457b3ab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5645819e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5645819c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5645819c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56457b3b1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56457b31242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56457b30cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56457b3a3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56457e3d28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56457e3d28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56457e3d28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56457e3d28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56457e3d28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56457e3d28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56457e3d28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56457e3d28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56457e3d28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56457e3d28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5645805d745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56457d333578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56457d33e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56457d0e9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56457d0e9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56457d0ea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56457d0e9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56457d0e9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56457d0e9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5645819cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5645819d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5645819bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5645819e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f694c894082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56457b30b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x7f,0x1e, Step #5: \000\177\036 Step #5: artifact_prefix='./'; Test unit written to ./oom-b5448374e018957f5c414a97aa5aabb1d565fad1 Step #5: Base64: AH8e Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 262 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3779431007 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555916ef9d60, 0x5559170e271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5559170e2720,0x555918f6c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5448374e018957f5c414a97aa5aabb1d565fad1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 278 processed earlier; will process 10698 files now Step #5: ==9466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55590da3c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555914077728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55591405a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55591405a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55590da42652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55590d9a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55590d99dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55590da34595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555910a638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555910a638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555910a638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555910a638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555910a638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555910a638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555910a638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555910a638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555910a638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555910a638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555912c6845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55590f9c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55590f9cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55590f77ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55590f77ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55590f77b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55590f77a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55590f77a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55590f77a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55591405c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559140657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55591404d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555914077fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28992f7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55590d99c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xb1,0x96, Step #5: \340\261\226 Step #5: artifact_prefix='./'; Test unit written to ./oom-3e39b5d430887acaba3ad886aac9c67b6e38173a Step #5: Base64: 4LGW Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 263 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3779875160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555d0590cd60, 0x555d05af571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555d05af5720,0x555d0797f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3e39b5d430887acaba3ad886aac9c67b6e38173a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 279 processed earlier; will process 10697 files now Step #5: ==9502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555cfc44f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555d02a8a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555d02a6d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555d02a6d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555cfc455652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555cfc3b642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555cfc3b0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555cfc447595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555cff4768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555cff4768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555cff4768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555cff4768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555cff4768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555cff4768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555cff4768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555cff4768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555cff4768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555cff4768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555d0167b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555cfe3d7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555cfe3e25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555cfe18dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555cfe18dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555cfe18e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555cfe18d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555cfe18d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555cfe18d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555d02a6f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555d02a787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555d02a60529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555d02a8afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f388ccc5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555cfc3af43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x6d,0x70, Step #5: amp Step #5: artifact_prefix='./'; Test unit written to ./oom-65f59ec6b1ecd6170d5044474043cca9560a8071 Step #5: Base64: YW1w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 264 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3780313926 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e505325d60, 0x55e50550e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e50550e720,0x55e5073982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/65f59ec6b1ecd6170d5044474043cca9560a8071' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 280 processed earlier; will process 10696 files now Step #5: ==9538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e4fbe682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e5024a3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e50248646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e50248638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e4fbe6e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e4fbdcf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e4fbdc9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e4fbe60595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e4fee8f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e4fee8f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e4fee8f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e4fee8f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e4fee8f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e4fee8f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e4fee8f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e4fee8f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e4fee8f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e4fee8f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e50109445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e4fddf0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e4fddfb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e4fdba6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e4fdba6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e4fdba7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e4fdba6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e4fdba6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e4fdba6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e50248894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e5024917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e502479529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e5024a3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fca1794d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e4fbdc843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xea,0x8f,0x8f, Step #5: \352\217\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-cd8ea845bda81369b5f6685d05c78b52345b54a7 Step #5: Base64: 6o+P Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 265 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3780754701 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562639aced60, 0x562639cb771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562639cb7720,0x56263bb412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cd8ea845bda81369b5f6685d05c78b52345b54a7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 281 processed earlier; will process 10695 files now Step #5: ==9574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5626306112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562636c4c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562636c2f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562636c2f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562630617652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56263057842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562630572c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562630609595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5626336388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5626336388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5626336388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5626336388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5626336388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5626336388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5626336388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5626336388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5626336388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5626336388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56263583d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562632599578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5626325a45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56263234fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56263234fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562632350808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56263234f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56263234f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56263234f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562636c3194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562636c3a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562636c22529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562636c4cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc2badfc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56263057143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34,0x34,0x2e, Step #5: 44. Step #5: artifact_prefix='./'; Test unit written to ./oom-64eeec06517452f9678c49c78ffb700864e357d0 Step #5: Base64: NDQu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 266 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3781199877 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55faa7c26d60, 0x55faa7e0f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55faa7e0f720,0x55faa9c992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64eeec06517452f9678c49c78ffb700864e357d0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 282 processed earlier; will process 10694 files now Step #5: ==9610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fa9e7692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55faa4da4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55faa4d8746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55faa4d8738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fa9e76f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fa9e6d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fa9e6cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fa9e761595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55faa17908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55faa17908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55faa17908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55faa17908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55faa17908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55faa17908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55faa17908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55faa17908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55faa17908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55faa17908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55faa399545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55faa06f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55faa06fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55faa04a7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55faa04a7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55faa04a8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55faa04a7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55faa04a7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55faa04a7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55faa4d8994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55faa4d927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55faa4d7a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55faa4da4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feecf65b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fa9e6c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e,0xd9,0xb7, Step #5: N\331\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-0f2b15ff573e76bbb65ad71944560e875809d943 Step #5: Base64: Ttm3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 267 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3781636107 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b3471dd60, 0x556b3490671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b34906720,0x556b367902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f2b15ff573e76bbb65ad71944560e875809d943' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 283 processed earlier; will process 10693 files now Step #5: #1 pulse cov: 3646 ft: 3647 exec/s: 0 rss: 155Mb Step #5: ==9646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b2b2602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b3189b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b3187e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b3187e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b2b266652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b2b1c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b2b1c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b2b258595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b2e2878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b2e2878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b2e2878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b2e2878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b2e2878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b2e2878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b2e2878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b2e2878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b2e2878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b2e2878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b3048c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b2d1e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b2d1f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b2cf9ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b2cf9ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b2cf9f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b2cf9e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b2cf9e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b2cf9e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b3188094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b318897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b31871529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b3189bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f489cc1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b2b1c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0x75,0x65, Step #5: nue Step #5: artifact_prefix='./'; Test unit written to ./oom-00bee9e544617506d4bb2c0ee7d2108812bfc40f Step #5: Base64: bnVl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 268 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3782124632 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dfb1bc9d60, 0x55dfb1db271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dfb1db2720,0x55dfb3c3c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00bee9e544617506d4bb2c0ee7d2108812bfc40f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 285 processed earlier; will process 10691 files now Step #5: ==9682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dfa870c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dfaed47728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dfaed2a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dfaed2a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dfa8712652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dfa867342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dfa866dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dfa8704595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dfab7338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dfab7338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dfab7338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dfab7338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dfab7338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dfab7338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dfab7338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dfab7338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dfab7338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dfab7338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dfad93845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dfaa694578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dfaa69f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dfaa44ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dfaa44ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dfaa44b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dfaa44a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dfaa44a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dfaa44a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dfaed2c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dfaed357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dfaed1d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dfaed47fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb96cff0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dfa866c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0xcb,0xb5, Step #5: 3\313\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-450095ae312677fa0c735f0bb9bd5043c12a0ebc Step #5: Base64: M8u1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 269 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3782572002 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c55eb10d60, 0x55c55ecf971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c55ecf9720,0x55c560b832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/450095ae312677fa0c735f0bb9bd5043c12a0ebc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 286 processed earlier; will process 10690 files now Step #5: ==9718== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5556532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c55bc8e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c55bc7146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c55bc7138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c555659652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c5555ba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c5555b4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c55564b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c55867a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c55867a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c55867a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c55867a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c55867a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c55867a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c55867a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c55867a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c55867a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c55867a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c55a87f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c5575db578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c5575e65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c557391d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c557391d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c557392808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c557391944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c557391944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c557391944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c55bc7394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c55bc7c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c55bc64529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c55bc8efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f286a023082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c5555b343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x2d,0x2d, Step #5: \001-- Step #5: artifact_prefix='./'; Test unit written to ./oom-ddb5ada3772610b10a382947a8239fac4eb573cf Step #5: Base64: AS0t Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 270 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3783014051 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55df7072dd60, 0x55df7091671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55df70916720,0x55df727a02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ddb5ada3772610b10a382947a8239fac4eb573cf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 287 processed earlier; will process 10689 files now Step #5: ==9754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55df672702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55df6d8ab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55df6d88e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55df6d88e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55df67276652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55df671d742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55df671d1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55df67268595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55df6a2978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55df6a2978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55df6a2978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55df6a2978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55df6a2978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55df6a2978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55df6a2978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55df6a2978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55df6a2978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55df6a2978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55df6c49c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55df691f8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55df692035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55df68faed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55df68faed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55df68faf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55df68fae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55df68fae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55df68fae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55df6d89094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55df6d8997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55df6d881529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55df6d8abfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc423146082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55df671d043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6b,0x3f,0x25, Step #5: k?% Step #5: artifact_prefix='./'; Test unit written to ./oom-52b5a226c529f910940343eb6d6d5849a3e56196 Step #5: Base64: az8l Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 271 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3783452736 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560faef06d60, 0x560faf0ef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560faf0ef720,0x560fb0f792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/52b5a226c529f910940343eb6d6d5849a3e56196' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 288 processed earlier; will process 10688 files now Step #5: ==9790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560fa5a492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560fac084728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560fac06746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560fac06738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560fa5a4f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560fa59b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560fa59aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560fa5a41595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560fa8a708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560fa8a708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560fa8a708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560fa8a708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560fa8a708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560fa8a708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560fa8a708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560fa8a708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560fa8a708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560fa8a708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560faac7545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560fa79d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560fa79dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560fa7787d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560fa7787d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560fa7788808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560fa7787944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560fa7787944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560fa7787944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560fac06994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560fac0727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560fac05a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560fac084fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efda4a70082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560fa59a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xac,0x9e, Step #5: \357\254\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-26243bce85d536c665ddf7737f240db639fac4df Step #5: Base64: 76ye Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 272 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3783891452 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8ad8fcd60, 0x55e8adae571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8adae5720,0x55e8af96f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/26243bce85d536c665ddf7737f240db639fac4df' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 289 processed earlier; will process 10687 files now Step #5: ==9826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8a443f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8aaa7a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8aaa5d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8aaa5d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8a4445652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8a43a642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8a43a0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8a4437595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8a74668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8a74668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8a74668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8a74668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8a74668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8a74668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8a74668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8a74668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8a74668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8a74668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8a966b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8a63c7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8a63d25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8a617dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8a617dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8a617e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8a617d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8a617d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8a617d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8aaa5f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8aaa687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8aaa50529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8aaa7afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9d9585f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8a439f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x3a,0x7e, Step #5: \000:~ Step #5: artifact_prefix='./'; Test unit written to ./oom-910598e4bc3ad9fa7ff06aff5ddf249c274a34e6 Step #5: Base64: ADp+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 273 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3784330654 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b38467dd60, 0x55b38486671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b384866720,0x55b3866f02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/910598e4bc3ad9fa7ff06aff5ddf249c274a34e6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 290 processed earlier; will process 10686 files now Step #5: ==9862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b37b1c02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b3817fb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b3817de46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b3817de38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b37b1c6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b37b12742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b37b121c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b37b1b8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b37e1e78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b37e1e78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b37e1e78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b37e1e78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b37e1e78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b37e1e78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b37e1e78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b37e1e78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b37e1e78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b37e1e78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b3803ec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b37d148578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b37d1535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b37cefed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b37cefed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b37ceff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b37cefe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b37cefe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b37cefe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b3817e094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b3817e97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b3817d1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b3817fbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcceb62e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b37b12043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xd,0x2d, Step #5: -\015- Step #5: artifact_prefix='./'; Test unit written to ./oom-b3560ebf65b4aa2457eecd175082cd0d67b5e9ed Step #5: Base64: LQ0t Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 274 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3784771493 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bd74f44d60, 0x55bd7512d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bd7512d720,0x55bd76fb72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b3560ebf65b4aa2457eecd175082cd0d67b5e9ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 291 processed earlier; will process 10685 files now Step #5: ==9898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bd6ba872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bd720c2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bd720a546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bd720a538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bd6ba8d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bd6b9ee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bd6b9e8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bd6ba7f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bd6eaae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bd6eaae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bd6eaae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bd6eaae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bd6eaae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bd6eaae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bd6eaae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bd6eaae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bd6eaae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bd6eaae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bd70cb345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bd6da0f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bd6da1a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bd6d7c5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bd6d7c5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bd6d7c6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bd6d7c5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bd6d7c5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bd6d7c5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bd720a794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bd720b07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bd72098529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bd720c2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d493ff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bd6b9e743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x32,0x30, Step #5: 120 Step #5: artifact_prefix='./'; Test unit written to ./oom-775bc5c30e27f0e562115d136e7f7edbd3cead89 Step #5: Base64: MTIw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 275 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3785215766 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563cfa220d60, 0x563cfa40971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563cfa409720,0x563cfc2932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/775bc5c30e27f0e562115d136e7f7edbd3cead89' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 292 processed earlier; will process 10684 files now Step #5: ==9934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563cf0d632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563cf739e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563cf738146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563cf738138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563cf0d69652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563cf0cca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563cf0cc4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563cf0d5b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563cf3d8a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563cf3d8a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563cf3d8a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563cf3d8a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563cf3d8a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563cf3d8a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563cf3d8a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563cf3d8a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563cf3d8a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563cf3d8a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563cf5f8f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563cf2ceb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563cf2cf65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563cf2aa1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563cf2aa1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563cf2aa2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563cf2aa1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563cf2aa1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563cf2aa1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563cf738394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563cf738c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563cf7374529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563cf739efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe66fca0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563cf0cc343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x66,0x56, Step #5: =fV Step #5: artifact_prefix='./'; Test unit written to ./oom-1beb7991152365516ee0aee7ac9c226e31e3e8cb Step #5: Base64: PWZW Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 276 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3785652127 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f5ba1f8d60, 0x55f5ba3e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f5ba3e1720,0x55f5bc26b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1beb7991152365516ee0aee7ac9c226e31e3e8cb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 293 processed earlier; will process 10683 files now Step #5: ==9970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f5b0d3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f5b7376728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f5b735946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f5b735938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f5b0d41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f5b0ca242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f5b0c9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f5b0d33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f5b3d628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f5b3d628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f5b3d628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f5b3d628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f5b3d628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f5b3d628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f5b3d628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f5b3d628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f5b3d628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f5b3d628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f5b5f6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f5b2cc3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f5b2cce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f5b2a79d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f5b2a79d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f5b2a7a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f5b2a79944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f5b2a79944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f5b2a79944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f5b735b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f5b73647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f5b734c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f5b7376fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee74320082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f5b0c9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe4,0xa6,0xa5, Step #5: \344\246\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-5e142f0e41e101a2ffef0a37c26943f53fbea3d7 Step #5: Base64: 5Kal Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 277 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3786083784 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563310030d60, 0x56331021971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563310219720,0x5633120a32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5e142f0e41e101a2ffef0a37c26943f53fbea3d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 294 processed earlier; will process 10682 files now Step #5: ==10006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563306b732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56330d1ae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56330d19146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56330d19138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563306b79652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563306ada42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563306ad4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563306b6b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563309b9a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563309b9a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563309b9a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563309b9a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563309b9a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563309b9a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563309b9a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563309b9a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563309b9a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563309b9a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56330bd9f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563308afb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563308b065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5633088b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5633088b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5633088b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5633088b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5633088b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5633088b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56330d19394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56330d19c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56330d184529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56330d1aefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3919f7d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563306ad343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0x94,0x0, Step #5: \303\224\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-a5578c0cb802828ae9c678ee8a2904f62e7ba42b Step #5: Base64: w5QA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 278 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3786522760 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b924bfbd60, 0x55b924de471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b924de4720,0x55b926c6e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a5578c0cb802828ae9c678ee8a2904f62e7ba42b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 295 processed earlier; will process 10681 files now Step #5: ==10042== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b91b73e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b921d79728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b921d5c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b921d5c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b91b744652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b91b6a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b91b69fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b91b736595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b91e7658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b91e7658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b91e7658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b91e7658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b91e7658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b91e7658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b91e7658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b91e7658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b91e7658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b91e7658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b92096a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b91d6c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b91d6d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b91d47cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b91d47cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b91d47d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b91d47c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b91d47c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b91d47c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b921d5e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b921d677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b921d4f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b921d79fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9de09dd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b91b69e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xa4,0xbc, Step #5: \340\244\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-f7ebb2da1831eebf2ee093ce5b5a1da36c6b284f Step #5: Base64: 4KS8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 279 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3786957101 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a5dbcfd60, 0x557a5ddb871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a5ddb8720,0x557a5fc422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7ebb2da1831eebf2ee093ce5b5a1da36c6b284f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 296 processed earlier; will process 10680 files now Step #5: ==10078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a547122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a5ad4d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a5ad3046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a5ad3038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a54718652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a5467942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a54673c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a5470a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a577398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a577398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a577398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a577398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a577398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a577398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a577398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a577398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a577398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a577398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a5993e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a5669a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a566a55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a56450d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a56450d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a56451808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a56450944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a56450944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a56450944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a5ad3294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a5ad3b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a5ad23529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a5ad4dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe25a52082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a5467243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xae,0xd5, Step #5: \326\256\325 Step #5: artifact_prefix='./'; Test unit written to ./oom-a3c909e0b63be23281dc915b72509a7015684e09 Step #5: Base64: 1q7V Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 280 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3787391566 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563723b7fd60, 0x563723d6871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563723d68720,0x563725bf22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a3c909e0b63be23281dc915b72509a7015684e09' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 297 processed earlier; will process 10679 files now Step #5: ==10114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56371a6c22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563720cfd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563720ce046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563720ce038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56371a6c8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56371a62942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56371a623c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56371a6ba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56371d6e98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56371d6e98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56371d6e98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56371d6e98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56371d6e98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56371d6e98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56371d6e98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56371d6e98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56371d6e98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56371d6e98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56371f8ee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56371c64a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56371c6555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56371c400d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56371c400d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56371c401808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56371c400944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56371c400944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56371c400944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563720ce294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563720ceb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563720cd3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563720cfdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e5ac85082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56371a62243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x54,0x63, Step #5: ITc Step #5: artifact_prefix='./'; Test unit written to ./oom-307fbbdf3a4afa9be3b4cd1773c2e7d751d3e5dd Step #5: Base64: SVRj Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 281 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3787825407 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561adce9dd60, 0x561add08671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561add086720,0x561adef102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/307fbbdf3a4afa9be3b4cd1773c2e7d751d3e5dd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 298 processed earlier; will process 10678 files now Step #5: ==10150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ad39e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ada01b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ad9ffe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ad9ffe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ad39e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ad394742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ad3941c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ad39d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ad6a078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ad6a078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ad6a078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ad6a078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ad6a078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ad6a078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ad6a078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ad6a078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ad6a078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ad6a078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ad8c0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ad5968578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ad59735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ad571ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ad571ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ad571f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ad571e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ad571e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ad571e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ada00094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ada0097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ad9ff1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ada01bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb01510c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ad394043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x27,0x27, Step #5: ['' Step #5: artifact_prefix='./'; Test unit written to ./oom-e716589d09e16cf4a48d2c7f1d357bb481aaf3bc Step #5: Base64: Wycn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 282 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3788263103 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5574ce650d60, 0x5574ce83971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5574ce839720,0x5574d06c32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e716589d09e16cf4a48d2c7f1d357bb481aaf3bc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 299 processed earlier; will process 10677 files now Step #5: ==10186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5574c51932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5574cb7ce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5574cb7b146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5574cb7b138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5574c5199652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5574c50fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5574c50f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5574c518b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5574c81ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5574c81ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5574c81ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5574c81ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5574c81ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5574c81ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5574c81ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5574c81ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5574c81ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5574c81ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5574ca3bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5574c711b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5574c71265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5574c6ed1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5574c6ed1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5574c6ed2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5574c6ed1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5574c6ed1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5574c6ed1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5574cb7b394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5574cb7bc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5574cb7a4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5574cb7cefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a5111b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5574c50f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xa,0x2d, Step #5: =\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-88b77a488ff1fb97222c25ca6ef57742c602ccc1 Step #5: Base64: PQot Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 283 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3788706188 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dccf2f1d60, 0x55dccf4da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dccf4da720,0x55dcd13642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/88b77a488ff1fb97222c25ca6ef57742c602ccc1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 300 processed earlier; will process 10676 files now Step #5: ==10222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dcc5e342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dccc46f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dccc45246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dccc45238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dcc5e3a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dcc5d9b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dcc5d95c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dcc5e2c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dcc8e5b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dcc8e5b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dcc8e5b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dcc8e5b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dcc8e5b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dcc8e5b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dcc8e5b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dcc8e5b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dcc8e5b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dcc8e5b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dccb06045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dcc7dbc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dcc7dc75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dcc7b72d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dcc7b72d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dcc7b73808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dcc7b72944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dcc7b72944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dcc7b72944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dccc45494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dccc45d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dccc445529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dccc46ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b222ea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dcc5d9443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x65,0x6e, Step #5: Den Step #5: artifact_prefix='./'; Test unit written to ./oom-abc34dace1e53bde84c15a0f168f3203411b130b Step #5: Base64: RGVu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 284 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3789140062 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cf61b36d60, 0x55cf61d1f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cf61d1f720,0x55cf63ba92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/abc34dace1e53bde84c15a0f168f3203411b130b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 301 processed earlier; will process 10675 files now Step #5: ==10258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cf586792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cf5ecb4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cf5ec9746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cf5ec9738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cf5867f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cf585e042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cf585dac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cf58671595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cf5b6a08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cf5b6a08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cf5b6a08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cf5b6a08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cf5b6a08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cf5b6a08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cf5b6a08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cf5b6a08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cf5b6a08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cf5b6a08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cf5d8a545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cf5a601578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cf5a60c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cf5a3b7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cf5a3b7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cf5a3b8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cf5a3b7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cf5a3b7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cf5a3b7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cf5ec9994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cf5eca27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cf5ec8a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cf5ecb4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcc55349082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cf585d943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0x38,0x62, Step #5: h8b Step #5: artifact_prefix='./'; Test unit written to ./oom-188adfb0f3f7d2ca3d201b2c2b73642328a0d448 Step #5: Base64: aDhi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 285 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3789576988 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5597df3d9d60, 0x5597df5c271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5597df5c2720,0x5597e144c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/188adfb0f3f7d2ca3d201b2c2b73642328a0d448' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 302 processed earlier; will process 10674 files now Step #5: ==10294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5597d5f1c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5597dc557728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5597dc53a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5597dc53a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5597d5f22652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5597d5e8342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5597d5e7dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5597d5f14595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5597d8f438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5597d8f438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5597d8f438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5597d8f438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5597d8f438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5597d8f438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5597d8f438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5597d8f438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5597d8f438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5597d8f438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5597db14845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5597d7ea4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5597d7eaf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5597d7c5ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5597d7c5ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5597d7c5b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5597d7c5a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5597d7c5a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5597d7c5a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5597dc53c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597dc5457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597dc52d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5597dc557fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f07d3c2a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5597d5e7c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xd,0x72, Step #5: =\015r Step #5: artifact_prefix='./'; Test unit written to ./oom-c93c6bbb0639ee2a508540e4f37f695a6e056173 Step #5: Base64: PQ1y Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 286 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3790014700 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55be3be69d60, 0x55be3c05271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55be3c052720,0x55be3dedc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c93c6bbb0639ee2a508540e4f37f695a6e056173' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 303 processed earlier; will process 10673 files now Step #5: ==10330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55be329ac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55be38fe7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55be38fca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55be38fca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55be329b2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55be3291342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55be3290dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55be329a4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55be359d38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55be359d38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55be359d38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55be359d38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55be359d38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55be359d38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55be359d38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55be359d38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55be359d38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55be359d38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55be37bd845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55be34934578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55be3493f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55be346ead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55be346ead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55be346eb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55be346ea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55be346ea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55be346ea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55be38fcc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55be38fd57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55be38fbd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55be38fe7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb8b4599082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55be3290c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xa0,0x80, Step #5: \357\240\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-1f2e4b87b9bdbe59695a5698ae25d726b239531c Step #5: Base64: 76CA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 287 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3790451598 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564abb606d60, 0x564abb7ef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564abb7ef720,0x564abd6792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f2e4b87b9bdbe59695a5698ae25d726b239531c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 304 processed earlier; will process 10672 files now Step #5: ==10366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564ab21492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ab8784728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ab876746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ab876738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564ab214f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564ab20b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564ab20aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564ab2141595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564ab51708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564ab51708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564ab51708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564ab51708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564ab51708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564ab51708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564ab51708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564ab51708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564ab51708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564ab51708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564ab737545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564ab40d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564ab40dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564ab3e87d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564ab3e87d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ab3e88808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564ab3e87944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564ab3e87944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564ab3e87944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ab876994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ab87727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ab875a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ab8784fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f93c0f06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564ab20a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0xcd,0x84, Step #5: w\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-0cf8f7c55eeb70d9b9415a1667f0c98299e31eed Step #5: Base64: d82E Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 288 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3790888810 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ffa4c0d60, 0x558ffa6a971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ffa6a9720,0x558ffc5332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0cf8f7c55eeb70d9b9415a1667f0c98299e31eed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 305 processed earlier; will process 10671 files now Step #5: ==10402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558ff10032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ff763e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ff762146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ff762138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ff1009652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ff0f6a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ff0f64c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ff0ffb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ff402a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ff402a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ff402a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ff402a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ff402a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ff402a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ff402a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ff402a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ff402a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ff402a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558ff622f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558ff2f8b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558ff2f965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558ff2d41d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558ff2d41d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558ff2d42808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558ff2d41944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558ff2d41944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558ff2d41944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ff762394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ff762c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ff7614529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ff763efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f373d78b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ff0f6343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0xd4,0xa7, Step #5: e\324\247 Step #5: artifact_prefix='./'; Test unit written to ./oom-58c9985c8d8bc0d7bf2888b9ac5091f61a949cb2 Step #5: Base64: ZdSn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 289 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3791337875 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56082e88bd60, 0x56082ea7471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56082ea74720,0x5608308fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58c9985c8d8bc0d7bf2888b9ac5091f61a949cb2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 306 processed earlier; will process 10670 files now Step #5: ==10438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608253ce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56082ba09728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56082b9ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56082b9ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608253d4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56082533542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56082532fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608253c6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608283f58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608283f58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608283f58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608283f58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608283f58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608283f58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608283f58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608283f58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608283f58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608283f58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56082a5fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560827356578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608273615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56082710cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56082710cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56082710d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56082710c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56082710c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56082710c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56082b9ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56082b9f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56082b9df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56082ba09fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5dcd546082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56082532e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x66,0x5, Step #5: Pf\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-2aad3da6b35d85334086910a81b67884256cb078 Step #5: Base64: UGYF Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 290 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3791780898 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa96ff4d60, 0x55aa971dd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa971dd720,0x55aa990672c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2aad3da6b35d85334086910a81b67884256cb078' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 307 processed earlier; will process 10669 files now Step #5: ==10474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa8db372d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa94172728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa9415546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa9415538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa8db3d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa8da9e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa8da98c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa8db2f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa90b5e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa90b5e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa90b5e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa90b5e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa90b5e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa90b5e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa90b5e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa90b5e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa90b5e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa90b5e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa92d6345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa8fabf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa8faca5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa8f875d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa8f875d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa8f876808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa8f875944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa8f875944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa8f875944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa9415794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa941607b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa94148529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa94172fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e7c2b7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa8da9743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x62,0x63, Step #5: abc Step #5: artifact_prefix='./'; Test unit written to ./oom-a9993e364706816aba3e25717850c26c9cd0d89d Step #5: Base64: YWJj Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 291 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3792235242 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5562fe70dd60, 0x5562fe8f671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5562fe8f6720,0x5563007802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9993e364706816aba3e25717850c26c9cd0d89d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 308 processed earlier; will process 10668 files now Step #5: ==10510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5562f52502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5562fb88b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5562fb86e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5562fb86e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5562f5256652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5562f51b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5562f51b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5562f5248595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5562f82778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5562f82778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5562f82778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5562f82778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5562f82778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5562f82778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5562f82778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5562f82778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5562f82778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5562f82778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5562fa47c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5562f71d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5562f71e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5562f6f8ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5562f6f8ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5562f6f8f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5562f6f8e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5562f6f8e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5562f6f8e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5562fb87094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5562fb8797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5562fb861529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5562fb88bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22b83b8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5562f51b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x20,0x22, Step #5: \" \" Step #5: artifact_prefix='./'; Test unit written to ./oom-654e0aaee80e38636c503629d32225db31a616de Step #5: Base64: IiAi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 292 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3792674510 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560f79527d60, 0x560f7971071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560f79710720,0x560f7b59a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/654e0aaee80e38636c503629d32225db31a616de' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 309 processed earlier; will process 10667 files now Step #5: ==10546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560f7006a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560f766a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560f7668846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560f7668838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560f70070652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560f6ffd142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560f6ffcbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560f70062595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560f730918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560f730918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560f730918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560f730918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560f730918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560f730918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560f730918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560f730918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560f730918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560f730918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560f7529645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560f71ff2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560f71ffd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560f71da8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560f71da8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560f71da9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560f71da8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560f71da8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560f71da8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560f7668a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560f766937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560f7667b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560f766a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9192257082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560f6ffca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21,0xda,0xaf, Step #5: !\332\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-e5662fe7d30ba65400bbd2023c42a3abbfba8010 Step #5: Base64: Idqv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 293 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3793116684 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55af70125d60, 0x55af7030e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55af7030e720,0x55af721982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e5662fe7d30ba65400bbd2023c42a3abbfba8010' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 310 processed earlier; will process 10666 files now Step #5: ==10582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55af66c682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55af6d2a3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55af6d28646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55af6d28638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55af66c6e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55af66bcf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55af66bc9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55af66c60595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55af69c8f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55af69c8f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55af69c8f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55af69c8f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55af69c8f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55af69c8f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55af69c8f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55af69c8f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55af69c8f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55af69c8f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55af6be9445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55af68bf0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55af68bfb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55af689a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55af689a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55af689a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55af689a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55af689a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55af689a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55af6d28894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55af6d2917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55af6d279529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55af6d2a3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee5f056082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55af66bc843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2a,0x74, Step #5: /*t Step #5: artifact_prefix='./'; Test unit written to ./oom-f73ac82a0969272d0b78a8aa20da8195f2992b4b Step #5: Base64: Lyp0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 294 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3793542085 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5652def55d60, 0x5652df13e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5652df13e720,0x5652e0fc82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f73ac82a0969272d0b78a8aa20da8195f2992b4b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 311 processed earlier; will process 10665 files now Step #5: ==10618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5652d5a982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5652dc0d3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5652dc0b646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5652dc0b638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5652d5a9e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5652d59ff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5652d59f9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5652d5a90595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652d8abf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652d8abf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652d8abf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652d8abf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652d8abf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652d8abf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652d8abf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652d8abf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652d8abf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652d8abf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5652dacc445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5652d7a20578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652d7a2b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5652d77d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5652d77d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5652d77d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5652d77d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5652d77d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5652d77d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5652dc0b894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652dc0c17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5652dc0a9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5652dc0d3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb8ca985082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5652d59f843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x41,0xc, Step #5: =A\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-caeb05815fe9870d586fa9750e17896c567ec4df Step #5: Base64: PUEM Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 295 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3793981733 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a35c52d60, 0x557a35e3b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a35e3b720,0x557a37cc52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/caeb05815fe9870d586fa9750e17896c567ec4df' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 312 processed earlier; will process 10664 files now Step #5: ==10654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a2c7952d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a32dd0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a32db346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a32db338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a2c79b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a2c6fc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a2c6f6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a2c78d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a2f7bc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a2f7bc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a2f7bc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a2f7bc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a2f7bc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a2f7bc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a2f7bc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a2f7bc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a2f7bc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a2f7bc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a319c145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a2e71d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a2e7285a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a2e4d3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a2e4d3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a2e4d4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a2e4d3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a2e4d3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a2e4d3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a32db594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a32dbe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a32da6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a32dd0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdbe7be0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a2c6f543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x69,0xff, Step #5: Fi\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-6986f376832aa9aa348f0611673246de9fdce2fd Step #5: Base64: Rmn/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 296 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3794417850 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55556935fd60, 0x55556954871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555569548720,0x55556b3d22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6986f376832aa9aa348f0611673246de9fdce2fd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 313 processed earlier; will process 10663 files now Step #5: ==10690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55555fea22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5555664dd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5555664c046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5555664c038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55555fea8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55555fe0942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55555fe03c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55555fe9a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555562ec98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555562ec98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555562ec98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555562ec98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555562ec98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555562ec98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555562ec98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555562ec98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555562ec98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555562ec98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5555650ce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555561e2a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555561e355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555561be0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555561be0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555561be1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555561be0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555561be0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555561be0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5555664c294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5555664cb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5555664b3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5555664ddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc472a2c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55555fe0243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x33,0xe1, Step #5: 23\341 Step #5: artifact_prefix='./'; Test unit written to ./oom-d993bb7e2cae96a0d157d89e87d8eaa48b1b04b7 Step #5: Base64: MjPh Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 297 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3794855994 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d4ab942d60, 0x55d4abb2b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d4abb2b720,0x55d4ad9b52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d993bb7e2cae96a0d157d89e87d8eaa48b1b04b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 314 processed earlier; will process 10662 files now Step #5: ==10726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4a24852d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d4a8ac0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d4a8aa346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d4a8aa338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4a248b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d4a23ec42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d4a23e6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4a247d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4a54ac8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4a54ac8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4a54ac8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4a54ac8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4a54ac8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4a54ac8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4a54ac8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4a54ac8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4a54ac8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4a54ac8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d4a76b145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d4a440d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4a44185a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d4a41c3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d4a41c3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d4a41c4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d4a41c3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d4a41c3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d4a41c3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d4a8aa594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d4a8aae7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d4a8a96529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d4a8ac0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f13d778b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d4a23e543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x7e,0x59, Step #5: =~Y Step #5: artifact_prefix='./'; Test unit written to ./oom-1f7e78614e04d03205b460b0b7ad0429d6ded016 Step #5: Base64: PX5Z Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 298 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3795294659 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a5557add60, 0x55a55599671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a555996720,0x55a5578202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f7e78614e04d03205b460b0b7ad0429d6ded016' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 315 processed earlier; will process 10661 files now Step #5: ==10762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a54c2f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a55292b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a55290e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a55290e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a54c2f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a54c25742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a54c251c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a54c2e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a54f3178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a54f3178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a54f3178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a54f3178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a54f3178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a54f3178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a54f3178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a54f3178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a54f3178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a54f3178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a55151c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a54e278578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a54e2835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a54e02ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a54e02ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a54e02f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a54e02e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a54e02e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a54e02e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a55291094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a5529197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a552901529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a55292bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd7f85c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a54c25043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0xa9, Step #5: \342\200\251 Step #5: artifact_prefix='./'; Test unit written to ./oom-bad6b315542d2df789cbd9089d3df8b8b287ab49 Step #5: Base64: 4oCp Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 299 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3795719053 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559eb872ad60, 0x559eb891371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559eb8913720,0x559eba79d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bad6b315542d2df789cbd9089d3df8b8b287ab49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 316 processed earlier; will process 10660 files now Step #5: #1 pulse cov: 3462 ft: 3463 exec/s: 0 rss: 152Mb Step #5: ==10798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559eaf26d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559eb58a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559eb588b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559eb588b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559eaf273652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559eaf1d442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559eaf1cec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559eaf265595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559eb22948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559eb22948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559eb22948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559eb22948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559eb22948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559eb22948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559eb22948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559eb22948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559eb22948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559eb22948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559eb449945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559eb11f5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559eb12005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559eb0fabd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559eb0fabd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559eb0fac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559eb0fab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559eb0fab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559eb0fab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559eb588d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559eb58967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559eb587e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559eb58a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f622ae8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559eaf1cd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0xc2,0xb4, Step #5: %\302\264 Step #5: artifact_prefix='./'; Test unit written to ./oom-e28630c1dc572c0715aac7d46e2357dc59da7e3e Step #5: Base64: JcK0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 300 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3796193204 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8d6d07d60, 0x55a8d6ef071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a8d6ef0720,0x55a8d8d7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e28630c1dc572c0715aac7d46e2357dc59da7e3e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 318 processed earlier; will process 10658 files now Step #5: ==10834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8cd84a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8d3e85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8d3e6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8d3e6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8cd850652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a8cd7b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a8cd7abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8cd842595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8d08718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8d08718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8d08718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8d08718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8d08718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8d08718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8d08718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8d08718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8d08718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8d08718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8d2a7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8cf7d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8cf7dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a8cf588d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a8cf588d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a8cf589808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a8cf588944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a8cf588944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a8cf588944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8d3e6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8d3e737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8d3e5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8d3e85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6fdcb0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a8cd7aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe5,0xa6,0xb5, Step #5: \345\246\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-fdb6ce762cfd47e0c666496e9e85c8824ce31042 Step #5: Base64: 5aa1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 301 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3796632663 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559daa53ed60, 0x559daa72771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559daa727720,0x559dac5b12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fdb6ce762cfd47e0c666496e9e85c8824ce31042' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 319 processed earlier; will process 10657 files now Step #5: ==10870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559da10812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559da76bc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559da769f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559da769f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559da1087652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559da0fe842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559da0fe2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559da1079595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559da40a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559da40a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559da40a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559da40a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559da40a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559da40a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559da40a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559da40a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559da40a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559da40a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559da62ad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559da3009578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559da30145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559da2dbfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559da2dbfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559da2dc0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559da2dbf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559da2dbf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559da2dbf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559da76a194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559da76aa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559da7692529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559da76bcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa0de2c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559da0fe143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcc,0x86,0xf0, Step #5: \314\206\360 Step #5: artifact_prefix='./'; Test unit written to ./oom-06ec1b48453a79dae454b12a593831af58ed3640 Step #5: Base64: zIbw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 302 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3797073094 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5584f5733d60, 0x5584f591c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5584f591c720,0x5584f77a62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/06ec1b48453a79dae454b12a593831af58ed3640' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 320 processed earlier; will process 10656 files now Step #5: ==10906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584ec2762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5584f28b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5584f289446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5584f289438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5584ec27c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5584ec1dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584ec1d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5584ec26e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584ef29d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584ef29d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584ef29d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584ef29d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584ef29d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584ef29d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584ef29d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584ef29d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584ef29d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584ef29d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5584f14a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5584ee1fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584ee2095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584edfb4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584edfb4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584edfb5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584edfb4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584edfb4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584edfb4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5584f289694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5584f289f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5584f2887529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5584f28b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8ada37082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584ec1d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x59,0x5d, Step #5: [Y] Step #5: artifact_prefix='./'; Test unit written to ./oom-87628f313c8f8d100d347e013cfdbbf10dbe3c6e Step #5: Base64: W1ld Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 303 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3797523150 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55caf52c1d60, 0x55caf54aa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55caf54aa720,0x55caf73342c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87628f313c8f8d100d347e013cfdbbf10dbe3c6e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 321 processed earlier; will process 10655 files now Step #5: ==10942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55caebe042d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55caf243f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55caf242246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55caf242238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55caebe0a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55caebd6b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55caebd65c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55caebdfc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55caeee2b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55caeee2b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55caeee2b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55caeee2b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55caeee2b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55caeee2b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55caeee2b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55caeee2b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55caeee2b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55caeee2b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55caf103045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55caedd8c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55caedd975a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55caedb42d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55caedb42d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55caedb43808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55caedb42944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55caedb42944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55caedb42944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55caf242494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55caf242d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55caf2415529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55caf243ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcfbb2be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55caebd6443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xed,0x9f,0xb7, Step #5: \355\237\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-94e2b58e98806e5044bc8e0c97a79acfa61be612 Step #5: Base64: 7Z+3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 304 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3797965046 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5564e85ddd60, 0x5564e87c671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5564e87c6720,0x5564ea6502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/94e2b58e98806e5044bc8e0c97a79acfa61be612' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 322 processed earlier; will process 10654 files now Step #5: ==10978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564df1202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564e575b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564e573e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564e573e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564df126652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564df08742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564df081c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564df118595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564e21478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564e21478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564e21478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564e21478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564e21478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564e21478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564e21478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564e21478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564e21478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564e21478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564e434c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5564e10a8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564e10b35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564e0e5ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564e0e5ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564e0e5f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564e0e5e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564e0e5e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564e0e5e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564e574094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564e57497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5564e5731529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564e575bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d84f2d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564df08043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x46,0xa, Step #5: PF\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-07b0efa9272db9b1e8f1d01d21b583d6047e0d31 Step #5: Base64: UEYK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 305 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3798406244 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625fe8b8d60, 0x5625feaa171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625feaa1720,0x56260092b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/07b0efa9272db9b1e8f1d01d21b583d6047e0d31' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 323 processed earlier; will process 10653 files now Step #5: ==11014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5625f53fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625fba36728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625fba1946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625fba1938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5625f5401652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625f536242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625f535cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5625f53f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625f84228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625f84228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625f84228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625f84228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625f84228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625f84228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625f84228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625f84228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625f84228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625f84228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625fa62745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5625f7383578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5625f738e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5625f7139d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5625f7139d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5625f713a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5625f7139944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5625f7139944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5625f7139944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625fba1b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625fba247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625fba0c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625fba36fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f64dd922082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625f535b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0xb4,0x91, Step #5: \342\264\221 Step #5: artifact_prefix='./'; Test unit written to ./oom-e5966c60655e2be9322c6da0075a597ffaceada3 Step #5: Base64: 4rSR Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 306 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3798851238 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f8f592bd60, 0x55f8f5b1471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f8f5b14720,0x55f8f799e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e5966c60655e2be9322c6da0075a597ffaceada3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 324 processed earlier; will process 10652 files now Step #5: ==11050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f8ec46e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f8f2aa9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f8f2a8c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f8f2a8c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f8ec474652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f8ec3d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f8ec3cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f8ec466595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f8ef4958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f8ef4958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f8ef4958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f8ef4958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f8ef4958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f8ef4958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f8ef4958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f8ef4958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f8ef4958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f8ef4958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f8f169a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f8ee3f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f8ee4015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f8ee1acd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f8ee1acd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f8ee1ad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f8ee1ac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f8ee1ac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f8ee1ac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f8f2a8e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f8f2a977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f8f2a7f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f8f2aa9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7ae2d0a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f8ec3ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3c,0x3e, Step #5: <<> Step #5: artifact_prefix='./'; Test unit written to ./oom-689c73cca4e112aa400be7e5a509c6fa4e1afcd4 Step #5: Base64: PDw+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 307 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3799293522 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5568747ead60, 0x5568749d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5568749d3720,0x55687685d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/689c73cca4e112aa400be7e5a509c6fa4e1afcd4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 325 processed earlier; will process 10651 files now Step #5: #1 pulse cov: 3384 ft: 3385 exec/s: 0 rss: 154Mb Step #5: ==11086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55686b32d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556871968728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55687194b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55687194b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55686b333652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55686b29442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55686b28ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55686b325595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55686e3548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55686e3548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55686e3548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55686e3548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55686e3548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55686e3548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55686e3548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55686e3548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55686e3548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55686e3548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55687055945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55686d2b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55686d2c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55686d06bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55686d06bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55686d06c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55686d06b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55686d06b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55686d06b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55687194d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5568719567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55687193e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556871968fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9517591082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55686b28d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xec,0x80,0x84, Step #5: \354\200\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-93363f95eb48e1fde544f6ef53baa08b8f76382b Step #5: Base64: 7ICE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 308 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3799776965 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc73b47d60, 0x55fc73d3071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc73d30720,0x55fc75bba2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93363f95eb48e1fde544f6ef53baa08b8f76382b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 327 processed earlier; will process 10649 files now Step #5: #1 pulse cov: 3430 ft: 3431 exec/s: 0 rss: 152Mb Step #5: ==11122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc6a68a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc70cc5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc70ca846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc70ca838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc6a690652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc6a5f142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc6a5ebc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc6a682595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc6d6b18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc6d6b18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc6d6b18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc6d6b18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc6d6b18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc6d6b18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc6d6b18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc6d6b18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc6d6b18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc6d6b18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc6f8b645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc6c612578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc6c61d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc6c3c8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc6c3c8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc6c3c9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc6c3c8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc6c3c8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc6c3c8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc70caa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc70cb37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc70c9b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc70cc5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4405c81082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc6a5ea43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d, Step #5: --- Step #5: artifact_prefix='./'; Test unit written to ./oom-58b63e273b964039d6ef432a415df3f177c818e5 Step #5: Base64: LS0t Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 309 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3800251808 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56139862bd60, 0x56139881471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561398814720,0x56139a69e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58b63e273b964039d6ef432a415df3f177c818e5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 329 processed earlier; will process 10647 files now Step #5: #1 pulse cov: 3419 ft: 3420 exec/s: 0 rss: 154Mb Step #5: ==11158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56138f16e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5613957a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56139578c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56139578c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56138f174652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56138f0d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56138f0cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56138f166595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5613921958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5613921958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5613921958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5613921958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5613921958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5613921958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5613921958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5613921958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5613921958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5613921958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56139439a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5613910f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5613911015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561390eacd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561390eacd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561390ead808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561390eac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561390eac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561390eac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56139578e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5613957977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56139577f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5613957a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f450a08c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56138f0ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x16,0x3d, Step #5: I\026= Step #5: artifact_prefix='./'; Test unit written to ./oom-ad1f9e962ff2c5ca5066f735ff9bbf8abef24d5a Step #5: Base64: SRY9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 310 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3800731856 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563408dcfd60, 0x563408fb871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563408fb8720,0x56340ae422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ad1f9e962ff2c5ca5066f735ff9bbf8abef24d5a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 331 processed earlier; will process 10645 files now Step #5: ==11194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5633ff9122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563405f4d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563405f3046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563405f3038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5633ff918652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633ff87942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633ff873c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5633ff90a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634029398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634029398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634029398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634029398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634029398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634029398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634029398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634029398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634029398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634029398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563404b3e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56340189a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634018a55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563401650d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563401650d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563401651808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563401650944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563401650944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563401650944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563405f3294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563405f3b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563405f23529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563405f4dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f84e6e63082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633ff87243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x7b,0xf5, Step #5: %{\365 Step #5: artifact_prefix='./'; Test unit written to ./oom-885ff7c160224c06c4fd180930de6ba3bd1b9537 Step #5: Base64: JXv1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 311 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3801173929 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5597f0670d60, 0x5597f085971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5597f0859720,0x5597f26e32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/885ff7c160224c06c4fd180930de6ba3bd1b9537' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 332 processed earlier; will process 10644 files now Step #5: ==11230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5597e71b32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5597ed7ee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5597ed7d146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5597ed7d138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5597e71b9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5597e711a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5597e7114c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5597e71ab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5597ea1da8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5597ea1da8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5597ea1da8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5597ea1da8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5597ea1da8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5597ea1da8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5597ea1da8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5597ea1da8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5597ea1da8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5597ea1da8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5597ec3df45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5597e913b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5597e91465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5597e8ef1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5597e8ef1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5597e8ef2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5597e8ef1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5597e8ef1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5597e8ef1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5597ed7d394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597ed7dc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597ed7c4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5597ed7eefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa1d3c51082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5597e711343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x3f,0x7d, Step #5: {?} Step #5: artifact_prefix='./'; Test unit written to ./oom-915f52746400921fcd08429b96046ef3183601bc Step #5: Base64: ez99 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 312 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3801623337 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563fb56b8d60, 0x563fb58a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563fb58a1720,0x563fb772b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/915f52746400921fcd08429b96046ef3183601bc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 333 processed earlier; will process 10643 files now Step #5: ==11266== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563fac1fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563fb2836728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563fb281946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563fb281938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563fac201652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563fac16242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563fac15cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563fac1f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563faf2228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563faf2228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563faf2228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563faf2228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563faf2228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563faf2228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563faf2228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563faf2228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563faf2228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563faf2228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563fb142745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563fae183578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563fae18e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563fadf39d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563fadf39d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563fadf3a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563fadf39944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563fadf39944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563fadf39944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563fb281b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563fb28247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563fb280c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563fb2836fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7419023082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563fac15b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x5e,0x5e, Step #5: ^^^ Step #5: artifact_prefix='./'; Test unit written to ./oom-6ef0bd1a89cb34a4cb33d6dd21fe8d1091189612 Step #5: Base64: Xl5e Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 313 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3802060202 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55762d73dd60, 0x55762d92671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55762d926720,0x55762f7b02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ef0bd1a89cb34a4cb33d6dd21fe8d1091189612' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 334 processed earlier; will process 10642 files now Step #5: ==11302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5576242802d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55762a8bb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55762a89e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55762a89e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557624286652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5576241e742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5576241e1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557624278595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5576272a78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5576272a78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5576272a78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5576272a78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5576272a78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5576272a78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5576272a78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5576272a78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5576272a78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5576272a78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5576294ac45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557626208578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5576262135a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557625fbed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557625fbed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557625fbf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557625fbe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557625fbe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557625fbe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55762a8a094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55762a8a97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55762a891529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55762a8bbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f758e323082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5576241e043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x45,0x58, Step #5: REX Step #5: artifact_prefix='./'; Test unit written to ./oom-b4cd47e3a08f966997dfaa92482c8b1977772ad8 Step #5: Base64: UkVY Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 314 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3802508167 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55842ad54d60, 0x55842af3d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55842af3d720,0x55842cdc72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b4cd47e3a08f966997dfaa92482c8b1977772ad8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 335 processed earlier; will process 10641 files now Step #5: ==11338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584218972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558427ed2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558427eb546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558427eb538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55842189d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5584217fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584217f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55842188f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584248be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584248be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584248be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584248be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584248be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584248be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584248be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584248be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584248be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584248be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558426ac345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55842381f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55842382a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584235d5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584235d5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584235d6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584235d5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584235d5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584235d5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558427eb794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558427ec07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558427ea8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558427ed2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3f2f887082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584217f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x3f, Step #5: Step #5: Step #5: #0 0x55c16ea742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c1750af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c17509246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c17509238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c16ea7a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c16e9db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c16e9d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c16ea6c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c171a9b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c171a9b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c171a9b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c171a9b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c171a9b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c171a9b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c171a9b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c171a9b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c171a9b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c171a9b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c173ca045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c1709fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c170a075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c1707b2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c1707b2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c1707b3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c1707b2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c1707b2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c1707b2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c17509494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c17509d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c175085529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c1750affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7644c27082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c16e9d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xba,0x8c, Step #5: \357\272\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-204c42e70027c9fdd7f008af3f4d666bbfef9792 Step #5: Base64: 77qM Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 316 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3803389966 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605d18c2d60, 0x5605d1aab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605d1aab720,0x5605d39352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/204c42e70027c9fdd7f008af3f4d666bbfef9792' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 337 processed earlier; will process 10639 files now Step #5: ==11410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605c84052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605cea40728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605cea2346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605cea2338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605c840b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605c836c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605c8366c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605c83fd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605cb42c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605cb42c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605cb42c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605cb42c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605cb42c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605cb42c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605cb42c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605cb42c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605cb42c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605cb42c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605cd63145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605ca38d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605ca3985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605ca143d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605ca143d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605ca144808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605ca143944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605ca143944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605ca143944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605cea2594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605cea2e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605cea16529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605cea40fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd236a7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605c836543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x1,0xa, Step #5: \012\001\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-306673d47b0f3bedaf52b95e75d9f40ebd5a18e7 Step #5: Base64: CgEK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 317 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3803828151 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e52c27ad60, 0x55e52c46371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e52c463720,0x55e52e2ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/306673d47b0f3bedaf52b95e75d9f40ebd5a18e7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 338 processed earlier; will process 10638 files now Step #5: ==11446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e522dbd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e5293f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e5293db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e5293db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e522dc3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e522d2442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e522d1ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e522db5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e525de48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e525de48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e525de48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e525de48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e525de48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e525de48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e525de48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e525de48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e525de48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e525de48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e527fe945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e524d45578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e524d505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e524afbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e524afbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e524afc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e524afb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e524afb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e524afb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e5293dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e5293e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e5293ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e5293f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5f653c1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e522d1d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x57,0x3a,0x30, Step #5: W:0 Step #5: artifact_prefix='./'; Test unit written to ./oom-da1ad0f59c055426f1e68c588063c6dbb5197df8 Step #5: Base64: Vzow Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 318 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3804275414 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56245338cd60, 0x56245357571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562453575720,0x5624553ff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/da1ad0f59c055426f1e68c588063c6dbb5197df8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 339 processed earlier; will process 10637 files now Step #5: ==11482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562449ecf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56245050a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5624504ed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5624504ed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562449ed5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562449e3642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562449e30c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562449ec7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56244cef68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56244cef68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56244cef68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56244cef68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56244cef68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56244cef68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56244cef68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56244cef68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56244cef68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56244cef68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56244f0fb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56244be57578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56244be625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56244bc0dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56244bc0dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56244bc0e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56244bc0d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56244bc0d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56244bc0d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5624504ef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5624504f87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5624504e0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56245050afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4b1e9ed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562449e2f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x59,0x26,0x2d, Step #5: Y&- Step #5: artifact_prefix='./'; Test unit written to ./oom-03c4a0e59f4a379ee81fec35d405c363719484fc Step #5: Base64: WSYt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 319 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3804726000 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f615e3d60, 0x561f617cc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f617cc720,0x561f636562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/03c4a0e59f4a379ee81fec35d405c363719484fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 340 processed earlier; will process 10636 files now Step #5: ==11518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f581262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f5e761728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f5e74446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f5e74438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f5812c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f5808d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f58087c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f5811e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f5b14d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f5b14d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f5b14d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f5b14d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f5b14d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f5b14d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f5b14d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f5b14d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f5b14d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f5b14d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f5d35245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f5a0ae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f5a0b95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f59e64d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f59e64d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f59e65808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f59e64944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f59e64944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f59e64944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f5e74694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f5e74f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f5e737529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f5e761fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd9da349082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f5808643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x32, Step #5: FU2 Step #5: artifact_prefix='./'; Test unit written to ./oom-ddc7e267fcd357eb02fd382e8750ae4f3021baf7 Step #5: Base64: RlUy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 320 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3805161071 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d25fe45d60, 0x55d26002e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d26002e720,0x55d261eb82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ddc7e267fcd357eb02fd382e8750ae4f3021baf7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 341 processed earlier; will process 10635 files now Step #5: ==11554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d2569882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d25cfc3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d25cfa646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d25cfa638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d25698e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d2568ef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d2568e9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d256980595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d2599af8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d2599af8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d2599af8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d2599af8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d2599af8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d2599af8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d2599af8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d2599af8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d2599af8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d2599af8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d25bbb445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d258910578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d25891b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d2586c6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d2586c6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d2586c7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d2586c6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d2586c6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d2586c6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d25cfa894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d25cfb17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d25cf99529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d25cfc3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f244b411082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d2568e843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x9f,0xb7, Step #5: \343\237\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-58b492174446c13e8978029fe6732c6e917bf0c0 Step #5: Base64: 45+3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 321 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3805596545 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c6886bdd60, 0x55c6888a671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c6888a6720,0x55c68a7302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58b492174446c13e8978029fe6732c6e917bf0c0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 342 processed earlier; will process 10634 files now Step #5: ==11590== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c67f2002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c68583b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c68581e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c68581e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c67f206652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c67f16742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c67f161c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c67f1f8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c6822278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c6822278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c6822278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c6822278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c6822278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c6822278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c6822278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c6822278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c6822278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c6822278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c68442c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c681188578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c6811935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c680f3ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c680f3ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c680f3f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c680f3e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c680f3e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c680f3e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c68582094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c6858297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c685811529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c68583bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ffe428082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c67f16043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x2d,0x12, Step #5: \000-\022 Step #5: artifact_prefix='./'; Test unit written to ./oom-94b485cd7bf79b274631adbcac318e47014db58f Step #5: Base64: AC0S Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 322 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3806035973 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561222bb2d60, 0x561222d9b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561222d9b720,0x561224c252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/94b485cd7bf79b274631adbcac318e47014db58f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 343 processed earlier; will process 10633 files now Step #5: ==11626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612196f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56121fd30728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56121fd1346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56121fd1338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612196fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56121965c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561219656c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612196ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56121c71c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56121c71c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56121c71c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56121c71c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56121c71c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56121c71c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56121c71c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56121c71c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56121c71c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56121c71c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56121e92145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56121b67d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56121b6885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56121b433d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56121b433d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56121b434808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56121b433944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56121b433944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56121b433944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56121fd1594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56121fd1e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56121fd06529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56121fd30fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f17fe5db082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56121965543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xea,0xae,0x8d, Step #5: \352\256\215 Step #5: artifact_prefix='./'; Test unit written to ./oom-5df7a4e014c148a089b5ce0e5a479d00766b4944 Step #5: Base64: 6q6N Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 323 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3806474261 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562de36a2d60, 0x562de388b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562de388b720,0x562de57152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5df7a4e014c148a089b5ce0e5a479d00766b4944' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 344 processed earlier; will process 10632 files now Step #5: ==11662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562dda1e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562de0820728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562de080346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562de080338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562dda1eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562dda14c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562dda146c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562dda1dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562ddd20c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562ddd20c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562ddd20c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562ddd20c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562ddd20c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562ddd20c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562ddd20c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562ddd20c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562ddd20c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562ddd20c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562ddf41145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ddc16d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ddc1785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ddbf23d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ddbf23d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ddbf24808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ddbf23944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ddbf23944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ddbf23944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562de080594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562de080e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562de07f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562de0820fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f63b3a2e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562dda14543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x2e,0x2e, Step #5: {.. Step #5: artifact_prefix='./'; Test unit written to ./oom-983ef74b7822393aa9b8661d8c0114dd3aa81716 Step #5: Base64: ey4u Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 324 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3806918121 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d2326e5d60, 0x55d2328ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d2328ce720,0x55d2347582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/983ef74b7822393aa9b8661d8c0114dd3aa81716' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 345 processed earlier; will process 10631 files now Step #5: ==11698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d2292282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d22f863728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d22f84646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d22f84638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d22922e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d22918f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d229189c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d229220595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d22c24f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d22c24f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d22c24f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d22c24f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d22c24f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d22c24f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d22c24f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d22c24f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d22c24f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d22c24f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d22e45445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d22b1b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d22b1bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d22af66d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d22af66d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d22af67808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d22af66944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d22af66944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d22af66944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d22f84894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d22f8517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d22f839529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d22f863fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff53bd0d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d22918843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x83,0xa7, Step #5: \342\203\247 Step #5: artifact_prefix='./'; Test unit written to ./oom-a881f521cdd2876dfe70f9c9fe3a69063f9c81e8 Step #5: Base64: 4oOn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 325 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3807359583 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559028573d60, 0x55902875c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55902875c720,0x55902a5e62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a881f521cdd2876dfe70f9c9fe3a69063f9c81e8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 346 processed earlier; will process 10630 files now Step #5: #1 pulse cov: 10314 ft: 10315 exec/s: 0 rss: 170Mb Step #5: ==11734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55901f0b62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5590256f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5590256d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5590256d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55901f0bc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55901f01d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55901f017c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55901f0ae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590220dd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590220dd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590220dd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590220dd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590220dd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590220dd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590220dd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590220dd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590220dd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590220dd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5590242e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55902103e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5590210495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559020df4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559020df4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559020df5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559020df4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559020df4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559020df4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5590256d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5590256df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5590256c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5590256f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c9a529082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55901f01643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0x90, Step #5: \343\200\220 Step #5: artifact_prefix='./'; Test unit written to ./oom-c9157cedda80ae56112b069bc9be8c3de3f0da43 Step #5: Base64: 44CQ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 326 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3807865591 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5556d246ed60, 0x5556d265771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556d2657720,0x5556d44e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9157cedda80ae56112b069bc9be8c3de3f0da43' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 348 processed earlier; will process 10628 files now Step #5: ==11770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556c8fb12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5556cf5ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5556cf5cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5556cf5cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5556c8fb7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5556c8f1842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5556c8f12c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5556c8fa9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5556cbfd88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5556cbfd88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5556cbfd88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5556cbfd88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5556cbfd88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5556cbfd88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5556cbfd88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5556cbfd88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5556cbfd88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5556cbfd88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5556ce1dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5556caf39578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5556caf445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5556cacefd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5556cacefd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5556cacf0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5556cacef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5556cacef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5556cacef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5556cf5d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556cf5da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5556cf5c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5556cf5ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8450b1b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5556c8f1143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40,0x29,0x0, Step #5: @)\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-5003f35de335700f6044bca87bf22367564a3f28 Step #5: Base64: QCkA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 327 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3808302591 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ccaa127d60, 0x55ccaa31071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ccaa310720,0x55ccac19a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5003f35de335700f6044bca87bf22367564a3f28' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 349 processed earlier; will process 10627 files now Step #5: ==11806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cca0c6a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cca72a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cca728846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cca728838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cca0c70652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cca0bd142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cca0bcbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cca0c62595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cca3c918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cca3c918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cca3c918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cca3c918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cca3c918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cca3c918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cca3c918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cca3c918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cca3c918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cca3c918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cca5e9645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cca2bf2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cca2bfd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cca29a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cca29a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cca29a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cca29a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cca29a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cca29a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cca728a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cca72937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cca727b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cca72a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9c37fdb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cca0bca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0xf2, Step #5: - \362 Step #5: artifact_prefix='./'; Test unit written to ./oom-26ead1b8ebe3d0c6510633831076782dea517918 Step #5: Base64: LSDy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 328 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3808750203 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555aed172d60, 0x555aed35b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555aed35b720,0x555aef1e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/26ead1b8ebe3d0c6510633831076782dea517918' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 350 processed earlier; will process 10626 files now Step #5: ==11842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555ae3cb52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555aea2f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555aea2d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555aea2d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555ae3cbb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555ae3c1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555ae3c16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555ae3cad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555ae6cdc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555ae6cdc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555ae6cdc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555ae6cdc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555ae6cdc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555ae6cdc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555ae6cdc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555ae6cdc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555ae6cdc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555ae6cdc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555ae8ee145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555ae5c3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555ae5c485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555ae59f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555ae59f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555ae59f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555ae59f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555ae59f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555ae59f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555aea2d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555aea2de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555aea2c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555aea2f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc29c932082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555ae3c1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbd,0xbf, Step #5: \340\275\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-35aaf60156f4e7fb65a03dff232d1394508d1290 Step #5: Base64: 4L2/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 329 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3809191184 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55713480dd60, 0x5571349f671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5571349f6720,0x5571368802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/35aaf60156f4e7fb65a03dff232d1394508d1290' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 351 processed earlier; will process 10625 files now Step #5: #1 pulse cov: 3482 ft: 3483 exec/s: 0 rss: 153Mb Step #5: ==11878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55712b3502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55713198b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55713196e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55713196e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55712b356652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55712b2b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55712b2b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55712b348595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55712e3778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55712e3778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55712e3778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55712e3778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55712e3778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55712e3778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55712e3778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55712e3778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55712e3778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55712e3778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55713057c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55712d2d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55712d2e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55712d08ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55712d08ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55712d08f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55712d08e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55712d08e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55712d08e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55713197094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571319797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557131961529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55713198bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fabefb36082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55712b2b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x37,0x2c,0x38, Step #5: 7,8 Step #5: artifact_prefix='./'; Test unit written to ./oom-845a834068a059432c13383f36222f98efad9747 Step #5: Base64: Nyw4 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 330 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3809672385 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c3855dbd60, 0x55c3857c471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c3857c4720,0x55c38764e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/845a834068a059432c13383f36222f98efad9747' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 353 processed earlier; will process 10623 files now Step #5: ==11914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c37c11e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c382759728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c38273c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c38273c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c37c124652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c37c08542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c37c07fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c37c116595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c37f1458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c37f1458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c37f1458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c37f1458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c37f1458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c37f1458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c37f1458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c37f1458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c37f1458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c37f1458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c38134a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c37e0a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c37e0b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c37de5cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c37de5cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c37de5d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c37de5c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c37de5c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c37de5c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c38273e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c3827477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c38272f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c382759fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2525dbc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c37c07e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcb,0x91,0xea, Step #5: \313\221\352 Step #5: artifact_prefix='./'; Test unit written to ./oom-dbc68d1839aefe52933d406c8441a441945e3631 Step #5: Base64: y5Hq Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 331 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3810113248 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f28c58d60, 0x561f28e4171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f28e41720,0x561f2accb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dbc68d1839aefe52933d406c8441a441945e3631' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 354 processed earlier; will process 10622 files now Step #5: ==11950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f1f79b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f25dd6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f25db946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f25db938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f1f7a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f1f70242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f1f6fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f1f793595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f227c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f227c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f227c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f227c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f227c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f227c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f227c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f227c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f227c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f227c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f249c745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f21723578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f2172e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f214d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f214d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f214da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f214d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f214d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f214d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f25dbb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f25dc47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f25dac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f25dd6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f026b60e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f1f6fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xd,0x3a, Step #5: -\015: Step #5: artifact_prefix='./'; Test unit written to ./oom-dbbf6d535afdaa63e1f44b5b88aebcfa108b6dd4 Step #5: Base64: LQ06 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 332 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3810560009 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e5e6671d60, 0x55e5e685a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e5e685a720,0x55e5e86e42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dbbf6d535afdaa63e1f44b5b88aebcfa108b6dd4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 355 processed earlier; will process 10621 files now Step #5: ==11986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e5dd1b42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e5e37ef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e5e37d246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e5e37d238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e5dd1ba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e5dd11b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e5dd115c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e5dd1ac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e5e01db8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e5e01db8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e5e01db8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e5e01db8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e5e01db8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e5e01db8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e5e01db8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e5e01db8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e5e01db8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e5e01db8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e5e23e045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e5df13c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e5df1475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e5deef2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e5deef2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e5deef3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e5deef2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e5deef2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e5deef2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e5e37d494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e5e37dd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e5e37c5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e5e37effa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb97a180082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e5dd11443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x4f,0x4e, Step #5: 'ON Step #5: artifact_prefix='./'; Test unit written to ./oom-21125a762c34b9a216fb309203388a95ff0c0c73 Step #5: Base64: J09O Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 333 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3811000413 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb00d7ad60, 0x55bb00f6371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb00f63720,0x55bb02ded2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/21125a762c34b9a216fb309203388a95ff0c0c73' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 356 processed earlier; will process 10620 files now Step #5: #1 pulse cov: 3515 ft: 3516 exec/s: 0 rss: 155Mb Step #5: ==12022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55baf78bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bafdef8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bafdedb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bafdedb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55baf78c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55baf782442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55baf781ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55baf78b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bafa8e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bafa8e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bafa8e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bafa8e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bafa8e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bafa8e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bafa8e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bafa8e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bafa8e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bafa8e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bafcae945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55baf9845578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55baf98505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55baf95fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55baf95fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55baf95fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55baf95fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55baf95fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55baf95fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bafdedd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bafdee67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bafdece529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bafdef8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f87b15a0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55baf781d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0x94,0x8c, Step #5: \357\224\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-e04dfbebb77d915e70035eac974edf1cff68eb18 Step #5: Base64: 75SM Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 334 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3811489186 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5641f0165d60, 0x5641f034e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5641f034e720,0x5641f21d82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e04dfbebb77d915e70035eac974edf1cff68eb18' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 358 processed earlier; will process 10618 files now Step #5: ==12058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5641e6ca82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5641ed2e3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5641ed2c646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5641ed2c638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5641e6cae652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5641e6c0f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5641e6c09c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5641e6ca0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5641e9ccf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5641e9ccf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5641e9ccf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5641e9ccf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5641e9ccf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5641e9ccf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5641e9ccf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5641e9ccf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5641e9ccf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5641e9ccf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5641ebed445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5641e8c30578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5641e8c3b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5641e89e6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5641e89e6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5641e89e7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5641e89e6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5641e89e6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5641e89e6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5641ed2c894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5641ed2d17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5641ed2b9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5641ed2e3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4348fd3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5641e6c0843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xc8,0x84, Step #5: \"\310\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-097a617768a8397e312b23e7f01f460a4774056c Step #5: Base64: IsiE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 335 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3811936900 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561b2406dd60, 0x561b2425671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561b24256720,0x561b260e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/097a617768a8397e312b23e7f01f460a4774056c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 359 processed earlier; will process 10617 files now Step #5: ==12094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561b1abb02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561b211eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561b211ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561b211ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561b1abb6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561b1ab1742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561b1ab11c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561b1aba8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561b1dbd78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561b1dbd78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561b1dbd78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561b1dbd78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561b1dbd78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561b1dbd78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561b1dbd78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561b1dbd78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561b1dbd78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561b1dbd78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561b1fddc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561b1cb38578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561b1cb435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561b1c8eed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561b1c8eed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561b1c8ef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561b1c8ee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561b1c8ee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561b1c8ee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561b211d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561b211d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561b211c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561b211ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f44ebc6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561b1ab1043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x36,0xdc, Step #5: P6\334 Step #5: artifact_prefix='./'; Test unit written to ./oom-b9fa7ee23ae77fa63a9dff4fb4ee7ec6676036bf Step #5: Base64: UDbc Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 336 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3812394401 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55834cdd2d60, 0x55834cfbb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55834cfbb720,0x55834ee452c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b9fa7ee23ae77fa63a9dff4fb4ee7ec6676036bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 360 processed earlier; will process 10616 files now Step #5: ==12130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583439152d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558349f50728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558349f3346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558349f3338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55834391b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55834387c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558343876c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55834390d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55834693c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55834693c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55834693c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55834693c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55834693c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55834693c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55834693c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55834693c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55834693c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55834693c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558348b4145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55834589d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5583458a85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558345653d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558345653d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558345654808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558345653944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558345653944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558345653944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558349f3594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558349f3e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558349f26529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558349f50fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd58da8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55834387543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf,0x40,0x25, Step #5: \017@% Step #5: artifact_prefix='./'; Test unit written to ./oom-0b0c4b60d6a72043f8e0c59b4fdead8fca64a8d7 Step #5: Base64: D0Al Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 337 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3812842026 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556700f2ed60, 0x55670111771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556701117720,0x556702fa12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0b0c4b60d6a72043f8e0c59b4fdead8fca64a8d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 361 processed earlier; will process 10615 files now Step #5: ==12166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5566f7a712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5566fe0ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5566fe08f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5566fe08f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5566f7a77652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5566f79d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5566f79d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5566f7a69595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5566faa988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5566faa988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5566faa988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5566faa988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5566faa988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5566faa988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5566faa988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5566faa988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5566faa988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5566faa988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5566fcc9d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5566f99f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5566f9a045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5566f97afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5566f97afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5566f97b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5566f97af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5566f97af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5566f97af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5566fe09194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5566fe09a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5566fe082529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5566fe0acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f491779a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5566f79d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c,0x2e,0x3e, Step #5: L.> Step #5: artifact_prefix='./'; Test unit written to ./oom-87040ad5fb1888e6eae82bccfdf38ba69cc8319d Step #5: Base64: TC4+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 338 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3813283360 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560920f9ed60, 0x56092118771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560921187720,0x5609230112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87040ad5fb1888e6eae82bccfdf38ba69cc8319d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 362 processed earlier; will process 10614 files now Step #5: ==12202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560917ae12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56091e11c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56091e0ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56091e0ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560917ae7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560917a4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560917a42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560917ad9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56091ab088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56091ab088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56091ab088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56091ab088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56091ab088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56091ab088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56091ab088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56091ab088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56091ab088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56091ab088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56091cd0d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560919a69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560919a745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56091981fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56091981fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560919820808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56091981f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56091981f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56091981f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56091e10194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56091e10a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56091e0f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56091e11cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa204442082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560917a4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0xdf,0xbd, Step #5: ^\337\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-fb03aebe482697291747b8f5566bbf69a7f8e1fc Step #5: Base64: Xt+9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 339 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3813723786 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b0ada1bd60, 0x55b0adc0471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b0adc04720,0x55b0afa8e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb03aebe482697291747b8f5566bbf69a7f8e1fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 363 processed earlier; will process 10613 files now Step #5: ==12238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b0a455e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b0aab99728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b0aab7c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b0aab7c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b0a4564652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b0a44c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b0a44bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b0a4556595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b0a75858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b0a75858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b0a75858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b0a75858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b0a75858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b0a75858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b0a75858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b0a75858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b0a75858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b0a75858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b0a978a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b0a64e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b0a64f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b0a629cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b0a629cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b0a629d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b0a629c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b0a629c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b0a629c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b0aab7e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b0aab877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b0aab6f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b0aab99fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb53973082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b0a44be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0x8a, Step #5: \343\200\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-d0569eb8654db05cbe160e3c6957d47fe41037ff Step #5: Base64: 44CK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 340 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3814155677 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5559a4245d60, 0x5559a442e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5559a442e720,0x5559a62b82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d0569eb8654db05cbe160e3c6957d47fe41037ff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 364 processed earlier; will process 10612 files now Step #5: ==12274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55599ad882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5559a13c3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5559a13a646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5559a13a638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55599ad8e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55599acef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55599ace9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55599ad80595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55599ddaf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55599ddaf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55599ddaf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55599ddaf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55599ddaf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55599ddaf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55599ddaf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55599ddaf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55599ddaf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55599ddaf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55599ffb445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55599cd10578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55599cd1b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55599cac6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55599cac6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55599cac7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55599cac6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55599cac6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55599cac6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5559a13a894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559a13b17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5559a1399529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5559a13c3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f636b64b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55599ace843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0x75,0x65, Step #5: Tue Step #5: artifact_prefix='./'; Test unit written to ./oom-529541bb390c76152e313351d89de3cd30a1c4bd Step #5: Base64: VHVl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 341 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3814598320 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559932465d60, 0x55993264e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55993264e720,0x5599344d82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/529541bb390c76152e313351d89de3cd30a1c4bd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 365 processed earlier; will process 10611 files now Step #5: ==12310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559928fa82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55992f5e3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55992f5c646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55992f5c638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559928fae652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559928f0f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559928f09c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559928fa0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55992bfcf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55992bfcf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55992bfcf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55992bfcf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55992bfcf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55992bfcf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55992bfcf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55992bfcf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55992bfcf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55992bfcf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55992e1d445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55992af30578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55992af3b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55992ace6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55992ace6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55992ace7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55992ace6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55992ace6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55992ace6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55992f5c894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55992f5d17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55992f5b9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55992f5e3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9fe45c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559928f0843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x4a,0x0, Step #5: tJ\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-29096adb754e6f339e426342d0d0604ff7570a41 Step #5: Base64: dEoA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 342 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3815035271 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559ea689cd60, 0x559ea6a8571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559ea6a85720,0x559ea890f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/29096adb754e6f339e426342d0d0604ff7570a41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 366 processed earlier; will process 10610 files now Step #5: ==12346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e9d3df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559ea3a1a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559ea39fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559ea39fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e9d3e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e9d34642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e9d340c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e9d3d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ea04068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ea04068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ea04068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ea04068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ea04068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ea04068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ea04068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ea04068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ea04068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ea04068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559ea260b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e9f367578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e9f3725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e9f11dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e9f11dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e9f11e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e9f11d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e9f11d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e9f11d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559ea39ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559ea3a087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559ea39f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559ea3a1afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f52cd10a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e9d33f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf, Step #5: \357\273\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-57218c316b6921e2cd61027a2387edc31a2d9471 Step #5: Base64: 77u/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 343 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3815480728 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5608809ded60, 0x560880bc771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560880bc7720,0x560882a512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/57218c316b6921e2cd61027a2387edc31a2d9471' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 367 processed earlier; will process 10609 files now Step #5: ==12382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608775212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56087db5c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56087db3f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56087db3f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560877527652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56087748842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560877482c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560877519595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56087a5488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56087a5488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56087a5488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56087a5488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56087a5488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56087a5488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56087a5488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56087a5488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56087a5488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56087a5488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56087c74d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608794a9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608794b45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56087925fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56087925fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560879260808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56087925f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56087925f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56087925f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56087db4194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56087db4a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56087db32529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56087db5cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd26b68082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56087748143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0x8a, Step #5: \342\200\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-70d38e91909d07126ea55c353b5d63f44b2af7db Step #5: Base64: 4oCK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 344 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3815925142 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560160f62d60, 0x56016114b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56016114b720,0x560162fd52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70d38e91909d07126ea55c353b5d63f44b2af7db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 368 processed earlier; will process 10608 files now Step #5: ==12418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560157aa52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56015e0e0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56015e0c346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56015e0c338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560157aab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560157a0c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560157a06c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560157a9d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56015aacc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56015aacc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56015aacc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56015aacc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56015aacc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56015aacc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56015aacc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56015aacc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56015aacc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56015aacc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56015ccd145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560159a2d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560159a385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601597e3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601597e3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601597e4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601597e3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601597e3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601597e3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56015e0c594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56015e0ce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56015e0b6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56015e0e0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f64a7d33082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560157a0543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1f,0x9,0x8, Step #5: \037\011\010 Step #5: artifact_prefix='./'; Test unit written to ./oom-b864d074de57a489bf665838134146ab63866686 Step #5: Base64: HwkI Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 345 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3816363709 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561759407d60, 0x5617595f071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5617595f0720,0x56175b47a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b864d074de57a489bf665838134146ab63866686' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 369 processed earlier; will process 10607 files now Step #5: ==12454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56174ff4a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561756585728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56175656846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56175656838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56174ff50652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56174feb142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56174feabc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56174ff42595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561752f718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561752f718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561752f718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561752f718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561752f718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561752f718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561752f718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561752f718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561752f718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561752f718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56175517645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561751ed2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561751edd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561751c88d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561751c88d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561751c89808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561751c88944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561751c88944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561751c88944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56175656a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5617565737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56175655b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561756585fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb313ff6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56174feaa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x48,0xa, Step #5: PH\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-71335cc7ebca4b18ce1cba933e743024aa43960d Step #5: Base64: UEgK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 346 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3816803812 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dd218c0d60, 0x55dd21aa971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dd21aa9720,0x55dd239332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71335cc7ebca4b18ce1cba933e743024aa43960d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 370 processed earlier; will process 10606 files now Step #5: ==12490== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dd184032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dd1ea3e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dd1ea2146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dd1ea2138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dd18409652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dd1836a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dd18364c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dd183fb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dd1b42a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dd1b42a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dd1b42a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dd1b42a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dd1b42a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dd1b42a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dd1b42a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dd1b42a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dd1b42a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dd1b42a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dd1d62f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dd1a38b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dd1a3965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dd1a141d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dd1a141d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dd1a142808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dd1a141944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dd1a141944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dd1a141944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dd1ea2394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dd1ea2c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dd1ea14529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dd1ea3efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f00493d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dd1836343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd9,0x8e,0x1f, Step #5: \331\216\037 Step #5: artifact_prefix='./'; Test unit written to ./oom-aa50618f35519acfb1726dacc4714114ec69361f Step #5: Base64: 2Y4f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 347 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3817242088 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557307aebd60, 0x557307cd471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557307cd4720,0x557309b5e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aa50618f35519acfb1726dacc4714114ec69361f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 371 processed earlier; will process 10605 files now Step #5: ==12526== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5572fe62e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557304c69728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557304c4c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557304c4c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5572fe634652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5572fe59542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5572fe58fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5572fe626595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5573016558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5573016558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5573016558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5573016558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5573016558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5573016558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5573016558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5573016558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5573016558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5573016558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55730385a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5573005b6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5573005c15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55730036cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55730036cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55730036d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55730036c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55730036c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55730036c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557304c4e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557304c577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557304c3f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557304c69fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f92724f0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5572fe58e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x5b,0x42, Step #5: -[B Step #5: artifact_prefix='./'; Test unit written to ./oom-67320e251c8cc85947a18a8e7f77c3cdb830e721 Step #5: Base64: LVtC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 348 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3817687196 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55831c3f9d60, 0x55831c5e271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55831c5e2720,0x55831e46c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/67320e251c8cc85947a18a8e7f77c3cdb830e721' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 372 processed earlier; will process 10604 files now Step #5: ==12562== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558312f3c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558319577728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55831955a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55831955a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558312f42652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558312ea342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558312e9dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558312f34595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558315f638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558315f638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558315f638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558315f638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558315f638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558315f638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558315f638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558315f638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558315f638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558315f638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55831816845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558314ec4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558314ecf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558314c7ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558314c7ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558314c7b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558314c7a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558314c7a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558314c7a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55831955c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5583195657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55831954d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558319577fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c71e3b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558312e9c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0xd,0x2d, Step #5: ?\015- Step #5: artifact_prefix='./'; Test unit written to ./oom-5646ba0f8050984c4a52b72e8342e44993361274 Step #5: Base64: Pw0t Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 349 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3818138257 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5573675b2d60, 0x55736779b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55736779b720,0x5573696252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5646ba0f8050984c4a52b72e8342e44993361274' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 373 processed earlier; will process 10603 files now Step #5: ==12598== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55735e0f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557364730728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55736471346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55736471338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55735e0fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55735e05c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55735e056c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55735e0ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55736111c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55736111c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55736111c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55736111c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55736111c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55736111c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55736111c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55736111c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55736111c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55736111c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55736332145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55736007d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5573600885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55735fe33d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55735fe33d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55735fe34808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55735fe33944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55735fe33944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55735fe33944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55736471594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55736471e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557364706529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557364730fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f66c34082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55735e05543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xb1,0x82, Step #5: \341\261\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-014fb59c67bc931072a451efb8858955a6c39219 Step #5: Base64: 4bGC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 350 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3818588066 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0f5ce3d60, 0x55a0f5ecc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0f5ecc720,0x55a0f7d562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/014fb59c67bc931072a451efb8858955a6c39219' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 374 processed earlier; will process 10602 files now Step #5: ==12634== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0ec8262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0f2e61728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0f2e4446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0f2e4438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0ec82c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0ec78d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0ec787c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0ec81e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0ef84d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0ef84d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0ef84d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0ef84d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0ef84d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0ef84d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0ef84d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0ef84d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0ef84d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0ef84d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0f1a5245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0ee7ae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0ee7b95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0ee564d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0ee564d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0ee565808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0ee564944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0ee564944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0ee564944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0f2e4694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0f2e4f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0f2e37529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0f2e61fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7811f74082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0ec78643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0xab, Step #5: \343\200\253 Step #5: artifact_prefix='./'; Test unit written to ./oom-2d172f92c25d5a7cd15294bc8398d51879ed6689 Step #5: Base64: 44Cr Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 351 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3819023585 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bcfe38bd60, 0x55bcfe57471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bcfe574720,0x55bd003fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d172f92c25d5a7cd15294bc8398d51879ed6689' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 375 processed earlier; will process 10601 files now Step #5: ==12670== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bcf4ece2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bcfb509728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bcfb4ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bcfb4ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bcf4ed4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bcf4e3542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bcf4e2fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bcf4ec6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bcf7ef58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bcf7ef58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bcf7ef58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bcf7ef58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bcf7ef58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bcf7ef58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bcf7ef58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bcf7ef58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bcf7ef58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bcf7ef58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bcfa0fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bcf6e56578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bcf6e615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bcf6c0cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bcf6c0cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bcf6c0d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bcf6c0c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bcf6c0c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bcf6c0c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bcfb4ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bcfb4f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bcfb4df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bcfb509fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4ea4ecd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bcf4e2e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x55,0x25, Step #5: 6U% Step #5: artifact_prefix='./'; Test unit written to ./oom-e836e0bd01062e68b0447f18293422d952d1fc3c Step #5: Base64: NlUl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 352 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3819465236 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557461811d60, 0x5574619fa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5574619fa720,0x5574638842c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e836e0bd01062e68b0447f18293422d952d1fc3c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 376 processed earlier; will process 10600 files now Step #5: ==12706== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5574583542d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55745e98f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55745e97246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55745e97238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55745835a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5574582bb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5574582b5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55745834c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55745b37b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55745b37b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55745b37b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55745b37b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55745b37b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55745b37b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55745b37b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55745b37b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55745b37b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55745b37b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55745d58045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55745a2dc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55745a2e75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55745a092d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55745a092d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55745a093808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55745a092944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55745a092944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55745a092944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55745e97494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55745e97d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55745e965529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55745e98ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f48776e9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5574582b443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbc,0x80, Step #5: \357\274\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-1336e6cbf2212d03b8c9da2dff69468b65bce75f Step #5: Base64: 77yA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 353 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3819909751 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556dfbd2ad60, 0x556dfbf1371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556dfbf13720,0x556dfdd9d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1336e6cbf2212d03b8c9da2dff69468b65bce75f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 377 processed earlier; will process 10599 files now Step #5: ==12742== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556df286d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556df8ea8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556df8e8b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556df8e8b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556df2873652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556df27d442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556df27cec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556df2865595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556df58948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556df58948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556df58948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556df58948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556df58948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556df58948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556df58948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556df58948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556df58948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556df58948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556df7a9945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556df47f5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556df48005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556df45abd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556df45abd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556df45ac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556df45ab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556df45ab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556df45ab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556df8e8d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556df8e967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556df8e7e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556df8ea8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c9312b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556df27cd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0x2c,0x2c, Step #5: ,,, Step #5: artifact_prefix='./'; Test unit written to ./oom-e7d4683bb2bb44a364ab8a871e9ea252ab6f7993 Step #5: Base64: LCws Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 354 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3820345276 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5621ff36dd60, 0x5621ff55671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5621ff556720,0x5622013e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e7d4683bb2bb44a364ab8a871e9ea252ab6f7993' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 378 processed earlier; will process 10598 files now Step #5: ==12778== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5621f5eb02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5621fc4eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5621fc4ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5621fc4ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5621f5eb6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5621f5e1742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5621f5e11c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5621f5ea8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5621f8ed78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5621f8ed78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5621f8ed78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5621f8ed78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5621f8ed78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5621f8ed78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5621f8ed78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5621f8ed78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5621f8ed78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5621f8ed78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5621fb0dc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5621f7e38578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5621f7e435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5621f7beed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5621f7beed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5621f7bef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5621f7bee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5621f7bee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5621f7bee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5621fc4d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5621fc4d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5621fc4c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5621fc4ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f69659bd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5621f5e1043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0xde,0x99, Step #5: \\\336\231 Step #5: artifact_prefix='./'; Test unit written to ./oom-16a3e22ed3f98195f1e35ac5daa04afd5cdb0dfd Step #5: Base64: XN6Z Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 355 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3820785736 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563d292b2d60, 0x563d2949b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563d2949b720,0x563d2b3252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/16a3e22ed3f98195f1e35ac5daa04afd5cdb0dfd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 379 processed earlier; will process 10597 files now Step #5: ==12814== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563d1fdf52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563d26430728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563d2641346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563d2641338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563d1fdfb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563d1fd5c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563d1fd56c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563d1fded595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563d22e1c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563d22e1c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563d22e1c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563d22e1c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563d22e1c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563d22e1c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563d22e1c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563d22e1c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563d22e1c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563d22e1c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563d2502145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563d21d7d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563d21d885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563d21b33d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563d21b33d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563d21b34808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563d21b33944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563d21b33944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563d21b33944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563d2641594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563d2641e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563d26406529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563d26430fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5d8ea05082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563d1fd5543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x24,0x24, Step #5: \012$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-b8c3ebab05fbab81ebd434de438e9272fb773612 Step #5: Base64: CiQk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 356 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3821227606 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564182cc0d60, 0x564182ea971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564182ea9720,0x564184d332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8c3ebab05fbab81ebd434de438e9272fb773612' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 380 processed earlier; will process 10596 files now Step #5: ==12850== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5641798032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56417fe3e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56417fe2146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56417fe2138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564179809652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56417976a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564179764c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5641797fb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56417c82a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56417c82a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56417c82a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56417c82a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56417c82a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56417c82a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56417c82a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56417c82a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56417c82a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56417c82a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56417ea2f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56417b78b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56417b7965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56417b541d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56417b541d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56417b542808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56417b541944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56417b541944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56417b541944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56417fe2394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56417fe2c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56417fe14529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56417fe3efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b2d505082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56417976343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x4e,0x41, Step #5: CNA Step #5: artifact_prefix='./'; Test unit written to ./oom-6dbbc8758b3ede7abc8a9c9c3a490c8246cae39d Step #5: Base64: Q05B Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 357 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3821667268 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a4e291bd60, 0x55a4e2b0471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a4e2b04720,0x55a4e498e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6dbbc8758b3ede7abc8a9c9c3a490c8246cae39d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 381 processed earlier; will process 10595 files now Step #5: ==12886== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4d945e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a4dfa99728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a4dfa7c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a4dfa7c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4d9464652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a4d93c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a4d93bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a4d9456595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4dc4858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4dc4858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4dc4858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4dc4858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4dc4858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4dc4858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4dc4858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4dc4858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4dc4858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4dc4858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a4de68a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a4db3e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4db3f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4db19cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4db19cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4db19d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4db19c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4db19c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4db19c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a4dfa7e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a4dfa877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a4dfa6f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a4dfa99fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f41549b9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a4d93be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x74,0x6b, Step #5: ttk Step #5: artifact_prefix='./'; Test unit written to ./oom-858be7b4473a529555819a7c77ccf9358db2f00e Step #5: Base64: dHRr Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 358 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3822112515 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f6d4e9dd60, 0x55f6d508671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f6d5086720,0x55f6d6f102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/858be7b4473a529555819a7c77ccf9358db2f00e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 382 processed earlier; will process 10594 files now Step #5: ==12922== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f6cb9e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f6d201b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f6d1ffe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f6d1ffe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f6cb9e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f6cb94742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f6cb941c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f6cb9d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f6cea078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f6cea078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f6cea078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f6cea078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f6cea078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f6cea078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f6cea078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f6cea078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f6cea078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f6cea078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f6d0c0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f6cd968578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f6cd9735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f6cd71ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f6cd71ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f6cd71f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f6cd71e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f6cd71e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f6cd71e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f6d200094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f6d20097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f6d1ff1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f6d201bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f17da635082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f6cb94043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x6f,0x30, Step #5: Ro0 Step #5: artifact_prefix='./'; Test unit written to ./oom-753e0f2383fd6ca5006766b8891517bfe86d9096 Step #5: Base64: Um8w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 359 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3822556720 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55baaeb1bd60, 0x55baaed0471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55baaed04720,0x55bab0b8e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/753e0f2383fd6ca5006766b8891517bfe86d9096' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 383 processed earlier; will process 10593 files now Step #5: ==12958== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55baa565e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55baabc99728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55baabc7c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55baabc7c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55baa5664652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55baa55c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55baa55bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55baa5656595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55baa86858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55baa86858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55baa86858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55baa86858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55baa86858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55baa86858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55baa86858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55baa86858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55baa86858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55baa86858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55baaa88a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55baa75e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55baa75f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55baa739cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55baa739cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55baa739d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55baa739c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55baa739c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55baa739c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55baabc7e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55baabc877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55baabc6f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55baabc99fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb5cffea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55baa55be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x20,0x0, Step #5: s \000 Step #5: artifact_prefix='./'; Test unit written to ./oom-7cef94373c90ce4a20d86bf53bf2dd23e4b942d2 Step #5: Base64: cyAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 360 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3823006032 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a017e3ed60, 0x55a01802771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a018027720,0x55a019eb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7cef94373c90ce4a20d86bf53bf2dd23e4b942d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 384 processed earlier; will process 10592 files now Step #5: ==12994== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a00e9812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a014fbc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a014f9f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a014f9f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a00e987652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a00e8e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a00e8e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a00e979595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0119a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0119a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0119a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0119a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0119a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0119a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0119a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0119a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0119a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0119a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a013bad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a010909578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0109145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0106bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0106bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0106c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0106bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0106bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0106bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a014fa194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a014faa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a014f92529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a014fbcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ba90a3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a00e8e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x63,0x66, Step #5: Dcf Step #5: artifact_prefix='./'; Test unit written to ./oom-4d21a1fbb7ea0a55948e09e6f7175e6690a4091e Step #5: Base64: RGNm Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 361 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3823444334 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c8b42dcd60, 0x55c8b44c571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c8b44c5720,0x55c8b634f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4d21a1fbb7ea0a55948e09e6f7175e6690a4091e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 385 processed earlier; will process 10591 files now Step #5: ==13030== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c8aae1f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c8b145a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c8b143d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c8b143d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c8aae25652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c8aad8642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c8aad80c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c8aae17595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c8ade468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c8ade468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c8ade468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c8ade468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c8ade468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c8ade468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c8ade468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c8ade468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c8ade468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c8ade468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c8b004b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c8acda7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c8acdb25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c8acb5dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c8acb5dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c8acb5e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c8acb5d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c8acb5d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c8acb5d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c8b143f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c8b14487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c8b1430529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c8b145afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2437d7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c8aad7f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c,0x4c,0x2c, Step #5: LL, Step #5: artifact_prefix='./'; Test unit written to ./oom-2705c966a74c0595fc62387129c878f4943296c6 Step #5: Base64: TEws Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 362 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3823883902 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555726b07d60, 0x555726cf071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555726cf0720,0x555728b7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2705c966a74c0595fc62387129c878f4943296c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 386 processed earlier; will process 10590 files now Step #5: ==13066== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55571d64a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555723c85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555723c6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555723c6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55571d650652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55571d5b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55571d5abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55571d642595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5557206718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5557206718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5557206718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5557206718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5557206718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5557206718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5557206718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5557206718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5557206718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5557206718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55572287645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55571f5d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55571f5dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55571f388d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55571f388d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55571f389808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55571f388944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55571f388944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55571f388944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555723c6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555723c737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555723c5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555723c85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f42299b6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55571d5aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x83,0xbd, Step #5: \341\203\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-1f857f4bf2d368b77ca872ab8b15dbded80a2166 Step #5: Base64: 4YO9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 363 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3824322840 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602e3798d60, 0x5602e398171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602e3981720,0x5602e580b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f857f4bf2d368b77ca872ab8b15dbded80a2166' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 387 processed earlier; will process 10589 files now Step #5: ==13102== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5602da2db2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5602e0916728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5602e08f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5602e08f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5602da2e1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5602da24242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5602da23cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5602da2d3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5602dd3028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5602dd3028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5602dd3028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5602dd3028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5602dd3028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5602dd3028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5602dd3028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5602dd3028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5602dd3028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5602dd3028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602df50745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5602dc263578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5602dc26e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5602dc019d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5602dc019d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5602dc01a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5602dc019944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5602dc019944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5602dc019944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5602e08fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602e09047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5602e08ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5602e0916fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d4b885082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5602da23b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x2e,0xd1, Step #5: ..\321 Step #5: artifact_prefix='./'; Test unit written to ./oom-55067d9854b8342a7e742572e63a485810a0b500 Step #5: Base64: Li7R Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 364 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3824762813 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561e7d84fd60, 0x561e7da3871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561e7da38720,0x561e7f8c22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/55067d9854b8342a7e742572e63a485810a0b500' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 388 processed earlier; will process 10588 files now Step #5: ==13138== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e743922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561e7a9cd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561e7a9b046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561e7a9b038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e74398652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e742f942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e742f3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e7438a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561e773b98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561e773b98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561e773b98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561e773b98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561e773b98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561e773b98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561e773b98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561e773b98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561e773b98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561e773b98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561e795be45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561e7631a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561e763255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561e760d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561e760d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561e760d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561e760d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561e760d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561e760d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561e7a9b294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561e7a9bb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561e7a9a3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561e7a9cdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe80fc3a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e742f243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x23,0x76, Step #5: &#v Step #5: artifact_prefix='./'; Test unit written to ./oom-e1e8a2059dbee5df172732c740103c3da1b7eb19 Step #5: Base64: JiN2 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 365 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3825198233 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556904ab1d60, 0x556904c9a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556904c9a720,0x556906b242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e1e8a2059dbee5df172732c740103c3da1b7eb19' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 389 processed earlier; will process 10587 files now Step #5: ==13174== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5568fb5f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556901c2f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556901c1246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556901c1238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5568fb5fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5568fb55b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5568fb555c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5568fb5ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5568fe61b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5568fe61b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5568fe61b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5568fe61b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5568fe61b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5568fe61b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5568fe61b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5568fe61b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5568fe61b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5568fe61b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55690082045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5568fd57c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5568fd5875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568fd332d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568fd332d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568fd333808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568fd332944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568fd332944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568fd332944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556901c1494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556901c1d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556901c05529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556901c2ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f84ef214082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5568fb55443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x2e,0x54, Step #5: 2.T Step #5: artifact_prefix='./'; Test unit written to ./oom-3c3cf1fd99238742c778ae18afe866547025261c Step #5: Base64: Mi5U Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 366 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3825629418 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619a752dd60, 0x5619a771671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619a7716720,0x5619a95a02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3c3cf1fd99238742c778ae18afe866547025261c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 390 processed earlier; will process 10586 files now Step #5: ==13210== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56199e0702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619a46ab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619a468e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619a468e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56199e076652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56199dfd742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56199dfd1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56199e068595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619a10978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619a10978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619a10978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619a10978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619a10978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619a10978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619a10978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619a10978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619a10978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619a10978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619a329c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56199fff8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619a00035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56199fdaed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56199fdaed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56199fdaf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56199fdae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56199fdae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56199fdae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619a469094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619a46997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619a4681529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619a46abfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9a42552082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56199dfd043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x33,0x22, Step #5: P3\" Step #5: artifact_prefix='./'; Test unit written to ./oom-8078dc5ffb120df0873e26a2548a587d8059debb Step #5: Base64: UDMi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 367 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3826066544 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559075220d60, 0x55907540971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559075409720,0x5590772932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8078dc5ffb120df0873e26a2548a587d8059debb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 391 processed earlier; will process 10585 files now Step #5: ==13246== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55906bd632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55907239e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55907238146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55907238138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55906bd69652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55906bcca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55906bcc4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55906bd5b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55906ed8a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55906ed8a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55906ed8a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55906ed8a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55906ed8a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55906ed8a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55906ed8a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55906ed8a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55906ed8a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55906ed8a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559070f8f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55906dceb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55906dcf65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55906daa1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55906daa1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55906daa2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55906daa1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55906daa1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55906daa1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55907238394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55907238c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559072374529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55907239efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d534c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55906bcc343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x13,0x0, Step #5: A\023\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-cfadb53dc36ddf310e1c0a3b586d0ceca0cfd954 Step #5: Base64: QRMA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 368 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3826502624 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556ec84b5d60, 0x556ec869e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556ec869e720,0x556eca5282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cfadb53dc36ddf310e1c0a3b586d0ceca0cfd954' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 392 processed earlier; will process 10584 files now Step #5: ==13282== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ebeff82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556ec5633728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556ec561646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556ec561638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ebeffe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ebef5f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ebef59c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ebeff0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ec201f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ec201f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ec201f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ec201f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ec201f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ec201f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ec201f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ec201f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ec201f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ec201f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ec422445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ec0f80578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ec0f8b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ec0d36d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ec0d36d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ec0d37808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ec0d36944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ec0d36944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ec0d36944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556ec561894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556ec56217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556ec5609529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556ec5633fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe0e6218082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ebef5843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1f,0xca,0xb5, Step #5: \037\312\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-0836d8e4c52f9f7283da66028bf4d845f8d1b0a2 Step #5: Base64: H8q1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 369 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3826938592 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ef8c06fd60, 0x55ef8c25871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ef8c258720,0x55ef8e0e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0836d8e4c52f9f7283da66028bf4d845f8d1b0a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 393 processed earlier; will process 10583 files now Step #5: ==13318== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ef82bb22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ef891ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ef891d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ef891d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ef82bb8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ef82b1942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ef82b13c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ef82baa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ef85bd98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ef85bd98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ef85bd98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ef85bd98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ef85bd98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ef85bd98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ef85bd98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ef85bd98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ef85bd98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ef85bd98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ef87dde45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ef84b3a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ef84b455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ef848f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ef848f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ef848f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ef848f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ef848f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ef848f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ef891d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ef891db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ef891c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ef891edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f01210b7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ef82b1243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1f,0x2e,0x1f, Step #5: \037.\037 Step #5: artifact_prefix='./'; Test unit written to ./oom-3efb0ad2b49480c0ea2cdb94d15db5a65b4ade1d Step #5: Base64: Hy4f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 370 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3827375111 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581cf74bd60, 0x5581cf93471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581cf934720,0x5581d17be2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3efb0ad2b49480c0ea2cdb94d15db5a65b4ade1d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 394 processed earlier; will process 10582 files now Step #5: ==13354== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581c628e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581cc8c9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581cc8ac46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581cc8ac38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581c6294652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581c61f542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581c61efc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581c6286595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581c92b58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581c92b58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581c92b58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581c92b58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581c92b58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581c92b58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581c92b58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581c92b58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581c92b58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581c92b58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581cb4ba45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581c8216578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581c82215a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581c7fccd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581c7fccd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581c7fcd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581c7fcc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581c7fcc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581c7fcc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581cc8ae94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581cc8b77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581cc89f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581cc8c9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28d92b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581c61ee43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xd,0xd, Step #5: \015\015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-01d94a6f21b47b294553d412889a784d3553cf6f Step #5: Base64: DQ0N Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 371 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3827817579 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564b34b19d60, 0x564b34d0271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564b34d02720,0x564b36b8c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/01d94a6f21b47b294553d412889a784d3553cf6f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 395 processed earlier; will process 10581 files now Step #5: ==13390== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564b2b65c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564b31c97728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564b31c7a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564b31c7a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564b2b662652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564b2b5c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564b2b5bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564b2b654595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564b2e6838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564b2e6838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564b2e6838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564b2e6838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564b2e6838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564b2e6838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564b2e6838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564b2e6838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564b2e6838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564b2e6838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564b3088845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564b2d5e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564b2d5ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564b2d39ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564b2d39ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564b2d39b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564b2d39a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564b2d39a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564b2d39a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564b31c7c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564b31c857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564b31c6d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564b31c97fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff93a8e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564b2b5bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0xd8,0xa0, Step #5: \003\330\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-8f910d72422b8febb78f9a79fb01a4e4e1bb6133 Step #5: Base64: A9ig Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 372 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3828257270 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605f1558d60, 0x5605f174171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605f1741720,0x5605f35cb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8f910d72422b8febb78f9a79fb01a4e4e1bb6133' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 396 processed earlier; will process 10580 files now Step #5: ==13426== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605e809b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605ee6d6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605ee6b946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605ee6b938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605e80a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605e800242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605e7ffcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605e8093595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605eb0c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605eb0c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605eb0c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605eb0c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605eb0c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605eb0c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605eb0c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605eb0c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605eb0c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605eb0c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605ed2c745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605ea023578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605ea02e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605e9dd9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605e9dd9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605e9dda808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605e9dd9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605e9dd9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605e9dd9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605ee6bb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605ee6c47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605ee6ac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605ee6d6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd12b497082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605e7ffb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x79,0x3a,0x3e, Step #5: y:> Step #5: artifact_prefix='./'; Test unit written to ./oom-0c70e5946bc0ce1bc4cf2be9326898dd812a2f00 Step #5: Base64: eTo+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 373 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3828694954 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d345e9d60, 0x558d347d271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d347d2720,0x558d3665c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0c70e5946bc0ce1bc4cf2be9326898dd812a2f00' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 397 processed earlier; will process 10579 files now Step #5: ==13462== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d2b12c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d31767728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d3174a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d3174a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d2b132652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d2b09342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d2b08dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d2b124595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d2e1538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d2e1538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d2e1538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d2e1538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d2e1538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d2e1538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d2e1538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d2e1538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d2e1538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d2e1538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d3035845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d2d0b4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d2d0bf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d2ce6ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d2ce6ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d2ce6b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d2ce6a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d2ce6a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d2ce6a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d3174c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d317557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d3173d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d31767fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fca38a19082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d2b08c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x19,0x28, Step #5: (\031( Step #5: artifact_prefix='./'; Test unit written to ./oom-5c008390d12e7bb5f5dadf2d9852588b437a46e8 Step #5: Base64: KBko Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 374 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3829130215 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a68460ad60, 0x55a6847f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a6847f3720,0x55a68667d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c008390d12e7bb5f5dadf2d9852588b437a46e8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 398 processed earlier; will process 10578 files now Step #5: ==13498== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a67b14d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a681788728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a68176b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a68176b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a67b153652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a67b0b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a67b0aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a67b145595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a67e1748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a67e1748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a67e1748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a67e1748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a67e1748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a67e1748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a67e1748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a67e1748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a67e1748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a67e1748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a68037945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a67d0d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a67d0e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a67ce8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a67ce8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a67ce8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a67ce8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a67ce8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a67ce8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a68176d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a6817767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a68175e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a681788fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac37c86082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a67b0ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x26,0x53, Step #5: 9&S Step #5: artifact_prefix='./'; Test unit written to ./oom-470eafda977519e3f33e68f48a8e36cc859ef68f Step #5: Base64: OSZT Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 375 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3829569183 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b8a551d60, 0x558b8a73a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b8a73a720,0x558b8c5c42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/470eafda977519e3f33e68f48a8e36cc859ef68f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 399 processed earlier; will process 10577 files now Step #5: ==13534== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b810942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b876cf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b876b246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b876b238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b8109a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b80ffb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b80ff5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b8108c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b840bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b840bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b840bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b840bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b840bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b840bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b840bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b840bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b840bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b840bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b862c045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b8301c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b830275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b82dd2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b82dd2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b82dd3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b82dd2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b82dd2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b82dd2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b876b494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b876bd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b876a5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b876cffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f73cee0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b80ff443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x9f,0xb6, Step #5: \341\237\266 Step #5: artifact_prefix='./'; Test unit written to ./oom-d8557607dbe5a8c137edb1dcb27352280d291991 Step #5: Base64: 4Z+2 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 376 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3830011739 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562dac588d60, 0x562dac77171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562dac771720,0x562dae5fb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d8557607dbe5a8c137edb1dcb27352280d291991' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 400 processed earlier; will process 10576 files now Step #5: ==13570== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562da30cb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562da9706728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562da96e946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562da96e938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562da30d1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562da303242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562da302cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562da30c3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562da60f28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562da60f28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562da60f28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562da60f28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562da60f28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562da60f28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562da60f28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562da60f28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562da60f28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562da60f28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562da82f745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562da5053578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562da505e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562da4e09d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562da4e09d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562da4e0a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562da4e09944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562da4e09944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562da4e09944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562da96eb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562da96f47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562da96dc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562da9706fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f009bfd5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562da302b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xb7,0x8a, Step #5: \340\267\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-c0d5c866b45b34ec6519f419498b172b17cff96a Step #5: Base64: 4LeK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 377 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3830452169 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ed302ad60, 0x558ed321371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ed3213720,0x558ed509d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c0d5c866b45b34ec6519f419498b172b17cff96a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 401 processed earlier; will process 10575 files now Step #5: ==13606== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558ec9b6d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ed01a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ed018b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ed018b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ec9b73652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ec9ad442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ec9acec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ec9b65595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558eccb948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558eccb948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558eccb948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558eccb948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558eccb948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558eccb948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558eccb948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558eccb948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558eccb948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558eccb948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558eced9945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558ecbaf5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558ecbb005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558ecb8abd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558ecb8abd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558ecb8ac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558ecb8ab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558ecb8ab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558ecb8ab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ed018d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ed01967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ed017e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ed01a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb0a15d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ec9acd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0xa6,0xa5, Step #5: \343\246\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-593f253d776e3ed2aef885506b750118acb7bf27 Step #5: Base64: 46al Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 378 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3830890608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5561762d0d60, 0x5561764b971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5561764b9720,0x5561783432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/593f253d776e3ed2aef885506b750118acb7bf27' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 402 processed earlier; will process 10574 files now Step #5: ==13642== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55616ce132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55617344e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55617343146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55617343138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55616ce19652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55616cd7a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55616cd74c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55616ce0b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55616fe3a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55616fe3a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55616fe3a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55616fe3a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55616fe3a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55616fe3a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55616fe3a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55616fe3a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55616fe3a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55616fe3a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55617203f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55616ed9b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55616eda65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55616eb51d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55616eb51d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55616eb52808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55616eb51944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55616eb51944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55616eb51944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55617343394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55617343c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556173424529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55617344efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5118870082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55616cd7343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x4,0x0, Step #5: \016\004\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-e7f20036a4513f7d5ec2c3b48a57aa4bf3f5d5a0 Step #5: Base64: DgQA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 379 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3831327686 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561aeaf21d60, 0x561aeb10a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561aeb10a720,0x561aecf942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e7f20036a4513f7d5ec2c3b48a57aa4bf3f5d5a0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 403 processed earlier; will process 10573 files now Step #5: ==13678== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ae1a642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ae809f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ae808246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ae808238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ae1a6a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ae19cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ae19c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ae1a5c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ae4a8b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ae4a8b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ae4a8b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ae4a8b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ae4a8b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ae4a8b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ae4a8b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ae4a8b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ae4a8b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ae4a8b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ae6c9045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ae39ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ae39f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ae37a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ae37a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ae37a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ae37a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ae37a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ae37a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ae808494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ae808d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ae8075529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ae809ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdafd98a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ae19c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x8f,0xac, Step #5: \341\217\254 Step #5: artifact_prefix='./'; Test unit written to ./oom-70e4e98de8b29a6f52eb81463bdb250d89361485 Step #5: Base64: 4Y+s Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 380 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3831770334 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561e814a3d60, 0x561e8168c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561e8168c720,0x561e835162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70e4e98de8b29a6f52eb81463bdb250d89361485' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 404 processed earlier; will process 10572 files now Step #5: ==13714== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e77fe62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561e7e621728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561e7e60446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561e7e60438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e77fec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e77f4d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e77f47c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e77fde595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561e7b00d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561e7b00d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561e7b00d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561e7b00d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561e7b00d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561e7b00d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561e7b00d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561e7b00d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561e7b00d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561e7b00d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561e7d21245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561e79f6e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561e79f795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561e79d24d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561e79d24d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561e79d25808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561e79d24944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561e79d24944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561e79d24944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561e7e60694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561e7e60f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561e7e5f7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561e7e621fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3267768082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e77f4643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0xa,0x69, Step #5: .\012i Step #5: artifact_prefix='./'; Test unit written to ./oom-7627632f17554cd52e41ffecc6599a2eced2e8ec Step #5: Base64: Lgpp Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 381 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3832227936 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5568fd5ddd60, 0x5568fd7c671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5568fd7c6720,0x5568ff6502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7627632f17554cd52e41ffecc6599a2eced2e8ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 405 processed earlier; will process 10571 files now Step #5: ==13750== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5568f41202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5568fa75b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5568fa73e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5568fa73e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5568f4126652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5568f408742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5568f4081c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5568f4118595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5568f71478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5568f71478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5568f71478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5568f71478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5568f71478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5568f71478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5568f71478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5568f71478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5568f71478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5568f71478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5568f934c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5568f60a8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5568f60b35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568f5e5ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568f5e5ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568f5e5f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568f5e5e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568f5e5e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568f5e5e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5568fa74094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5568fa7497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5568fa731529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5568fa75bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9756325082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5568f408043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0x48,0x2e, Step #5: TH. Step #5: artifact_prefix='./'; Test unit written to ./oom-721fd69df9ac77c28cc3d99a4856d6e521fabe96 Step #5: Base64: VEgu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 382 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3832684768 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc35139d60, 0x55fc3532271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc35322720,0x55fc371ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/721fd69df9ac77c28cc3d99a4856d6e521fabe96' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 406 processed earlier; will process 10570 files now Step #5: ==13786== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc2bc7c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc322b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc3229a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc3229a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc2bc82652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc2bbe342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc2bbddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc2bc74595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc2eca38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc2eca38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc2eca38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc2eca38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc2eca38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc2eca38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc2eca38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc2eca38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc2eca38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc2eca38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc30ea845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc2dc04578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc2dc0f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc2d9bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc2d9bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc2d9bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc2d9ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc2d9ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc2d9ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc3229c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc322a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc3228d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc322b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b42fa0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc2bbdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd7,0x81,0x8a, Step #5: \327\201\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-c11e4a8a55cba1d7b078755504ef5e729f22575c Step #5: Base64: 14GK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 383 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3833134928 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ecbddb5d60, 0x55ecbdf9e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ecbdf9e720,0x55ecbfe282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c11e4a8a55cba1d7b078755504ef5e729f22575c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 407 processed earlier; will process 10569 files now Step #5: ==13822== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ecb48f82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ecbaf33728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ecbaf1646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ecbaf1638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ecb48fe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ecb485f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ecb4859c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ecb48f0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ecb791f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ecb791f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ecb791f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ecb791f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ecb791f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ecb791f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ecb791f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ecb791f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ecb791f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ecb791f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ecb9b2445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ecb6880578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ecb688b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ecb6636d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ecb6636d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ecb6637808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ecb6636944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ecb6636944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ecb6636944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ecbaf1894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ecbaf217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ecbaf09529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ecbaf33fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2eb2889082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ecb485843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbf,0xbd, Step #5: \357\277\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-9bdb77276c1852e1fb067820472812fcf6084024 Step #5: Base64: 77+9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 384 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3833577253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aecd450d60, 0x55aecd63971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aecd639720,0x55aecf4c32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9bdb77276c1852e1fb067820472812fcf6084024' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 408 processed earlier; will process 10568 files now Step #5: ==13858== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aec3f932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aeca5ce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aeca5b146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aeca5b138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aec3f99652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aec3efa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aec3ef4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aec3f8b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aec6fba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aec6fba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aec6fba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aec6fba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aec6fba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aec6fba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aec6fba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aec6fba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aec6fba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aec6fba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aec91bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aec5f1b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aec5f265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aec5cd1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aec5cd1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aec5cd2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aec5cd1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aec5cd1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aec5cd1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aeca5b394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aeca5bc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aeca5a4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aeca5cefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3dc92d6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aec3ef343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0x2e,0x30, Step #5: X.0 Step #5: artifact_prefix='./'; Test unit written to ./oom-9b6ecad0d0a509e733ed88ac6b5542ca2b3bcb2d Step #5: Base64: WC4w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 385 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3834020210 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559cd04c4d60, 0x559cd06ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559cd06ad720,0x559cd25372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9b6ecad0d0a509e733ed88ac6b5542ca2b3bcb2d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 409 processed earlier; will process 10567 files now Step #5: ==13894== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559cc70072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559ccd642728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559ccd62546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559ccd62538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559cc700d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559cc6f6e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559cc6f68c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559cc6fff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559cca02e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559cca02e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559cca02e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559cca02e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559cca02e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559cca02e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559cca02e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559cca02e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559cca02e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559cca02e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559ccc23345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559cc8f8f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559cc8f9a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559cc8d45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559cc8d45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559cc8d46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559cc8d45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559cc8d45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559cc8d45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559ccd62794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559ccd6307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559ccd618529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559ccd642fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f876316a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559cc6f6743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45,0x47,0x45, Step #5: EGE Step #5: artifact_prefix='./'; Test unit written to ./oom-97910b40b1de171d3046635733e723344ff45f26 Step #5: Base64: RUdF Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 386 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3834460361 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55728a40cd60, 0x55728a5f571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55728a5f5720,0x55728c47f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/97910b40b1de171d3046635733e723344ff45f26' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 410 processed earlier; will process 10566 files now Step #5: ==13930== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557280f4f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55728758a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55728756d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55728756d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557280f55652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557280eb642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557280eb0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557280f47595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557283f768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557283f768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557283f768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557283f768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557283f768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557283f768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557283f768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557283f768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557283f768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557283f768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55728617b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557282ed7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557282ee25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557282c8dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557282c8dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557282c8e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557282c8d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557282c8d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557282c8d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55728756f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5572875787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557287560529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55728758afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f103a6e9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557280eaf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0xfe,0x5d, Step #5: d\376] Step #5: artifact_prefix='./'; Test unit written to ./oom-3a16c349e939e0a5c4cbcd03375ca0b6d9bc810d Step #5: Base64: ZP5d Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 387 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3834901468 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d4ea027d60, 0x55d4ea21071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d4ea210720,0x55d4ec09a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a16c349e939e0a5c4cbcd03375ca0b6d9bc810d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 411 processed earlier; will process 10565 files now Step #5: ==13966== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4e0b6a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d4e71a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d4e718846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d4e718838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4e0b70652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d4e0ad142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d4e0acbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4e0b62595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4e3b918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4e3b918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4e3b918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4e3b918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4e3b918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4e3b918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4e3b918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4e3b918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4e3b918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4e3b918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d4e5d9645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d4e2af2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4e2afd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d4e28a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d4e28a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d4e28a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d4e28a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d4e28a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d4e28a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d4e718a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d4e71937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d4e717b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d4e71a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb6320af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d4e0aca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0x80, Step #5: \357\273\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-c00df26e311a87642de8d49e02931e8ba4580709 Step #5: Base64: 77uA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 388 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3835332833 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e10cdf1d60, 0x55e10cfda71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e10cfda720,0x55e10ee642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c00df26e311a87642de8d49e02931e8ba4580709' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 412 processed earlier; will process 10564 files now Step #5: ==14002== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1039342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e109f6f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e109f5246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e109f5238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e10393a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e10389b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e103895c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e10392c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e10695b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e10695b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e10695b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e10695b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e10695b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e10695b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e10695b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e10695b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e10695b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e10695b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e108b6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1058bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1058c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e105672d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e105672d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e105673808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e105672944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e105672944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e105672944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e109f5494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e109f5d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e109f45529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e109f6ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd378137082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e10389443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f,0xa, Step #5: //\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-8d06436c33a3086259f2f1ccaf03425707eeff17 Step #5: Base64: Ly8K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 389 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3835760155 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f0a1e9dd60, 0x55f0a208671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f0a2086720,0x55f0a3f102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d06436c33a3086259f2f1ccaf03425707eeff17' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 413 processed earlier; will process 10563 files now Step #5: ==14038== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f0989e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f09f01b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f09effe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f09effe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f0989e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f09894742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f098941c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f0989d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f09ba078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f09ba078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f09ba078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f09ba078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f09ba078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f09ba078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f09ba078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f09ba078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f09ba078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f09ba078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f09dc0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f09a968578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f09a9735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f09a71ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f09a71ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f09a71f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f09a71e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f09a71e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f09a71e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f09f00094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f09f0097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f09eff1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f09f01bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbad76f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f09894043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x37,0x1a, Step #5: P7\032 Step #5: artifact_prefix='./'; Test unit written to ./oom-fae8698977ae2cf90202b89716cea7cea8fb2d32 Step #5: Base64: UDca Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 390 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3836197223 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b04906cd60, 0x55b04925571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b049255720,0x55b04b0df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fae8698977ae2cf90202b89716cea7cea8fb2d32' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 414 processed earlier; will process 10562 files now Step #5: ==14074== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b03fbaf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b0461ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b0461cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b0461cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b03fbb5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b03fb1642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b03fb10c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b03fba7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b042bd68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b042bd68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b042bd68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b042bd68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b042bd68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b042bd68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b042bd68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b042bd68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b042bd68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b042bd68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b044ddb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b041b37578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b041b425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b0418edd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b0418edd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b0418ee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b0418ed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b0418ed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b0418ed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b0461cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b0461d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b0461c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b0461eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8931d05082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b03fb0f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x2d,0x2d,0x7d, Step #5: 2--} Step #5: artifact_prefix='./'; Test unit written to ./oom-a57ce1de3d731a3cd7b4609743763eb4b7631062 Step #5: Base64: Mi0tfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 391 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3836635018 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c6d1abed60, 0x55c6d1ca771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c6d1ca7720,0x55c6d3b312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a57ce1de3d731a3cd7b4609743763eb4b7631062' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 415 processed earlier; will process 10561 files now Step #5: ==14110== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c6c86012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c6cec3c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c6cec1f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c6cec1f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c6c8607652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c6c856842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c6c8562c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c6c85f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c6cb6288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c6cb6288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c6cb6288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c6cb6288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c6cb6288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c6cb6288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c6cb6288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c6cb6288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c6cb6288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c6cb6288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c6cd82d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c6ca589578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c6ca5945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c6ca33fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c6ca33fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c6ca340808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c6ca33f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c6ca33f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c6ca33f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c6cec2194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c6cec2a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c6cec12529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c6cec3cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc488f58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c6c856143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x4c,0x20,0x7, Step #5: -L \007 Step #5: artifact_prefix='./'; Test unit written to ./oom-56c57ab2874d46cc1bb8c82048d2b6dd23c3b697 Step #5: Base64: LUwgBw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 392 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3837067288 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f8ccb51d60, 0x55f8ccd3a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f8ccd3a720,0x55f8cebc42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56c57ab2874d46cc1bb8c82048d2b6dd23c3b697' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 416 processed earlier; will process 10560 files now Step #5: ==14146== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f8c36942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f8c9ccf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f8c9cb246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f8c9cb238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f8c369a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f8c35fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f8c35f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f8c368c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f8c66bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f8c66bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f8c66bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f8c66bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f8c66bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f8c66bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f8c66bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f8c66bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f8c66bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f8c66bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f8c88c045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f8c561c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f8c56275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f8c53d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f8c53d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f8c53d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f8c53d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f8c53d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f8c53d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f8c9cb494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f8c9cbd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f8c9ca5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f8c9ccffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f76bce77082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f8c35f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0x7e, Step #5: \012\012\012~ Step #5: artifact_prefix='./'; Test unit written to ./oom-1d8e8fae5586ac9d176ba9da6e2ad6d7ac21a13a Step #5: Base64: CgoKfg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 393 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3837507349 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d013f09d60, 0x55d0140f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d0140f2720,0x55d015f7c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1d8e8fae5586ac9d176ba9da6e2ad6d7ac21a13a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 417 processed earlier; will process 10559 files now Step #5: ==14182== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d00aa4c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d011087728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d01106a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d01106a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d00aa52652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d00a9b342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d00a9adc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d00aa44595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d00da738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d00da738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d00da738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d00da738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d00da738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d00da738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d00da738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d00da738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d00da738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d00da738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d00fc7845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d00c9d4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d00c9df5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d00c78ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d00c78ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d00c78b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d00c78a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d00c78a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d00c78a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d01106c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d0110757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d01105d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d011087fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb71e77f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d00a9ac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf2,0xbe,0xa4,0x80, Step #5: \362\276\244\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-4cbf435b85519599cd17d260a78e74502cab443f Step #5: Base64: 8r6kgA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 394 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3837943321 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fff6a65d60, 0x55fff6c4e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fff6c4e720,0x55fff8ad82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4cbf435b85519599cd17d260a78e74502cab443f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 418 processed earlier; will process 10558 files now Step #5: #1 pulse cov: 3471 ft: 3472 exec/s: 0 rss: 154Mb Step #5: ==14218== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ffed5a82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fff3be3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fff3bc646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fff3bc638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ffed5ae652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ffed50f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ffed509c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ffed5a0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fff05cf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fff05cf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fff05cf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fff05cf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fff05cf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fff05cf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fff05cf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fff05cf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fff05cf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fff05cf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fff27d445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ffef530578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ffef53b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ffef2e6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ffef2e6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ffef2e7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ffef2e6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ffef2e6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ffef2e6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fff3bc894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fff3bd17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fff3bb9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fff3be3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3bfc647082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ffed50843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0x82,0x5b, Step #5: \342\200\202[ Step #5: artifact_prefix='./'; Test unit written to ./oom-a32576da59d087d50a53e9d68ca51efae7add6d4 Step #5: Base64: 4oCCWw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 395 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3838426001 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c86ec7d60, 0x557c870b071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c870b0720,0x557c88f3a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a32576da59d087d50a53e9d68ca51efae7add6d4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 420 processed earlier; will process 10556 files now Step #5: #1 pulse cov: 3392 ft: 3393 exec/s: 0 rss: 156Mb Step #5: ==14254== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c7da0a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c84045728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c8402846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c8402838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c7da10652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c7d97142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c7d96bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c7da02595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c80a318c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c80a318c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c80a318c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c80a318c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c80a318c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c80a318c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c80a318c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c80a318c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c80a318c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c80a318c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c82c3645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c7f992578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c7f99d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c7f748d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c7f748d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c7f749808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c7f748944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c7f748944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c7f748944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c8402a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c840337b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c8401b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c84045fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5d46362082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c7d96a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x85,0xb6,0x99, Step #5: \364\205\266\231 Step #5: artifact_prefix='./'; Test unit written to ./oom-b3a58ecb90ec107c1278cfcac638354ff0da3172 Step #5: Base64: 9IW2mQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 396 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3838910161 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a2e585cd60, 0x55a2e5a4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a2e5a45720,0x55a2e78cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b3a58ecb90ec107c1278cfcac638354ff0da3172' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 422 processed earlier; will process 10554 files now Step #5: #1 pulse cov: 6484 ft: 6485 exec/s: 0 rss: 166Mb Step #5: ==14290== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a2dc39f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a2e29da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a2e29bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a2e29bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a2dc3a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a2dc30642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a2dc300c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a2dc397595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a2df3c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a2df3c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a2df3c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a2df3c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a2df3c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a2df3c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a2df3c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a2df3c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a2df3c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a2df3c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a2e15cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a2de327578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a2de3325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a2de0ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a2de0ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a2de0de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a2de0dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a2de0dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a2de0dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a2e29bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2e29c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a2e29b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a2e29dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff1c9292082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a2dc2ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x36,0x33,0x2c, Step #5: -63, Step #5: artifact_prefix='./'; Test unit written to ./oom-de861fcca853207e1af8f257718e243e224ed0c2 Step #5: Base64: LTYzLA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 397 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3839398875 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5568fd8bed60, 0x5568fdaa771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5568fdaa7720,0x5568ff9312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/de861fcca853207e1af8f257718e243e224ed0c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 424 processed earlier; will process 10552 files now Step #5: ==14326== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5568f44012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5568faa3c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5568faa1f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5568faa1f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5568f4407652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5568f436842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5568f4362c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5568f43f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5568f74288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5568f74288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5568f74288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5568f74288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5568f74288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5568f74288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5568f74288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5568f74288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5568f74288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5568f74288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5568f962d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5568f6389578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5568f63945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568f613fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568f613fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568f6140808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568f613f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568f613f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568f613f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5568faa2194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5568faa2a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5568faa12529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5568faa3cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff304e1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5568f436143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x40,0x40,0xc, Step #5: \001@@\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-0f54e37d91b957a4bfd13f03fea70dade3e2f4ec Step #5: Base64: AUBADA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 398 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3839839773 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad57cb0d60, 0x55ad57e9971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad57e99720,0x55ad59d232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f54e37d91b957a4bfd13f03fea70dade3e2f4ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 425 processed earlier; will process 10551 files now Step #5: ==14362== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad4e7f32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad54e2e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad54e1146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad54e1138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad4e7f9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad4e75a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad4e754c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad4e7eb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad5181a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad5181a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad5181a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad5181a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad5181a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad5181a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad5181a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad5181a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad5181a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad5181a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad53a1f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad5077b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad507865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad50531d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad50531d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad50532808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad50531944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad50531944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad50531944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad54e1394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad54e1c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad54e04529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad54e2efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7eff9a07e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad4e75343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xb0,0x80,0x80, Step #5: \363\260\200\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-7a15e3c35643ec9ce81f0d068c0058ed00fe6913 Step #5: Base64: 87CAgA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 399 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3840272290 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c7375bad60, 0x55c7377a371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c7377a3720,0x55c73962d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7a15e3c35643ec9ce81f0d068c0058ed00fe6913' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 426 processed earlier; will process 10550 files now Step #5: ==14398== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c72e0fd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c734738728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c73471b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c73471b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c72e103652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c72e06442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c72e05ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c72e0f5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c7311248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c7311248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c7311248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c7311248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c7311248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c7311248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c7311248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c7311248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c7311248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c7311248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c73332945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c730085578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c7300905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c72fe3bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c72fe3bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c72fe3c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c72fe3b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c72fe3b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c72fe3b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c73471d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c7347267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c73470e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c734738fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff309258082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c72e05d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0xa0,0xa0, Step #5: \363\240\240\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-ee9cd179e8989ae0c200f44fd8a1d7e590f73e22 Step #5: Base64: 86CgoA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 400 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3840713914 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555fbbe7ad60, 0x555fbc06371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555fbc063720,0x555fbdeed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee9cd179e8989ae0c200f44fd8a1d7e590f73e22' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 427 processed earlier; will process 10549 files now Step #5: ==14434== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555fb29bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555fb8ff8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555fb8fdb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555fb8fdb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555fb29c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555fb292442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555fb291ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555fb29b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555fb59e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555fb59e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555fb59e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555fb59e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555fb59e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555fb59e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555fb59e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555fb59e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555fb59e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555fb59e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555fb7be945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555fb4945578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555fb49505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555fb46fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555fb46fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555fb46fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555fb46fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555fb46fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555fb46fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555fb8fdd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555fb8fe67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555fb8fce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555fb8ff8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b6b628082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555fb291d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x61,0x20,0x61, Step #5: aa a Step #5: artifact_prefix='./'; Test unit written to ./oom-4d1ab24e80e3f380a70b081bd4c33e6d83a2d340 Step #5: Base64: YWEgYQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 401 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3841151304 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5604dae90d60, 0x5604db07971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5604db079720,0x5604dcf032c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4d1ab24e80e3f380a70b081bd4c33e6d83a2d340' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 428 processed earlier; will process 10548 files now Step #5: ==14470== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5604d19d32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5604d800e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5604d7ff146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5604d7ff138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5604d19d9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5604d193a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5604d1934c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5604d19cb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604d49fa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604d49fa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604d49fa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604d49fa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604d49fa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604d49fa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604d49fa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604d49fa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604d49fa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604d49fa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5604d6bff45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5604d395b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604d39665a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5604d3711d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5604d3711d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5604d3712808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5604d3711944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5604d3711944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5604d3711944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5604d7ff394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5604d7ffc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5604d7fe4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5604d800efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe490c4b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5604d193343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x4f,0x46,0x27, Step #5: wOF' Step #5: artifact_prefix='./'; Test unit written to ./oom-4924c0796ac01000a615686d6c1f28a6d43c4a74 Step #5: Base64: d09GJw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 402 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3841594838 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a3d1d7d60, 0x556a3d3c071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a3d3c0720,0x556a3f24a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4924c0796ac01000a615686d6c1f28a6d43c4a74' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 429 processed earlier; will process 10547 files now Step #5: ==14506== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a33d1a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a3a355728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a3a33846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a3a33838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a33d20652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a33c8142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a33c7bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a33d12595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a36d418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a36d418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a36d418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a36d418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a36d418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a36d418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a36d418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a36d418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a36d418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a36d418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a38f4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a35ca2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a35cad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a35a58d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a35a58d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a35a59808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a35a58944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a35a58944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a35a58944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a3a33a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a3a3437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a3a32b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a3a355fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ba23c1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a33c7a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0xef,0xbe,0x9e, Step #5: \\\357\276\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-1615b67b46d7a3e955a2e386f2d5bda66e2b1ba0 Step #5: Base64: XO++ng== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 403 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3842034189 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642a2d80d60, 0x5642a2f6971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642a2f69720,0x5642a4df32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1615b67b46d7a3e955a2e386f2d5bda66e2b1ba0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 430 processed earlier; will process 10546 files now Step #5: ==14542== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5642998c32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56429fefe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56429fee146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56429fee138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5642998c9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56429982a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564299824c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5642998bb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56429c8ea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56429c8ea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56429c8ea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56429c8ea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56429c8ea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56429c8ea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56429c8ea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56429c8ea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56429c8ea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56429c8ea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56429eaef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56429b84b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56429b8565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56429b601d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56429b601d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56429b602808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56429b601944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56429b601944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56429b601944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56429fee394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56429feec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56429fed4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56429fefefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdaa49d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56429982343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x57,0x64,0x62,0x78, Step #5: Wdbx Step #5: artifact_prefix='./'; Test unit written to ./oom-75d4638e749c97fa23b04ff21e53172e362826b5 Step #5: Base64: V2RieA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 404 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3842482397 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e661549d60, 0x55e66173271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e661732720,0x55e6635bc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/75d4638e749c97fa23b04ff21e53172e362826b5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 431 processed earlier; will process 10545 files now Step #5: ==14578== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e65808c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e65e6c7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e65e6aa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e65e6aa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e658092652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e657ff342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e657fedc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e658084595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e65b0b38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e65b0b38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e65b0b38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e65b0b38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e65b0b38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e65b0b38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e65b0b38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e65b0b38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e65b0b38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e65b0b38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e65d2b845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e65a014578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e65a01f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e659dcad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e659dcad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e659dcb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e659dca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e659dca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e659dca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e65e6ac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e65e6b57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e65e69d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e65e6c7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f03696082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e657fec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0xe0,0xbc,0xb9, Step #5: t\340\274\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-89f1e42e468794dbd1eced25970f6676491cab7a Step #5: Base64: dOC8uQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 405 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3842920977 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562cb30c2d60, 0x562cb32ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562cb32ab720,0x562cb51352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/89f1e42e468794dbd1eced25970f6676491cab7a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 432 processed earlier; will process 10544 files now Step #5: ==14614== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ca9c052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562cb0240728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562cb022346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562cb022338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ca9c0b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ca9b6c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ca9b66c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ca9bfd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562cacc2c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562cacc2c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562cacc2c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562cacc2c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562cacc2c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562cacc2c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562cacc2c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562cacc2c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562cacc2c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562cacc2c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562caee3145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562cabb8d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562cabb985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562cab943d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562cab943d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562cab944808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562cab943944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562cab943944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562cab943944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562cb022594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562cb022e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562cb0216529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562cb0240fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f70ce049082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ca9b6543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x20,0x23,0x76, Step #5: % #v Step #5: artifact_prefix='./'; Test unit written to ./oom-fdc0b7620d414f65b60f204994a8b508f5da486b Step #5: Base64: JSAjdg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 406 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3843367188 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b29617bd60, 0x55b29636471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b296364720,0x55b2981ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fdc0b7620d414f65b60f204994a8b508f5da486b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 433 processed earlier; will process 10543 files now Step #5: #1 pulse cov: 3541 ft: 3542 exec/s: 0 rss: 155Mb Step #5: ==14650== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b28ccbe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b2932f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b2932dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b2932dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b28ccc4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b28cc2542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b28cc1fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b28ccb6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b28fce58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b28fce58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b28fce58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b28fce58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b28fce58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b28fce58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b28fce58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b28fce58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b28fce58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b28fce58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b291eea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b28ec46578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b28ec515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b28e9fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b28e9fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b28e9fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b28e9fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b28e9fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b28e9fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b2932de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b2932e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b2932cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b2932f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8e1f830082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b28cc1e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1e,0x1e,0x13,0x16, Step #5: \036\036\023\026 Step #5: artifact_prefix='./'; Test unit written to ./oom-d1ca276da1d55400a71a49d34ae907cc84db8b7a Step #5: Base64: Hh4TFg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 407 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3843850803 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cc093cbd60, 0x55cc095b471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cc095b4720,0x55cc0b43e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d1ca276da1d55400a71a49d34ae907cc84db8b7a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 435 processed earlier; will process 10541 files now Step #5: ==14686== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cbfff0e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cc06549728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cc0652c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cc0652c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cbfff14652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cbffe7542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cbffe6fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cbfff06595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cc02f358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cc02f358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cc02f358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cc02f358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cc02f358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cc02f358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cc02f358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cc02f358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cc02f358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cc02f358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cc0513a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cc01e96578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cc01ea15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cc01c4cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cc01c4cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cc01c4d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cc01c4c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cc01c4c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cc01c4c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cc0652e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cc065377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cc0651f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cc06549fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa8b5c2c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cbffe6e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x4d,0x61,0x6e, Step #5: AMan Step #5: artifact_prefix='./'; Test unit written to ./oom-4d504af3fb04ae90539fa2be2b87309e6aa8423f Step #5: Base64: QU1hbg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 408 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3844289752 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5568a7eaad60, 0x5568a809371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5568a8093720,0x5568a9f1d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4d504af3fb04ae90539fa2be2b87309e6aa8423f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 436 processed earlier; will process 10540 files now Step #5: ==14722== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55689e9ed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5568a5028728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5568a500b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5568a500b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55689e9f3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55689e95442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55689e94ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55689e9e5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5568a1a148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5568a1a148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5568a1a148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5568a1a148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5568a1a148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5568a1a148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5568a1a148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5568a1a148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5568a1a148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5568a1a148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5568a3c1945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5568a0975578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5568a09805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568a072bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568a072bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568a072c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568a072b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568a072b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568a072b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5568a500d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5568a50167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5568a4ffe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5568a5028fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9ee251e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55689e94d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x33,0x30,0xe, Step #5: 330\016 Step #5: artifact_prefix='./'; Test unit written to ./oom-d62f249e21508db51095ba19a4e3b305edf56009 Step #5: Base64: MzMwDg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 409 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3844739113 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a81b46ed60, 0x55a81b65771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a81b657720,0x55a81d4e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d62f249e21508db51095ba19a4e3b305edf56009' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 437 processed earlier; will process 10539 files now Step #5: #1 pulse cov: 3466 ft: 3467 exec/s: 0 rss: 154Mb Step #5: ==14758== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a811fb12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8185ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8185cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8185cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a811fb7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a811f1842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a811f12c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a811fa9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a814fd88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a814fd88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a814fd88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a814fd88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a814fd88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a814fd88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a814fd88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a814fd88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a814fd88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a814fd88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8171dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a813f39578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a813f445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a813cefd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a813cefd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a813cf0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a813cef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a813cef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a813cef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8185d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8185da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8185c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8185ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f49a4476082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a811f1143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xb0,0x80,0x99, Step #5: \360\260\200\231 Step #5: artifact_prefix='./'; Test unit written to ./oom-c39949c5b286c884b0013de0db81f3f19bb5831b Step #5: Base64: 8LCAmQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 410 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3845217605 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bd28e51d60, 0x55bd2903a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bd2903a720,0x55bd2aec42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c39949c5b286c884b0013de0db81f3f19bb5831b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 439 processed earlier; will process 10537 files now Step #5: ==14794== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bd1f9942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bd25fcf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bd25fb246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bd25fb238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bd1f99a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bd1f8fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bd1f8f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bd1f98c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bd229bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bd229bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bd229bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bd229bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bd229bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bd229bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bd229bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bd229bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bd229bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bd229bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bd24bc045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bd2191c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bd219275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bd216d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bd216d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bd216d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bd216d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bd216d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bd216d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bd25fb494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bd25fbd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bd25fa5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bd25fcffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5c3159f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bd1f8f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5b,0x3a,0x64, Step #5: [[:d Step #5: artifact_prefix='./'; Test unit written to ./oom-e552506791f764731ddfa8300f971b8987c67f0c Step #5: Base64: W1s6ZA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 411 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3845654590 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fd36718d60, 0x55fd3690171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fd36901720,0x55fd3878b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e552506791f764731ddfa8300f971b8987c67f0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 440 processed earlier; will process 10536 files now Step #5: ==14830== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd2d25b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fd33896728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fd3387946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fd3387938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd2d261652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd2d1c242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd2d1bcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd2d253595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fd302828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fd302828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fd302828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fd302828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fd302828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fd302828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fd302828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fd302828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fd302828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fd302828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fd3248745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fd2f1e3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fd2f1ee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fd2ef99d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fd2ef99d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fd2ef9a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fd2ef99944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fd2ef99944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fd2ef99944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fd3387b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fd338847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fd3386c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fd33896fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6131254082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd2d1bb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x28,0x28,0x28, Step #5: (((( Step #5: artifact_prefix='./'; Test unit written to ./oom-7e80c5307b5b65c62ce8f97509a3588eaf0ad162 Step #5: Base64: KCgoKA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 412 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3846094792 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5595b4c25d60, 0x5595b4e0e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5595b4e0e720,0x5595b6c982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7e80c5307b5b65c62ce8f97509a3588eaf0ad162' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 441 processed earlier; will process 10535 files now Step #5: ==14866== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5595ab7682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5595b1da3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5595b1d8646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5595b1d8638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5595ab76e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5595ab6cf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5595ab6c9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5595ab760595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5595ae78f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5595ae78f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5595ae78f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5595ae78f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5595ae78f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5595ae78f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5595ae78f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5595ae78f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5595ae78f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5595ae78f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5595b099445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5595ad6f0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5595ad6fb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5595ad4a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5595ad4a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5595ad4a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5595ad4a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5595ad4a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5595ad4a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5595b1d8894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5595b1d917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5595b1d79529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5595b1da3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3e8273c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5595ab6c843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xc,0xc,0xa, Step #5: -\014\014\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-88f4dccc35ea447adee5c7772e05d998a0e01322 Step #5: Base64: LQwMCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 413 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3846538789 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56509b90cd60, 0x56509baf571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56509baf5720,0x56509d97f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/88f4dccc35ea447adee5c7772e05d998a0e01322' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 442 processed earlier; will process 10534 files now Step #5: ==14902== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56509244f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565098a8a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x565098a6d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x565098a6d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565092455652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5650923b642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5650923b0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565092447595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5650954768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5650954768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5650954768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5650954768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5650954768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5650954768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5650954768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5650954768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5650954768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5650954768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56509767b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5650943d7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5650943e25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56509418dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56509418dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56509418e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56509418d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56509418d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56509418d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x565098a6f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x565098a787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565098a60529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565098a8afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f83812f3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5650923af43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x33,0x30,0x39, Step #5: \000309 Step #5: artifact_prefix='./'; Test unit written to ./oom-a757edf400abbbc48b8666eb0e74611fa5313a79 Step #5: Base64: ADMwOQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 414 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3846984010 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e7542ad60, 0x559e7561371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e75613720,0x559e7749d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a757edf400abbbc48b8666eb0e74611fa5313a79' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 443 processed earlier; will process 10533 files now Step #5: ==14938== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e6bf6d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e725a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e7258b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e7258b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e6bf73652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e6bed442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e6becec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e6bf65595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e6ef948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e6ef948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e6ef948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e6ef948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e6ef948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e6ef948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e6ef948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e6ef948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e6ef948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e6ef948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e7119945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e6def5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e6df005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e6dcabd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e6dcabd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e6dcac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e6dcab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e6dcab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e6dcab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e7258d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e725967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e7257e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e725a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2c314a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e6becd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd7,0xab,0xd7,0xaf, Step #5: \327\253\327\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-2630ee1a131ef00eab890d5c3b72577324ef2a06 Step #5: Base64: 16vXrw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 415 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3847427582 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563638dd1d60, 0x563638fba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563638fba720,0x56363ae442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2630ee1a131ef00eab890d5c3b72577324ef2a06' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 444 processed earlier; will process 10532 files now Step #5: ==14974== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56362f9142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563635f4f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563635f3246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563635f3238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56362f91a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56362f87b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56362f875c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56362f90c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56363293b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56363293b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56363293b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56363293b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56363293b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56363293b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56363293b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56363293b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56363293b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56363293b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563634b4045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56363189c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5636318a75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563631652d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563631652d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563631653808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563631652944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563631652944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563631652944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563635f3494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563635f3d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563635f25529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563635f4ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb9420a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56362f87443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x3b,0x32,0x2f, Step #5: /;2/ Step #5: artifact_prefix='./'; Test unit written to ./oom-decf69c5ec68e91525975c595cd49cbe266e70b2 Step #5: Base64: LzsyLw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 416 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3847870437 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e7c31bad60, 0x55e7c33a371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e7c33a3720,0x55e7c522d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/decf69c5ec68e91525975c595cd49cbe266e70b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 445 processed earlier; will process 10531 files now Step #5: ==15010== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e7b9cfd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e7c0338728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e7c031b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e7c031b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e7b9d03652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e7b9c6442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e7b9c5ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e7b9cf5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e7bcd248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e7bcd248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e7bcd248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e7bcd248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e7bcd248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e7bcd248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e7bcd248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e7bcd248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e7bcd248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e7bcd248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e7bef2945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e7bbc85578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e7bbc905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e7bba3bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e7bba3bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e7bba3c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e7bba3b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e7bba3b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e7bba3b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e7c031d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e7c03267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e7c030e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e7c0338fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb559be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e7b9c5d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x41,0x41,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-62accfe90d43b78d653d62d6160b8dc494d5ac92 Step #5: Base64: PEFBPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 417 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3848297892 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad384c8d60, 0x55ad386b171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad386b1720,0x55ad3a53b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/62accfe90d43b78d653d62d6160b8dc494d5ac92' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 446 processed earlier; will process 10530 files now Step #5: ==15046== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad2f00b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad35646728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad3562946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad3562938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad2f011652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad2ef7242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad2ef6cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad2f003595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad320328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad320328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad320328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad320328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad320328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad320328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad320328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad320328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad320328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad320328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad3423745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad30f93578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad30f9e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad30d49d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad30d49d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad30d4a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad30d49944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad30d49944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad30d49944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad3562b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad356347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad3561c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad35646fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f58462e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad2ef6b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7a,0x6f,0x6e,0x65, Step #5: zone Step #5: artifact_prefix='./'; Test unit written to ./oom-b6931b00fd5c406edb24c0ed02274408e63555a0 Step #5: Base64: em9uZQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 418 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3848734450 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b44e315d60, 0x55b44e4fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b44e4fe720,0x55b4503882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6931b00fd5c406edb24c0ed02274408e63555a0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 447 processed earlier; will process 10529 files now Step #5: ==15082== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b444e582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b44b493728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b44b47646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b44b47638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b444e5e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b444dbf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b444db9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b444e50595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b447e7f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b447e7f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b447e7f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b447e7f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b447e7f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b447e7f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b447e7f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b447e7f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b447e7f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b447e7f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b44a08445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b446de0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b446deb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b446b96d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b446b96d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b446b97808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b446b96944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b446b96944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b446b96944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b44b47894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b44b4817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b44b469529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b44b493fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1a21598082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b444db843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x64,0x62,0x6b, Step #5: ddbk Step #5: artifact_prefix='./'; Test unit written to ./oom-1e7b7ea4cd8647d1c05ff8a433c68eb6856b1583 Step #5: Base64: ZGRiaw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 419 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3849175200 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8f5142d60, 0x55a8f532b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a8f532b720,0x55a8f71b52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1e7b7ea4cd8647d1c05ff8a433c68eb6856b1583' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 448 processed earlier; will process 10528 files now Step #5: ==15118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8ebc852d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8f22c0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8f22a346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8f22a338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8ebc8b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a8ebbec42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a8ebbe6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8ebc7d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8eecac8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8eecac8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8eecac8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8eecac8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8eecac8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8eecac8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8eecac8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8eecac8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8eecac8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8eecac8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8f0eb145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8edc0d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8edc185a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a8ed9c3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a8ed9c3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a8ed9c4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a8ed9c3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a8ed9c3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a8ed9c3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8f22a594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8f22ae7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8f2296529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8f22c0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f30ab970082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a8ebbe543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x3a,0x23,0x68, Step #5: i:#h Step #5: artifact_prefix='./'; Test unit written to ./oom-44eca241f94cfe0bf57d4b5ed36b0cb7ef0be2b0 Step #5: Base64: aTojaA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 420 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3849616299 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a95f40bd60, 0x55a95f5f471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a95f5f4720,0x55a96147e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/44eca241f94cfe0bf57d4b5ed36b0cb7ef0be2b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 449 processed earlier; will process 10527 files now Step #5: #1 pulse cov: 3590 ft: 3591 exec/s: 0 rss: 154Mb Step #5: ==15154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a955f4e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a95c589728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a95c56c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a95c56c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a955f54652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a955eb542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a955eafc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a955f46595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a958f758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a958f758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a958f758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a958f758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a958f758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a958f758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a958f758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a958f758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a958f758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a958f758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a95b17a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a957ed6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a957ee15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a957c8cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a957c8cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a957c8d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a957c8c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a957c8c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a957c8c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a95c56e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a95c5777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a95c55f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a95c589fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7184e9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a955eae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x25,0x25,0x7c, Step #5: %%%| Step #5: artifact_prefix='./'; Test unit written to ./oom-d0bc5b0d6ac453b5b09428366b890674e7537d71 Step #5: Base64: JSUlfA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 421 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3850098542 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bd5ca84d60, 0x55bd5cc6d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bd5cc6d720,0x55bd5eaf72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d0bc5b0d6ac453b5b09428366b890674e7537d71' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 451 processed earlier; will process 10525 files now Step #5: ==15190== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bd535c72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bd59c02728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bd59be546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bd59be538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bd535cd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bd5352e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bd53528c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bd535bf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bd565ee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bd565ee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bd565ee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bd565ee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bd565ee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bd565ee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bd565ee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bd565ee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bd565ee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bd565ee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bd587f345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bd5554f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bd5555a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bd55305d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bd55305d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bd55306808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bd55305944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bd55305944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bd55305944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bd59be794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bd59bf07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bd59bd8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bd59c02fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd282760082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bd5352743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0xcf,0xbe,0x40, Step #5: .\317\276@ Step #5: artifact_prefix='./'; Test unit written to ./oom-73acf5ec2d6869a9736cfd4821036a5138d87bc1 Step #5: Base64: Ls++QA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 422 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3850534168 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ea319ed60, 0x558ea338771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ea3387720,0x558ea52112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/73acf5ec2d6869a9736cfd4821036a5138d87bc1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 452 processed earlier; will process 10524 files now Step #5: #1 pulse cov: 3638 ft: 3639 exec/s: 0 rss: 154Mb Step #5: ==15226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558e99ce12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ea031c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ea02ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ea02ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558e99ce7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558e99c4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558e99c42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558e99cd9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558e9cd088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558e9cd088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558e9cd088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558e9cd088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558e9cd088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558e9cd088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558e9cd088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558e9cd088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558e9cd088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558e9cd088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558e9ef0d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558e9bc69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558e9bc745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558e9ba1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558e9ba1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558e9ba20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558e9ba1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558e9ba1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558e9ba1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ea030194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ea030a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ea02f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ea031cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f13c99082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558e99c4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x5c,0x78,0xff, Step #5: '\\x\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-9fccb57d2bd6b6dce397e70756dc9c2d541a2f15 Step #5: Base64: J1x4/w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 423 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3851026704 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5634a08fad60, 0x5634a0ae371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5634a0ae3720,0x5634a296d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9fccb57d2bd6b6dce397e70756dc9c2d541a2f15' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 454 processed earlier; will process 10522 files now Step #5: ==15262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56349743d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56349da78728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56349da5b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56349da5b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563497443652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5634973a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56349739ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563497435595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56349a4648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56349a4648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56349a4648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56349a4648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56349a4648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56349a4648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56349a4648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56349a4648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56349a4648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56349a4648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56349c66945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5634993c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634993d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56349917bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56349917bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56349917c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56349917b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56349917b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56349917b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56349da5d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56349da667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56349da4e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56349da78fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb8c5b73082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56349739d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0xcb,0xab, Step #5: Step #5: Step #5: #0 0x55a14d88c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a153ec7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a153eaa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a153eaa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a14d892652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a14d7f342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a14d7edc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a14d884595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1508b38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1508b38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1508b38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1508b38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1508b38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1508b38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1508b38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1508b38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1508b38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1508b38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a152ab845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a14f814578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a14f81f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a14f5cad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a14f5cad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a14f5cb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a14f5ca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a14f5ca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a14f5ca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a153eac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a153eb57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a153e9d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a153ec7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe62dc16082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a14d7ec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6,0x0,0x7,0x0, Step #5: \006\000\007\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-201a80fb58cdbe7b0210fc5fe4b2868c65dc19fb Step #5: Base64: BgAHAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 425 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3851915574 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562dc63ded60, 0x562dc65c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562dc65c7720,0x562dc84512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/201a80fb58cdbe7b0210fc5fe4b2868c65dc19fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 456 processed earlier; will process 10520 files now Step #5: ==15334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562dbcf212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562dc355c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562dc353f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562dc353f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562dbcf27652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562dbce8842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562dbce82c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562dbcf19595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562dbff488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562dbff488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562dbff488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562dbff488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562dbff488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562dbff488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562dbff488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562dbff488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562dbff488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562dbff488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562dc214d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562dbeea9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562dbeeb45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562dbec5fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562dbec5fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562dbec60808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562dbec5f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562dbec5f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562dbec5f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562dc354194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562dc354a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562dc3532529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562dc355cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c0245f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562dbce8143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xaf,0xa8,0x9d, Step #5: \360\257\250\235 Step #5: artifact_prefix='./'; Test unit written to ./oom-ee61184811f230ab849352e4f21498b907cecd24 Step #5: Base64: 8K+onQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 426 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3852373909 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f78cc35d60, 0x55f78ce1e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f78ce1e720,0x55f78eca82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee61184811f230ab849352e4f21498b907cecd24' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 457 processed earlier; will process 10519 files now Step #5: ==15370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7837782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f789db3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f789d9646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f789d9638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f78377e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7836df42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7836d9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f783770595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f78679f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f78679f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f78679f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f78679f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f78679f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f78679f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f78679f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f78679f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f78679f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f78679f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7889a445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f785700578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f78570b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7854b6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7854b6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7854b7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7854b6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7854b6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7854b6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f789d9894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f789da17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f789d89529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f789db3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdbfdffd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7836d843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0xb,0xb,0xb, Step #5: \013\013\013\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-cafe11f51cfc647005c116e1eb03c0a34abdf5dc Step #5: Base64: CwsLCw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 427 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3852830253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e48ffc3d60, 0x55e4901ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e4901ac720,0x55e4920362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cafe11f51cfc647005c116e1eb03c0a34abdf5dc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 458 processed earlier; will process 10518 files now Step #5: ==15406== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e486b062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e48d141728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e48d12446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e48d12438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e486b0c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e486a6d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e486a67c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e486afe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e489b2d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e489b2d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e489b2d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e489b2d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e489b2d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e489b2d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e489b2d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e489b2d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e489b2d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e489b2d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e48bd3245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e488a8e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e488a995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e488844d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e488844d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e488845808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e488844944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e488844944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e488844944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e48d12694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e48d12f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e48d117529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e48d141fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3e80af4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e486a6643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xbc,0xbf,0xbf, Step #5: \363\274\277\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-a1490e8cf6f13812b5428c9a7ca7c7f3503f6e3f Step #5: Base64: 87y/vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 428 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3853273923 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5641a6214d60, 0x5641a63fd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5641a63fd720,0x5641a82872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a1490e8cf6f13812b5428c9a7ca7c7f3503f6e3f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 459 processed earlier; will process 10517 files now Step #5: ==15442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56419cd572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5641a3392728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5641a337546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5641a337538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56419cd5d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56419ccbe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56419ccb8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56419cd4f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56419fd7e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56419fd7e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56419fd7e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56419fd7e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56419fd7e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56419fd7e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56419fd7e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56419fd7e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56419fd7e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56419fd7e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5641a1f8345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56419ecdf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56419ecea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56419ea95d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56419ea95d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56419ea96808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56419ea95944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56419ea95944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56419ea95944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5641a337794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5641a33807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5641a3368529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5641a3392fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2e0169082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56419ccb743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x27,0x5c,0xf9, Step #5: e'\\\371 Step #5: artifact_prefix='./'; Test unit written to ./oom-92919652ea3c54a2c522c8ed46231c8c838a128f Step #5: Base64: ZSdc+Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 429 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3853719136 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558f70ff4d60, 0x558f711dd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558f711dd720,0x558f730672c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92919652ea3c54a2c522c8ed46231c8c838a128f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 460 processed earlier; will process 10516 files now Step #5: #1 pulse cov: 3430 ft: 3431 exec/s: 0 rss: 155Mb Step #5: ==15478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558f67b372d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558f6e172728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558f6e15546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558f6e15538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558f67b3d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558f67a9e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558f67a98c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558f67b2f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558f6ab5e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558f6ab5e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558f6ab5e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558f6ab5e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558f6ab5e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558f6ab5e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558f6ab5e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558f6ab5e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558f6ab5e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558f6ab5e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558f6cd6345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558f69abf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558f69aca5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558f69875d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558f69875d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558f69876808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558f69875944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558f69875944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558f69875944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558f6e15794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558f6e1607b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558f6e148529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558f6e172fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa96f7af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558f67a9743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x41,0x47,0x59, Step #5: MAGY Step #5: artifact_prefix='./'; Test unit written to ./oom-e643c54bff94a5ea7e563b9fb2b97669810ed4b3 Step #5: Base64: TUFHWQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 430 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3854199776 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db825fbd60, 0x55db827e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db827e4720,0x55db8466e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e643c54bff94a5ea7e563b9fb2b97669810ed4b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 462 processed earlier; will process 10514 files now Step #5: #1 pulse cov: 3603 ft: 3604 exec/s: 0 rss: 154Mb Step #5: ==15514== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55db7913e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db7f779728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db7f75c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db7f75c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55db79144652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55db790a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55db7909fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55db79136595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55db7c1658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55db7c1658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55db7c1658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55db7c1658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55db7c1658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55db7c1658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55db7c1658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55db7c1658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55db7c1658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55db7c1658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db7e36a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55db7b0c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55db7b0d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55db7ae7cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55db7ae7cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55db7ae7d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55db7ae7c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55db7ae7c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55db7ae7c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db7f75e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db7f7677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db7f74f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db7f779fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5805c81082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55db7909e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x61,0x6e,0x4d, Step #5: +anM Step #5: artifact_prefix='./'; Test unit written to ./oom-5ac93ec69712c581fbf5f919f2fecd16d25e3499 Step #5: Base64: K2FuTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 431 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3854683402 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b9499d9d60, 0x55b949bc271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b949bc2720,0x55b94ba4c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ac93ec69712c581fbf5f919f2fecd16d25e3499' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 464 processed earlier; will process 10512 files now Step #5: ==15550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b94051c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b946b57728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b946b3a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b946b3a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b940522652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b94048342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b94047dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b940514595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9435438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9435438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9435438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9435438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9435438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9435438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9435438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9435438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9435438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9435438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b94574845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9424a4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9424af5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b94225ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b94225ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b94225b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b94225a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b94225a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b94225a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b946b3c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b946b457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b946b2d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b946b57fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8a18a9a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b94047c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa1,0x9a,0xbc, Step #5: \363\241\232\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-8db2c477fefc5fe71d34e4997fb98db9315044d1 Step #5: Base64: 86GavA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 432 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3855118532 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ead8bc6d60, 0x55ead8daf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ead8daf720,0x55eadac392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8db2c477fefc5fe71d34e4997fb98db9315044d1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 465 processed earlier; will process 10511 files now Step #5: ==15586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eacf7092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ead5d44728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ead5d2746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ead5d2738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eacf70f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eacf67042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eacf66ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eacf701595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ead27308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ead27308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ead27308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ead27308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ead27308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ead27308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ead27308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ead27308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ead27308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ead27308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ead493545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ead1691578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ead169c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ead1447d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ead1447d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ead1448808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ead1447944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ead1447944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ead1447944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ead5d2994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ead5d327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ead5d1a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ead5d44fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f240860a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eacf66943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0x9,0x9, Step #5: -\012\011\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-10bfb2cd9e9806a4867c9fded2c1c13b8e157ae4 Step #5: Base64: LQoJCQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 433 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3855564309 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f73bccdd60, 0x55f73beb671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f73beb6720,0x55f73dd402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/10bfb2cd9e9806a4867c9fded2c1c13b8e157ae4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 466 processed earlier; will process 10510 files now Step #5: ==15622== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7328102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f738e4b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f738e2e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f738e2e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f732816652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f73277742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f732771c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f732808595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7358378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7358378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7358378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7358378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7358378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7358378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7358378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7358378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7358378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7358378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f737a3c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f734798578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7347a35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f73454ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f73454ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f73454f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f73454e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f73454e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f73454e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f738e3094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f738e397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f738e21529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f738e4bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb565cbe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f73277043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8e,0x87,0x91, Step #5: \364\216\207\221 Step #5: artifact_prefix='./'; Test unit written to ./oom-d3eb8e51a77bcd24266030e1d016bf77fb0763e3 Step #5: Base64: 9I6HkQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 434 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3856002841 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a2e1f05d60, 0x55a2e20ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a2e20ee720,0x55a2e3f782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d3eb8e51a77bcd24266030e1d016bf77fb0763e3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 467 processed earlier; will process 10509 files now Step #5: ==15658== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a2d8a482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a2df083728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a2df06646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a2df06638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a2d8a4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a2d89af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a2d89a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a2d8a40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a2dba6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a2dba6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a2dba6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a2dba6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a2dba6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a2dba6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a2dba6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a2dba6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a2dba6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a2dba6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a2ddc7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a2da9d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a2da9db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a2da786d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a2da786d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a2da787808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a2da786944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a2da786944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a2da786944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a2df06894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2df0717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a2df059529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a2df083fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f273d661082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a2d89a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xca,0x82,0xca,0x82, Step #5: \312\202\312\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-c07b3fc694d3d9a5c9b04eeb2bc11ec3fde09abe Step #5: Base64: yoLKgg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 435 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3856448023 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec8d1f1d60, 0x55ec8d3da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec8d3da720,0x55ec8f2642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c07b3fc694d3d9a5c9b04eeb2bc11ec3fde09abe' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 468 processed earlier; will process 10508 files now Step #5: ==15694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec83d342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec8a36f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec8a35246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec8a35238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec83d3a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec83c9b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec83c95c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec83d2c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec86d5b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec86d5b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec86d5b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec86d5b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec86d5b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec86d5b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec86d5b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec86d5b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec86d5b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec86d5b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec88f6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec85cbc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec85cc75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec85a72d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec85a72d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec85a73808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec85a72944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec85a72944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec85a72944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec8a35494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec8a35d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec8a345529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec8a36ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa9ba909082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec83c9443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0x41,0x45,0x0, Step #5: TAE\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-d3fa89d5a832da0534983b24f65c0fca487bf56f Step #5: Base64: VEFFAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 436 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3856887019 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562d0163fd60, 0x562d0182871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562d01828720,0x562d036b22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d3fa89d5a832da0534983b24f65c0fca487bf56f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 469 processed earlier; will process 10507 files now Step #5: ==15730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562cf81822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562cfe7bd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562cfe7a046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562cfe7a038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562cf8188652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562cf80e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562cf80e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562cf817a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562cfb1a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562cfb1a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562cfb1a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562cfb1a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562cfb1a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562cfb1a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562cfb1a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562cfb1a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562cfb1a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562cfb1a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562cfd3ae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562cfa10a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562cfa1155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562cf9ec0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562cf9ec0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562cf9ec1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562cf9ec0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562cf9ec0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562cf9ec0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562cfe7a294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562cfe7ab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562cfe793529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562cfe7bdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7dd7931082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562cf80e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xef,0xbf,0xbc, Step #5: \000\357\277\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-0fbbd45e251ade9899fe02addbfdb2d039f24a65 Step #5: Base64: AO+/vA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 437 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3857321505 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e79959d60, 0x559e79b4271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e79b42720,0x559e7b9cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0fbbd45e251ade9899fe02addbfdb2d039f24a65' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 470 processed earlier; will process 10506 files now Step #5: #1 pulse cov: 3678 ft: 3679 exec/s: 0 rss: 154Mb Step #5: ==15766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e7049c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e76ad7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e76aba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e76aba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e704a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e7040342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e703fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e70494595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e734c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e734c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e734c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e734c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e734c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e734c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e734c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e734c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e734c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e734c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e756c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e72424578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e7242f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e721dad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e721dad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e721db808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e721da944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e721da944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e721da944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e76abc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e76ac57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e76aad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e76ad7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd978246082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e703fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x91,0x82,0xba, Step #5: \360\221\202\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-a69894eb72202a11a6f8893d092a7beb3aab7baf Step #5: Base64: 8JGCug== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 438 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3857814053 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555e02806d60, 0x555e029ef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555e029ef720,0x555e048792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a69894eb72202a11a6f8893d092a7beb3aab7baf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 472 processed earlier; will process 10504 files now Step #5: ==15802== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555df93492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555dff984728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555dff96746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555dff96738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555df934f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555df92b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555df92aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555df9341595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555dfc3708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555dfc3708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555dfc3708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555dfc3708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555dfc3708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555dfc3708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555dfc3708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555dfc3708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555dfc3708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555dfc3708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555dfe57545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555dfb2d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555dfb2dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555dfb087d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555dfb087d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555dfb088808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555dfb087944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555dfb087944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555dfb087944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555dff96994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555dff9727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555dff95a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555dff984fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8934503082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555df92a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x12,0x0,0x42,0x0, Step #5: \022\000B\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f20bf478f9f4a97eecef94be455464f17c55ea4b Step #5: Base64: EgBCAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 439 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3858254497 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564ed444cd60, 0x564ed463571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564ed4635720,0x564ed64bf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f20bf478f9f4a97eecef94be455464f17c55ea4b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 473 processed earlier; will process 10503 files now Step #5: ==15838== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564ecaf8f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ed15ca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ed15ad46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ed15ad38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564ecaf95652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564ecaef642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564ecaef0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564ecaf87595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564ecdfb68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564ecdfb68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564ecdfb68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564ecdfb68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564ecdfb68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564ecdfb68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564ecdfb68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564ecdfb68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564ecdfb68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564ecdfb68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564ed01bb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564eccf17578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564eccf225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564eccccdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564eccccdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ecccce808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564eccccd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564eccccd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564eccccd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ed15af94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ed15b87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ed15a0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ed15cafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f946027c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564ecaeef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x7a,0x8e,0x2e, Step #5: sz\216. Step #5: artifact_prefix='./'; Test unit written to ./oom-87a0c8114db3fd16f76c9f58ce72e9eaa3373496 Step #5: Base64: c3qOLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 440 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3858695318 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5564b359dd60, 0x5564b378671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5564b3786720,0x5564b56102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87a0c8114db3fd16f76c9f58ce72e9eaa3373496' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 474 processed earlier; will process 10502 files now Step #5: ==15874== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564aa0e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564b071b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564b06fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564b06fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564aa0e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564aa04742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564aa041c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564aa0d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564ad1078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564ad1078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564ad1078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564ad1078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564ad1078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564ad1078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564ad1078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564ad1078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564ad1078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564ad1078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564af30c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5564ac068578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564ac0735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564abe1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564abe1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564abe1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564abe1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564abe1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564abe1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564b070094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564b07097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5564b06f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564b071bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee72703082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564aa04043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0xa, Step #5: \012\012\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-3f3d2d8955322f325af6db2238355fa07007ebd9 Step #5: Base64: CgoKCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 441 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3859123903 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56034a0f5d60, 0x56034a2de71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56034a2de720,0x56034c1682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3f3d2d8955322f325af6db2238355fa07007ebd9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 475 processed earlier; will process 10501 files now Step #5: ==15910== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560340c382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560347273728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56034725646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56034725638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560340c3e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560340b9f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560340b99c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560340c30595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560343c5f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560343c5f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560343c5f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560343c5f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560343c5f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560343c5f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560343c5f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560343c5f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560343c5f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560343c5f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560345e6445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560342bc0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560342bcb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560342976d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560342976d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560342977808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560342976944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560342976944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560342976944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56034725894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5603472617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560347249529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560347273fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0cb6e55082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560340b9843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x92,0x80,0x90, Step #5: \360\222\200\220 Step #5: artifact_prefix='./'; Test unit written to ./oom-9622c07642d04e6afe7bcd149d38b491d1dbc51f Step #5: Base64: 8JKAkA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 442 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3859565391 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625bba22d60, 0x5625bbc0b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625bbc0b720,0x5625bda952c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9622c07642d04e6afe7bcd149d38b491d1dbc51f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 476 processed earlier; will process 10500 files now Step #5: ==15946== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5625b25652d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625b8ba0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625b8b8346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625b8b8338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5625b256b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625b24cc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625b24c6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5625b255d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625b558c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625b558c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625b558c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625b558c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625b558c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625b558c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625b558c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625b558c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625b558c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625b558c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625b779145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5625b44ed578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5625b44f85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5625b42a3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5625b42a3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5625b42a4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5625b42a3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5625b42a3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5625b42a3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625b8b8594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625b8b8e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625b8b76529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625b8ba0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd20cbb6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625b24c543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x24,0x24,0x5b, Step #5: A$$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-a2ad7da1950b5f06d76bb8f8180c383b32e45010 Step #5: Base64: QSQkWw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 443 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3860006130 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55578a3a1d60, 0x55578a58a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55578a58a720,0x55578c4142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2ad7da1950b5f06d76bb8f8180c383b32e45010' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 477 processed earlier; will process 10499 files now Step #5: ==15982== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555780ee42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55578751f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55578750246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55578750238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555780eea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555780e4b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555780e45c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555780edc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555783f0b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555783f0b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555783f0b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555783f0b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555783f0b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555783f0b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555783f0b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555783f0b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555783f0b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555783f0b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55578611045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555782e6c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555782e775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555782c22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555782c22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555782c23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555782c22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555782c22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555782c22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55578750494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55578750d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5557874f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55578751ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fadce82d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555780e4443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x3a,0x3f,0x42, Step #5: x:?B Step #5: artifact_prefix='./'; Test unit written to ./oom-db17cfbc1ac8f4f54ebcbf572da7b2c08cb39f7e Step #5: Base64: eDo/Qg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 444 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3860440290 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eb7af95d60, 0x55eb7b17e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eb7b17e720,0x55eb7d0082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/db17cfbc1ac8f4f54ebcbf572da7b2c08cb39f7e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 478 processed earlier; will process 10498 files now Step #5: ==16018== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eb71ad82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eb78113728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eb780f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eb780f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eb71ade652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eb71a3f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eb71a39c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eb71ad0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eb74aff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eb74aff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eb74aff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eb74aff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eb74aff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eb74aff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eb74aff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eb74aff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eb74aff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eb74aff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eb76d0445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eb73a60578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eb73a6b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eb73816d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eb73816d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eb73817808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eb73816944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eb73816944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eb73816944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eb780f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eb781017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eb780e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eb78113fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fab0429f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eb71a3843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x5f,0x4c,0x52, Step #5: C_LR Step #5: artifact_prefix='./'; Test unit written to ./oom-79801798edbd2125f41d2e2e849df581c37e7d19 Step #5: Base64: Q19MUg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 445 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3860890645 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55903b619d60, 0x55903b80271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55903b802720,0x55903d68c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/79801798edbd2125f41d2e2e849df581c37e7d19' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 479 processed earlier; will process 10497 files now Step #5: ==16054== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55903215c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559038797728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55903877a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55903877a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559032162652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5590320c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5590320bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559032154595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590351838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590351838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590351838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590351838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590351838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590351838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590351838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590351838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590351838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590351838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55903738845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5590340e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5590340ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559033e9ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559033e9ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559033e9b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559033e9a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559033e9a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559033e9a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55903877c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5590387857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55903876d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559038797fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc2b7a8d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5590320bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0xba,0x9a, Step #5: \364\217\272\232 Step #5: artifact_prefix='./'; Test unit written to ./oom-c11f8bf63fa73beb9bb72598d0c918795177c79d Step #5: Base64: 9I+6mg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 446 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3861326728 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560a55eb1d60, 0x560a5609a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560a5609a720,0x560a57f242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c11f8bf63fa73beb9bb72598d0c918795177c79d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 480 processed earlier; will process 10496 files now Step #5: ==16090== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560a4c9f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560a5302f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560a5301246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560a5301238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560a4c9fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560a4c95b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560a4c955c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560a4c9ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560a4fa1b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560a4fa1b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560a4fa1b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560a4fa1b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560a4fa1b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560a4fa1b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560a4fa1b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560a4fa1b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560a4fa1b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560a4fa1b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560a51c2045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560a4e97c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560a4e9875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560a4e732d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560a4e732d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560a4e733808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560a4e732944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560a4e732944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560a4e732944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560a5301494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560a5301d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560a53005529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560a5302ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c821d5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560a4c95443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x4,0x5c,0x4, Step #5: \\\004\\\004 Step #5: artifact_prefix='./'; Test unit written to ./oom-008036300ee207c7d12970ef54ed1a7b87be39f4 Step #5: Base64: XARcBA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 447 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3861770248 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad4fd18d60, 0x55ad4ff0171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad4ff01720,0x55ad51d8b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/008036300ee207c7d12970ef54ed1a7b87be39f4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 481 processed earlier; will process 10495 files now Step #5: ==16126== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad4685b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad4ce96728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad4ce7946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad4ce7938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad46861652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad467c242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad467bcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad46853595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad498828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad498828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad498828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad498828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad498828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad498828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad498828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad498828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad498828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad498828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad4ba8745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad487e3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad487ee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad48599d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad48599d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad4859a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad48599944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad48599944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad48599944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad4ce7b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad4ce847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad4ce6c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad4ce96fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efcd1858082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad467bb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40,0xa,0x3d,0x3d, Step #5: @\012== Step #5: artifact_prefix='./'; Test unit written to ./oom-1b391dc7d837273701e4ac0eb8b59aea6db25b3d Step #5: Base64: QAo9PQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 448 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3862226787 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562bdb2c8d60, 0x562bdb4b171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562bdb4b1720,0x562bdd33b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1b391dc7d837273701e4ac0eb8b59aea6db25b3d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 482 processed earlier; will process 10494 files now Step #5: ==16162== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562bd1e0b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562bd8446728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562bd842946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562bd842938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562bd1e11652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562bd1d7242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562bd1d6cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562bd1e03595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562bd4e328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562bd4e328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562bd4e328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562bd4e328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562bd4e328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562bd4e328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562bd4e328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562bd4e328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562bd4e328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562bd4e328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562bd703745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562bd3d93578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562bd3d9e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562bd3b49d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562bd3b49d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562bd3b4a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562bd3b49944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562bd3b49944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562bd3b49944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562bd842b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562bd84347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562bd841c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562bd8446fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f8f01e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562bd1d6b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x41,0x3e,0xc3, Step #5: \303 Step #5: artifact_prefix='./'; Test unit written to ./oom-531ef8da3a6faa2ddd38856cac1ce48812ed0fb3 Step #5: Base64: PEE+ww== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 449 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3862659601 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b3affdd60, 0x557b3b1e671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b3b1e6720,0x557b3d0702c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/531ef8da3a6faa2ddd38856cac1ce48812ed0fb3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 483 processed earlier; will process 10493 files now Step #5: ==16198== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b31b402d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b3817b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b3815e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b3815e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b31b46652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b31aa742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b31aa1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b31b38595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b34b678c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b34b678c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b34b678c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b34b678c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b34b678c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b34b678c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b34b678c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b34b678c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b34b678c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b34b678c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557b36d6c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b33ac8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b33ad35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b3387ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b3387ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b3387f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b3387e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b3387e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b3387e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b3816094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b381697b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b38151529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b3817bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba5e583082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b31aa043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x92,0xad,0xbe, Step #5: \360\222\255\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-5df9427c18a1265d6af52e297945d6b204a7b0fa Step #5: Base64: 8JKtvg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 450 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3863104342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559445e36d60, 0x55944601f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55944601f720,0x559447ea92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5df9427c18a1265d6af52e297945d6b204a7b0fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 484 processed earlier; will process 10492 files now Step #5: ==16234== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55943c9792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559442fb4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559442f9746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559442f9738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55943c97f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55943c8e042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55943c8dac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55943c971595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55943f9a08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55943f9a08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55943f9a08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55943f9a08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55943f9a08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55943f9a08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55943f9a08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55943f9a08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55943f9a08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55943f9a08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559441ba545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55943e901578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55943e90c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55943e6b7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55943e6b7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55943e6b8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55943e6b7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55943e6b7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55943e6b7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559442f9994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559442fa27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559442f8a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559442fb4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4562c57082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55943c8d943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0xc2,0xad,0xad, Step #5: T\302\255\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-9b25bc8e2991ebba4279218b0069a89a43014e93 Step #5: Base64: VMKtrQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 451 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3863547516 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5599c8a9bd60, 0x5599c8c8471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5599c8c84720,0x5599cab0e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9b25bc8e2991ebba4279218b0069a89a43014e93' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 485 processed earlier; will process 10491 files now Step #5: ==16270== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599bf5de2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5599c5c19728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5599c5bfc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5599c5bfc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5599bf5e4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5599bf54542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5599bf53fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5599bf5d6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5599c26058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5599c26058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5599c26058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5599c26058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5599c26058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5599c26058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5599c26058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5599c26058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5599c26058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5599c26058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5599c480a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5599c1566578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599c15715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5599c131cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5599c131cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5599c131d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5599c131c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5599c131c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5599c131c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5599c5bfe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5599c5c077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5599c5bef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5599c5c19fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f420f71d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5599bf53e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x88,0x87,0x91, Step #5: \364\210\207\221 Step #5: artifact_prefix='./'; Test unit written to ./oom-48b16eda096070c548621f01eacc8d2600fd3477 Step #5: Base64: 9IiHkQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 452 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3863990584 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aada443d60, 0x55aada62c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aada62c720,0x55aadc4b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/48b16eda096070c548621f01eacc8d2600fd3477' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 486 processed earlier; will process 10490 files now Step #5: ==16306== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aad0f862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aad75c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aad75a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aad75a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aad0f8c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aad0eed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aad0ee7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aad0f7e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aad3fad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aad3fad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aad3fad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aad3fad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aad3fad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aad3fad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aad3fad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aad3fad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aad3fad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aad3fad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aad61b245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aad2f0e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aad2f195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aad2cc4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aad2cc4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aad2cc5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aad2cc4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aad2cc4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aad2cc4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aad75a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aad75af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aad7597529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aad75c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ee4459082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aad0ee643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x4d,0x4d,0x4d, Step #5: MMMM Step #5: artifact_prefix='./'; Test unit written to ./oom-2f5005d0e6ce2fb551cb5f2bdb9740a5ca7c28db Step #5: Base64: TU1NTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 453 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3864430299 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562fcc1cfd60, 0x562fcc3b871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562fcc3b8720,0x562fce2422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f5005d0e6ce2fb551cb5f2bdb9740a5ca7c28db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 487 processed earlier; will process 10489 files now Step #5: ==16342== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562fc2d122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562fc934d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562fc933046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562fc933038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562fc2d18652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562fc2c7942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562fc2c73c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562fc2d0a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562fc5d398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562fc5d398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562fc5d398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562fc5d398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562fc5d398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562fc5d398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562fc5d398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562fc5d398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562fc5d398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562fc5d398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562fc7f3e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562fc4c9a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562fc4ca55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562fc4a50d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562fc4a50d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562fc4a51808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562fc4a50944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562fc4a50944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562fc4a50944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562fc933294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562fc933b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562fc9323529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562fc934dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffbacd51082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562fc2c7243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x22,0x22,0x22, Step #5: \"\"\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-5e7a76d4a38b352010c4a8c8ad4aa461f6218793 Step #5: Base64: IiIiIg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 454 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3864887314 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558cbf0c6d60, 0x558cbf2af71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558cbf2af720,0x558cc11392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5e7a76d4a38b352010c4a8c8ad4aa461f6218793' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 488 processed earlier; will process 10488 files now Step #5: ==16378== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558cb5c092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558cbc244728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558cbc22746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558cbc22738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558cb5c0f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558cb5b7042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558cb5b6ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558cb5c01595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558cb8c308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558cb8c308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558cb8c308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558cb8c308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558cb8c308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558cb8c308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558cb8c308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558cb8c308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558cb8c308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558cb8c308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558cbae3545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558cb7b91578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558cb7b9c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558cb7947d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558cb7947d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558cb7948808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558cb7947944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558cb7947944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558cb7947944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558cbc22994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558cbc2327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558cbc21a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558cbc244fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc3cf810082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558cb5b6943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x69,0x6e,0x9d, Step #5: .in\235 Step #5: artifact_prefix='./'; Test unit written to ./oom-a5837326af6fd69bb3e9bb4b771a3cc1420c1407 Step #5: Base64: LmlunQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 455 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3865331164 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5595fc7a2d60, 0x5595fc98b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5595fc98b720,0x5595fe8152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a5837326af6fd69bb3e9bb4b771a3cc1420c1407' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 489 processed earlier; will process 10487 files now Step #5: ==16414== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5595f32e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5595f9920728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5595f990346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5595f990338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5595f32eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5595f324c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5595f3246c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5595f32dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5595f630c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5595f630c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5595f630c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5595f630c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5595f630c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5595f630c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5595f630c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5595f630c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5595f630c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5595f630c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5595f851145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5595f526d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5595f52785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5595f5023d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5595f5023d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5595f5024808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5595f5023944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5595f5023944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5595f5023944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5595f990594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5595f990e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5595f98f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5595f9920fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6567b32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5595f324543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3a,0xdc,0xbe, Step #5: <:\334\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-150b703a6f314759daa36498e6c5f4e1b2eeb526 Step #5: Base64: PDrcvg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 456 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3865779033 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55baf7337d60, 0x55baf752071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55baf7520720,0x55baf93aa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/150b703a6f314759daa36498e6c5f4e1b2eeb526' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 490 processed earlier; will process 10486 files now Step #5: ==16450== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55baede7a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55baf44b5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55baf449846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55baf449838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55baede80652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55baedde142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55baedddbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55baede72595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55baf0ea18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55baf0ea18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55baf0ea18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55baf0ea18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55baf0ea18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55baf0ea18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55baf0ea18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55baf0ea18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55baf0ea18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55baf0ea18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55baf30a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55baefe02578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55baefe0d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55baefbb8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55baefbb8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55baefbb9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55baefbb8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55baefbb8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55baefbb8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55baf449a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55baf44a37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55baf448b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55baf44b5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffbd4ed3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55baeddda43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x1,0xb,0x64, Step #5: B\001\013d Step #5: artifact_prefix='./'; Test unit written to ./oom-dc9f60be844d2a95b10753a179453bb9d615a1ed Step #5: Base64: QgELZA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 457 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3866242585 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f954d2d60, 0x557f956bb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f956bb720,0x557f975452c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dc9f60be844d2a95b10753a179453bb9d615a1ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 491 processed earlier; will process 10485 files now Step #5: ==16486== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f8c0152d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f92650728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f9263346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f9263338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f8c01b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f8bf7c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f8bf76c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f8c00d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f8f03c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f8f03c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f8f03c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f8f03c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f8f03c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f8f03c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f8f03c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f8f03c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f8f03c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f8f03c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f9124145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f8df9d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f8dfa85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f8dd53d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f8dd53d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f8dd54808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f8dd53944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f8dd53944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f8dd53944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f9263594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f9263e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f92626529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f92650fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f90a97e2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f8bf7543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x69,0x67,0x72, Step #5: digr Step #5: artifact_prefix='./'; Test unit written to ./oom-6fbb59250dc301a935f8d3fe4e72455a5d359cac Step #5: Base64: ZGlncg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 458 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3866697015 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5588ddecfd60, 0x5588de0b871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5588de0b8720,0x5588dff422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6fbb59250dc301a935f8d3fe4e72455a5d359cac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 492 processed earlier; will process 10484 files now Step #5: #1 pulse cov: 3397 ft: 3398 exec/s: 0 rss: 157Mb Step #5: ==16522== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5588d4a122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5588db04d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5588db03046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5588db03038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5588d4a18652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5588d497942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5588d4973c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5588d4a0a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5588d7a398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5588d7a398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5588d7a398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5588d7a398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5588d7a398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5588d7a398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5588d7a398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5588d7a398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5588d7a398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5588d7a398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5588d9c3e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5588d699a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5588d69a55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5588d6750d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5588d6750d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5588d6751808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5588d6750944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5588d6750944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5588d6750944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5588db03294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5588db03b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5588db023529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5588db04dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f827560d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5588d497243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x2f,0x27,0xaf, Step #5: '/'\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-04ecdaf11b0875466a1c4420c2302c48e737b710 Step #5: Base64: Jy8nrw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 459 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3867219123 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55914a228d60, 0x55914a41171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55914a411720,0x55914c29b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04ecdaf11b0875466a1c4420c2302c48e737b710' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 494 processed earlier; will process 10482 files now Step #5: ==16558== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559140d6b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591473a6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55914738946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55914738938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559140d71652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559140cd242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559140cccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559140d63595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559143d928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559143d928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559143d928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559143d928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559143d928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559143d928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559143d928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559143d928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559143d928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559143d928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559145f9745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559142cf3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559142cfe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559142aa9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559142aa9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559142aaa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559142aa9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559142aa9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559142aa9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55914738b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591473947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55914737c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591473a6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc9e67e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559140ccb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x91,0x8b,0x93, Step #5: \360\221\213\223 Step #5: artifact_prefix='./'; Test unit written to ./oom-db218433e7c9d71d74819a70f3dfe4787e67b102 Step #5: Base64: 8JGLkw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 460 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3867661574 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5621b3305d60, 0x5621b34ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5621b34ee720,0x5621b53782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/db218433e7c9d71d74819a70f3dfe4787e67b102' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 495 processed earlier; will process 10481 files now Step #5: ==16594== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5621a9e482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5621b0483728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5621b046646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5621b046638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5621a9e4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5621a9daf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5621a9da9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5621a9e40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5621ace6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5621ace6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5621ace6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5621ace6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5621ace6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5621ace6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5621ace6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5621ace6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5621ace6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5621ace6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5621af07445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5621abdd0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5621abddb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5621abb86d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5621abb86d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5621abb87808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5621abb86944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5621abb86944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5621abb86944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5621b046894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5621b04717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5621b0459529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5621b0483fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f07193082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5621a9da843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x55,0xa,0x65,0x7e, Step #5: U\012e~ Step #5: artifact_prefix='./'; Test unit written to ./oom-778888c04ee8b617801ed4d8f1c4f87e6e70cbd0 Step #5: Base64: VQplfg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 461 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3868108354 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a56bb37d60, 0x55a56bd2071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a56bd20720,0x55a56dbaa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/778888c04ee8b617801ed4d8f1c4f87e6e70cbd0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 496 processed earlier; will process 10480 files now Step #5: ==16630== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a56267a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a568cb5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a568c9846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a568c9838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a562680652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a5625e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a5625dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a562672595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a5656a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a5656a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a5656a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a5656a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a5656a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a5656a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a5656a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a5656a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a5656a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a5656a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a5678a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a564602578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a56460d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a5643b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a5643b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a5643b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a5643b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a5643b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a5643b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a568c9a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a568ca37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a568c8b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a568cb5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f04396ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a5625da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xda,0x82,0x45,0x5, Step #5: \332\202E\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-c75b77eb672f55140015f3b66726230ad5cc8639 Step #5: Base64: 2oJFBQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 462 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3868558845 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5628bd1c5d60, 0x5628bd3ae71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5628bd3ae720,0x5628bf2382c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c75b77eb672f55140015f3b66726230ad5cc8639' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 497 processed earlier; will process 10479 files now Step #5: #1 pulse cov: 3417 ft: 3418 exec/s: 0 rss: 155Mb Step #5: ==16666== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5628b3d082d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628ba343728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628ba32646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628ba32638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5628b3d0e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5628b3c6f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5628b3c69c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5628b3d00595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628b6d2f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628b6d2f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628b6d2f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628b6d2f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628b6d2f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628b6d2f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628b6d2f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628b6d2f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628b6d2f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628b6d2f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628b8f3445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5628b5c90578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5628b5c9b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5628b5a46d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5628b5a46d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5628b5a47808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5628b5a46944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5628b5a46944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5628b5a46944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628ba32894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628ba3317b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628ba319529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628ba343fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4d7d204082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5628b3c6843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x5f,0x6e,0x4d, Step #5: D_nM Step #5: artifact_prefix='./'; Test unit written to ./oom-68f18288ad6f877cbfde53cd2ff6d716d6d82bd9 Step #5: Base64: RF9uTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 463 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3869039021 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5599362f6d60, 0x5599364df71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5599364df720,0x5599383692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/68f18288ad6f877cbfde53cd2ff6d716d6d82bd9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 499 processed earlier; will process 10477 files now Step #5: ==16702== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55992ce392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559933474728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55993345746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55993345738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55992ce3f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55992cda042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55992cd9ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55992ce31595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55992fe608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55992fe608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55992fe608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55992fe608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55992fe608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55992fe608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55992fe608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55992fe608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55992fe608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55992fe608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55993206545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55992edc1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55992edcc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55992eb77d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55992eb77d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55992eb78808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55992eb77944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55992eb77944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55992eb77944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55993345994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5599334627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55993344a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559933474fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd3268a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55992cd9943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2e,0x2e,0x2e, Step #5: /... Step #5: artifact_prefix='./'; Test unit written to ./oom-4d790d8f73190a3386fabd13f11d20d5fbd7b0c0 Step #5: Base64: Ly4uLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 464 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3869478667 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c4d0a15d60, 0x55c4d0bfe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c4d0bfe720,0x55c4d2a882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4d790d8f73190a3386fabd13f11d20d5fbd7b0c0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 500 processed earlier; will process 10476 files now Step #5: ==16738== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c4c75582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c4cdb93728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c4cdb7646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c4cdb7638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c4c755e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c4c74bf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c4c74b9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c4c7550595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c4ca57f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c4ca57f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c4ca57f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c4ca57f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c4ca57f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c4ca57f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c4ca57f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c4ca57f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c4ca57f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c4ca57f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c4cc78445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c4c94e0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c4c94eb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c4c9296d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c4c9296d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c4c9297808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c4c9296944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c4c9296944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c4c9296944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c4cdb7894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c4cdb817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c4cdb69529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c4cdb93fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f93a8081082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c4c74b843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xd,0xd,0x2e, Step #5: \015\015\015. Step #5: artifact_prefix='./'; Test unit written to ./oom-56d28e04c10ac3631cbf61214de5efe5d437858a Step #5: Base64: DQ0NLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 465 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3869920210 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c889c0dd60, 0x55c889df671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c889df6720,0x55c88bc802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56d28e04c10ac3631cbf61214de5efe5d437858a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 501 processed earlier; will process 10475 files now Step #5: ==16774== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c8807502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c886d8b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c886d6e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c886d6e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c880756652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c8806b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c8806b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c880748595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c8837778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c8837778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c8837778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c8837778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c8837778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c8837778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c8837778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c8837778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c8837778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c8837778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c88597c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c8826d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c8826e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c88248ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c88248ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c88248f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c88248e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c88248e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c88248e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c886d7094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c886d797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c886d61529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c886d8bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2aae70082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c8806b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x3a,0x44,0x3a, Step #5: S:D: Step #5: artifact_prefix='./'; Test unit written to ./oom-ab6e45c38433a164432981363532568b96b21775 Step #5: Base64: UzpEOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 466 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3870364558 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b8aff27d60, 0x55b8b011071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b8b0110720,0x55b8b1f9a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab6e45c38433a164432981363532568b96b21775' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 502 processed earlier; will process 10474 files now Step #5: ==16810== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8a6a6a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b8ad0a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b8ad08846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b8ad08838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8a6a70652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8a69d142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8a69cbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8a6a62595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b8a9a918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b8a9a918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b8a9a918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b8a9a918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b8a9a918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b8a9a918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b8a9a918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b8a9a918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b8a9a918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b8a9a918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b8abc9645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8a89f2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8a89fd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8a87a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8a87a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8a87a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8a87a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8a87a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8a87a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b8ad08a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b8ad0937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b8ad07b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b8ad0a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f44cdfe1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8a69ca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x36,0x5,0x2f, Step #5: \0006\005/ Step #5: artifact_prefix='./'; Test unit written to ./oom-538bada75ac1d515ec294a29c8ca274c8f402d80 Step #5: Base64: ADYFLw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 467 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3870808683 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b0a2c9d60, 0x559b0a4b271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b0a4b2720,0x559b0c33c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/538bada75ac1d515ec294a29c8ca274c8f402d80' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 503 processed earlier; will process 10473 files now Step #5: ==16846== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b00e0c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b07447728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b0742a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b0742a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b00e12652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b00d7342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b00d6dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b00e04595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b03e338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b03e338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b03e338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b03e338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b03e338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b03e338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b03e338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b03e338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b03e338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b03e338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b0603845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b02d94578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b02d9f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b02b4ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b02b4ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b02b4b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b02b4a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b02b4a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b02b4a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b0742c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b074357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b0741d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b07447fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f814f7b1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b00d6c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c,0xa,0xa,0x4, Step #5: L\012\012\004 Step #5: artifact_prefix='./'; Test unit written to ./oom-233eb27687002cf8abaca2dc42a277947c626d3e Step #5: Base64: TAoKBA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 468 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3871249155 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642f9feed60, 0x5642fa1d771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642fa1d7720,0x5642fc0612c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/233eb27687002cf8abaca2dc42a277947c626d3e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 504 processed earlier; will process 10472 files now Step #5: #1 pulse cov: 3400 ft: 3401 exec/s: 0 rss: 156Mb Step #5: ==16882== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5642f0b312d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5642f716c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5642f714f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5642f714f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5642f0b37652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5642f0a9842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5642f0a92c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5642f0b29595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5642f3b588c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5642f3b588c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5642f3b588c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5642f3b588c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5642f3b588c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5642f3b588c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5642f3b588c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5642f3b588c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5642f3b588c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5642f3b588c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5642f5d5d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5642f2ab9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642f2ac45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5642f286fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5642f286fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5642f2870808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5642f286f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5642f286f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5642f286f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5642f715194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642f715a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5642f7142529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5642f716cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fca485df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5642f0a9143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0xc5,0xbc,0x3a, Step #5: 2\305\274: Step #5: artifact_prefix='./'; Test unit written to ./oom-af9a61f3cb784ffc84e4700c1c83fa0750cd77d3 Step #5: Base64: MsW8Og== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 469 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3871731809 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a46b8b5d60, 0x55a46ba9e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a46ba9e720,0x55a46d9282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af9a61f3cb784ffc84e4700c1c83fa0750cd77d3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 506 processed earlier; will process 10470 files now Step #5: #1 pulse cov: 3511 ft: 3512 exec/s: 0 rss: 155Mb Step #5: ==16918== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4623f82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a468a33728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a468a1646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a468a1638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4623fe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a46235f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a462359c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a4623f0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a46541f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a46541f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a46541f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a46541f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a46541f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a46541f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a46541f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a46541f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a46541f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a46541f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a46762445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a464380578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a46438b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a464136d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a464136d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a464137808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a464136944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a464136944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a464136944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a468a1894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a468a217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a468a09529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a468a33fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f336c908082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a46235843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x60,0x24,0x60, Step #5: #`$` Step #5: artifact_prefix='./'; Test unit written to ./oom-9983cf8038d28bc49e319d9875228954f5eba7ea Step #5: Base64: I2AkYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 470 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3872354419 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602034e4d60, 0x5602036cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602036cd720,0x5602055572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9983cf8038d28bc49e319d9875228954f5eba7ea' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 508 processed earlier; will process 10468 files now Step #5: ==16954== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601fa0272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560200662728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56020064546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56020064538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5601fa02d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5601f9f8e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5601f9f88c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5601fa01f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601fd04e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601fd04e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601fd04e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601fd04e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601fd04e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601fd04e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601fd04e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601fd04e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601fd04e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601fd04e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601ff25345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601fbfaf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601fbfba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601fbd65d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601fbd65d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601fbd66808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601fbd65944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601fbd65944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601fbd65944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56020064794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602006507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560200638529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560200662fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbca0d4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5601f9f8743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x29,0xdc,0xbd, Step #5: \001)\334\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-a5e9aa335712f9e6a69802305f7e6f5d0d6414ee Step #5: Base64: ASncvQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 471 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3872811677 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562fb3809d60, 0x562fb39f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562fb39f2720,0x562fb587c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a5e9aa335712f9e6a69802305f7e6f5d0d6414ee' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 509 processed earlier; will process 10467 files now Step #5: ==16990== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562faa34c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562fb0987728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562fb096a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562fb096a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562faa352652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562faa2b342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562faa2adc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562faa344595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562fad3738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562fad3738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562fad3738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562fad3738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562fad3738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562fad3738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562fad3738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562fad3738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562fad3738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562fad3738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562faf57845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562fac2d4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562fac2df5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562fac08ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562fac08ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562fac08b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562fac08a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562fac08a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562fac08a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562fb096c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562fb09757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562fb095d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562fb0987fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f246c96c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562faa2ac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x28,0x46,0x7b, Step #5: t(F{ Step #5: artifact_prefix='./'; Test unit written to ./oom-48799a71b1b4713d1f9b6cdc4525f209db1a7442 Step #5: Base64: dChGew== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 472 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3873257571 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d44dff5d60, 0x55d44e1de71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d44e1de720,0x55d4500682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/48799a71b1b4713d1f9b6cdc4525f209db1a7442' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 510 processed earlier; will process 10466 files now Step #5: ==17026== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d444b382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d44b173728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d44b15646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d44b15638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d444b3e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d444a9f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d444a99c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d444b30595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d447b5f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d447b5f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d447b5f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d447b5f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d447b5f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d447b5f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d447b5f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d447b5f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d447b5f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d447b5f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d449d6445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d446ac0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d446acb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d446876d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d446876d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d446877808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d446876944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d446876944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d446876944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d44b15894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d44b1617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d44b149529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d44b173fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f05c577f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d444a9843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0x9,0x0, Step #5: -\012\011\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-30d4a897c057051778f888954803347b51a86f0c Step #5: Base64: LQoJAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 473 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3873712751 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560b49e2d60, 0x5560b4bcb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560b4bcb720,0x5560b6a552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/30d4a897c057051778f888954803347b51a86f0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 511 processed earlier; will process 10465 files now Step #5: ==17062== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560ab5252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560b1b60728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560b1b4346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560b1b4338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560ab52b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560ab48c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560ab486c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560ab51d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560ae54c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560ae54c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560ae54c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560ae54c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560ae54c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560ae54c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560ae54c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560ae54c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560ae54c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560ae54c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560b075145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560ad4ad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560ad4b85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560ad263d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560ad263d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560ad264808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560ad263944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560ad263944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560ad263944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560b1b4594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560b1b4e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560b1b36529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560b1b60fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4a5a04d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560ab48543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xc,0x2f,0x3d, Step #5: <\014/= Step #5: artifact_prefix='./'; Test unit written to ./oom-ff290a97714679e2882103ff47d794c9bba36088 Step #5: Base64: PAwvPQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 474 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3874156417 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5561b6e5ad60, 0x5561b704371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5561b7043720,0x5561b8ecd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ff290a97714679e2882103ff47d794c9bba36088' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 512 processed earlier; will process 10464 files now Step #5: ==17098== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5561ad99d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5561b3fd8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5561b3fbb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5561b3fbb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5561ad9a3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5561ad90442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5561ad8fec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5561ad995595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5561b09c48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5561b09c48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5561b09c48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5561b09c48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5561b09c48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5561b09c48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5561b09c48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5561b09c48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5561b09c48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5561b09c48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5561b2bc945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5561af925578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5561af9305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5561af6dbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5561af6dbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5561af6dc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5561af6db944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5561af6db944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5561af6db944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5561b3fbd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5561b3fc67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5561b3fae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5561b3fd8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd8c810a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5561ad8fd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x0,0x42,0x0, Step #5: B\000B\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-62eb07eebbb3090ef4ef0f3abeba389043e6009b Step #5: Base64: QgBCAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 475 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3874599253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5593fc8a2d60, 0x5593fca8b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593fca8b720,0x5593fe9152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/62eb07eebbb3090ef4ef0f3abeba389043e6009b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 513 processed earlier; will process 10463 files now Step #5: ==17134== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5593f33e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593f9a20728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593f9a0346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593f9a0338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5593f33eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5593f334c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5593f3346c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5593f33dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5593f640c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5593f640c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5593f640c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5593f640c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5593f640c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5593f640c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5593f640c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5593f640c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5593f640c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5593f640c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593f861145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5593f536d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5593f53785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5593f5123d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5593f5123d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5593f5124808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5593f5123944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5593f5123944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5593f5123944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593f9a0594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593f9a0e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593f99f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593f9a20fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe558823082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5593f334543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x2d,0x24,0x24, Step #5: 1-$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-c7f693c52650e57115a0a7157703ca48ad62df5c Step #5: Base64: MS0kJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 476 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3875039490 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b6308cd60, 0x556b6327571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b63275720,0x556b650ff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c7f693c52650e57115a0a7157703ca48ad62df5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 514 processed earlier; will process 10462 files now Step #5: ==17170== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b59bcf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b6020a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b601ed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b601ed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b59bd5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b59b3642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b59b30c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b59bc7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b5cbf68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b5cbf68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b5cbf68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b5cbf68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b5cbf68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b5cbf68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b5cbf68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b5cbf68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b5cbf68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b5cbf68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b5edfb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b5bb57578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b5bb625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b5b90dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b5b90dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b5b90e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b5b90d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b5b90d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b5b90d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b601ef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b601f87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b601e0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b6020afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc5cbf10082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b59b2f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xad,0xb8,0x88, Step #5: \360\255\270\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-329195a9e1cb4a2b1439bc5d3ce7c8cbc65b6e21 Step #5: Base64: 8K24iA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 477 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3875478023 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca16e3ad60, 0x55ca1702371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca17023720,0x55ca18ead2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/329195a9e1cb4a2b1439bc5d3ce7c8cbc65b6e21' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 515 processed earlier; will process 10461 files now Step #5: ==17206== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca0d97d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca13fb8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca13f9b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca13f9b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca0d983652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca0d8e442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca0d8dec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca0d975595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca109a48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca109a48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca109a48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca109a48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca109a48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca109a48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca109a48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca109a48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca109a48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca109a48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca12ba945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca0f905578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca0f9105a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca0f6bbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca0f6bbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca0f6bc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca0f6bb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca0f6bb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca0f6bb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca13f9d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca13fa67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca13f8e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca13fb8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6ef45a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca0d8dd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x3c,0xdb,0xbe, Step #5: B<\333\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-fad3c6bed617342683a262598f2f8091940ebf8b Step #5: Base64: Qjzbvg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 478 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3875916756 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55baa3befd60, 0x55baa3dd871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55baa3dd8720,0x55baa5c622c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fad3c6bed617342683a262598f2f8091940ebf8b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 516 processed earlier; will process 10460 files now Step #5: ==17242== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ba9a7322d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55baa0d6d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55baa0d5046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55baa0d5038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ba9a738652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ba9a69942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ba9a693c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ba9a72a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ba9d7598c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ba9d7598c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ba9d7598c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ba9d7598c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ba9d7598c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ba9d7598c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ba9d7598c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ba9d7598c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ba9d7598c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ba9d7598c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ba9f95e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ba9c6ba578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ba9c6c55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ba9c470d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ba9c470d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ba9c471808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ba9c470944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ba9c470944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ba9c470944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55baa0d5294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55baa0d5b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55baa0d43529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55baa0d6dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4a75807082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ba9a69243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x18,0x74,0x74, Step #5: <\030tt Step #5: artifact_prefix='./'; Test unit written to ./oom-94dba2af1022f64da98bc95ff3b3dba00950afc1 Step #5: Base64: PBh0dA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 479 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3876356829 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b149fbd60, 0x560b14be471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b14be4720,0x560b16a6e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/94dba2af1022f64da98bc95ff3b3dba00950afc1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 517 processed earlier; will process 10459 files now Step #5: ==17278== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b0b53e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b11b79728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b11b5c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b11b5c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b0b544652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b0b4a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b0b49fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b0b536595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b0e5658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b0e5658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b0e5658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b0e5658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b0e5658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b0e5658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b0e5658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b0e5658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b0e5658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b0e5658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b1076a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b0d4c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b0d4d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b0d27cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b0d27cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b0d27d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b0d27c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b0d27c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b0d27c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b11b5e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b11b677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b11b4f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b11b79fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba763ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b0b49e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x96,0x84,0xa2, Step #5: \360\226\204\242 Step #5: artifact_prefix='./'; Test unit written to ./oom-bd496627ea28103552fda170511455764bda53dd Step #5: Base64: 8JaEog== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 480 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3876798564 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55acdf87cd60, 0x55acdfa6571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55acdfa65720,0x55ace18ef2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bd496627ea28103552fda170511455764bda53dd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 518 processed earlier; will process 10458 files now Step #5: ==17314== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55acd63bf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55acdc9fa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55acdc9dd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55acdc9dd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55acd63c5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55acd632642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55acd6320c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55acd63b7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55acd93e68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55acd93e68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55acd93e68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55acd93e68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55acd93e68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55acd93e68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55acd93e68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55acd93e68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55acd93e68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55acd93e68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55acdb5eb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55acd8347578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55acd83525a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55acd80fdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55acd80fdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55acd80fe808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55acd80fd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55acd80fd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55acd80fd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55acdc9df94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55acdc9e87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55acdc9d0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55acdc9fafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f01188082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55acd631f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xbc,0xbb,0x3, Step #5: \326\274\273\003 Step #5: artifact_prefix='./'; Test unit written to ./oom-5766bab1c28ce34c20791647e04b1fd9efccc1e9 Step #5: Base64: 1ry7Aw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 481 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3877242341 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5611d982ed60, 0x5611d9a1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5611d9a17720,0x5611db8a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5766bab1c28ce34c20791647e04b1fd9efccc1e9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 519 processed earlier; will process 10457 files now Step #5: ==17350== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5611d03712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5611d69ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5611d698f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5611d698f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5611d0377652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5611d02d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5611d02d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5611d0369595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5611d33988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5611d33988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5611d33988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5611d33988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5611d33988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5611d33988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5611d33988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5611d33988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5611d33988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5611d33988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5611d559d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5611d22f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5611d23045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5611d20afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5611d20afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5611d20b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5611d20af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5611d20af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5611d20af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5611d699194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5611d699a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5611d6982529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5611d69acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa1b42e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5611d02d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x74,0x4c,0x3a, Step #5: ftL: Step #5: artifact_prefix='./'; Test unit written to ./oom-b3cb0c154a31a5729737d0ecb0dfead3ab54d01e Step #5: Base64: ZnRMOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 482 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3877684228 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ff8ba78d60, 0x55ff8bc6171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ff8bc61720,0x55ff8daeb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b3cb0c154a31a5729737d0ecb0dfead3ab54d01e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 520 processed earlier; will process 10456 files now Step #5: ==17386== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ff825bb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ff88bf6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ff88bd946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ff88bd938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ff825c1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ff8252242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ff8251cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ff825b3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ff855e28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ff855e28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ff855e28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ff855e28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ff855e28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ff855e28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ff855e28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ff855e28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ff855e28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ff855e28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ff877e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ff84543578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ff8454e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ff842f9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ff842f9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ff842fa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ff842f9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ff842f9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ff842f9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ff88bdb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ff88be47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ff88bcc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ff88bf6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f532b34d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ff8251b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0xe0,0xb9,0x88, Step #5: 0\340\271\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-93ece7e66fb84947356b8d33f240eaef76d20bca Step #5: Base64: MOC5iA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 483 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3878121800 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab5f579d60, 0x55ab5f76271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab5f762720,0x55ab615ec2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93ece7e66fb84947356b8d33f240eaef76d20bca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 521 processed earlier; will process 10455 files now Step #5: #1 pulse cov: 3453 ft: 3454 exec/s: 0 rss: 156Mb Step #5: ==17422== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ab560bc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab5c6f7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab5c6da46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab5c6da38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ab560c2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ab5602342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ab5601dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ab560b4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab590e38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab590e38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab590e38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab590e38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab590e38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab590e38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab590e38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab590e38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab590e38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab590e38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab5b2e845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab58044578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab5804f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab57dfad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab57dfad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab57dfb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab57dfa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab57dfa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab57dfa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab5c6dc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab5c6e57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab5c6cd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab5c6f7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc136771082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ab5601c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x29,0x0, Step #5: ^()\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-e9aad4357aebda47158acf3a4c9eda001a7c3aa5 Step #5: Base64: XigpAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 484 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3878602770 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0b0260d60, 0x55a0b044971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0b0449720,0x55a0b22d32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e9aad4357aebda47158acf3a4c9eda001a7c3aa5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 523 processed earlier; will process 10453 files now Step #5: #1 pulse cov: 3536 ft: 3537 exec/s: 0 rss: 154Mb Step #5: ==17458== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0a6da32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0ad3de728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0ad3c146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0ad3c138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0a6da9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0a6d0a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0a6d04c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0a6d9b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0a9dca8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0a9dca8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0a9dca8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0a9dca8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0a9dca8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0a9dca8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0a9dca8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0a9dca8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0a9dca8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0a9dca8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0abfcf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0a8d2b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0a8d365a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0a8ae1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0a8ae1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0a8ae2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0a8ae1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0a8ae1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0a8ae1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0ad3c394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0ad3cc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0ad3b4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0ad3defa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f961748e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0a6d0343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x20,0x31,0x24, Step #5: $ 1$ Step #5: artifact_prefix='./'; Test unit written to ./oom-39064bdd89b3dfa0626ca59d843d926ea072830b Step #5: Base64: JCAxJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 485 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3879093311 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c213ff4d60, 0x55c2141dd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c2141dd720,0x55c2160672c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/39064bdd89b3dfa0626ca59d843d926ea072830b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 525 processed earlier; will process 10451 files now Step #5: ==17494== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c20ab372d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c211172728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c21115546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c21115538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c20ab3d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c20aa9e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c20aa98c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c20ab2f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c20db5e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c20db5e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c20db5e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c20db5e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c20db5e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c20db5e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c20db5e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c20db5e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c20db5e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c20db5e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c20fd6345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c20cabf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c20caca5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c20c875d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c20c875d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c20c876808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c20c875944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c20c875944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c20c875944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c21115794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c2111607b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c211148529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c211172fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6756ae9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c20aa9743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0x9e,0xf0,0x8a, Step #5: \303\236\360\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-7750c48d8b6ce50dbc4432a0e2f4637f6ff36e34 Step #5: Base64: w57wig== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 486 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3879536491 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56157cd21d60, 0x56157cf0a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56157cf0a720,0x56157ed942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7750c48d8b6ce50dbc4432a0e2f4637f6ff36e34' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 526 processed earlier; will process 10450 files now Step #5: ==17530== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615738642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561579e9f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561579e8246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561579e8238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56157386a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615737cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615737c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56157385c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56157688b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56157688b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56157688b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56157688b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56157688b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56157688b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56157688b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56157688b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56157688b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56157688b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561578a9045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5615757ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615757f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615755a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615755a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615755a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615755a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615755a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615755a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561579e8494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561579e8d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561579e75529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561579e9ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f463768d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615737c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0xab,0xab, Step #5: \364\217\253\253 Step #5: artifact_prefix='./'; Test unit written to ./oom-7197b2ac957e0a9567021073758a6c1553e07d3f Step #5: Base64: 9I+rqw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 487 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3879973893 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b1f3239d60, 0x55b1f342271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b1f3422720,0x55b1f52ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7197b2ac957e0a9567021073758a6c1553e07d3f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 527 processed earlier; will process 10449 files now Step #5: ==17566== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b1e9d7c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b1f03b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b1f039a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b1f039a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b1e9d82652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b1e9ce342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b1e9cddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b1e9d74595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1ecda38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1ecda38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1ecda38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1ecda38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1ecda38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1ecda38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1ecda38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1ecda38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1ecda38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1ecda38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b1eefa845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b1ebd04578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1ebd0f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b1ebabad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b1ebabad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b1ebabb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b1ebaba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b1ebaba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b1ebaba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b1f039c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1f03a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b1f038d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b1f03b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f162f075082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b1e9cdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x3a,0x21,0x30, Step #5: A:!0 Step #5: artifact_prefix='./'; Test unit written to ./oom-e632056edf099b196b73fc0a11e50752210b561e Step #5: Base64: QTohMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 488 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3880409821 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cea7ba2d60, 0x55cea7d8b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cea7d8b720,0x55cea9c152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e632056edf099b196b73fc0a11e50752210b561e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 528 processed earlier; will process 10448 files now Step #5: ==17602== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ce9e6e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cea4d20728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cea4d0346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cea4d0338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ce9e6eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ce9e64c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ce9e646c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ce9e6dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cea170c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cea170c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cea170c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cea170c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cea170c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cea170c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cea170c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cea170c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cea170c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cea170c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cea391145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cea066d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cea06785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cea0423d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cea0423d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cea0424808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cea0423944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cea0423944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cea0423944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cea4d0594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cea4d0e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cea4cf6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cea4d20fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f29d3754082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ce9e64543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x66,0x7e,0x6, Step #5: tf~\006 Step #5: artifact_prefix='./'; Test unit written to ./oom-f7422e5b797f9eede741c46aebfa3b64bf6a97bd Step #5: Base64: dGZ+Bg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 489 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3880850981 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5626e05fbd60, 0x5626e07e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5626e07e4720,0x5626e266e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7422e5b797f9eede741c46aebfa3b64bf6a97bd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 529 processed earlier; will process 10447 files now Step #5: ==17638== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5626d713e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5626dd779728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5626dd75c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5626dd75c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5626d7144652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5626d70a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5626d709fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5626d7136595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5626da1658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5626da1658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5626da1658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5626da1658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5626da1658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5626da1658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5626da1658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5626da1658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5626da1658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5626da1658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5626dc36a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5626d90c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5626d90d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5626d8e7cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5626d8e7cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5626d8e7d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5626d8e7c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5626d8e7c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5626d8e7c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5626dd75e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5626dd7677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5626dd74f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5626dd779fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe0d761e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5626d709e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x8f,0x2e,0x4e, Step #5: \315\217.N Step #5: artifact_prefix='./'; Test unit written to ./oom-894398d8dfba1e33ebadabf6988037e11bac0cec Step #5: Base64: zY8uTg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 490 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3881288351 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a55e1c6d60, 0x55a55e3af71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a55e3af720,0x55a5602392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/894398d8dfba1e33ebadabf6988037e11bac0cec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 530 processed earlier; will process 10446 files now Step #5: ==17674== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a554d092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a55b344728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a55b32746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a55b32738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a554d0f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a554c7042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a554c6ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a554d01595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a557d308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a557d308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a557d308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a557d308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a557d308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a557d308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a557d308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a557d308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a557d308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a557d308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a559f3545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a556c91578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a556c9c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a556a47d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a556a47d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a556a48808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a556a47944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a556a47944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a556a47944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a55b32994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a55b3327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a55b31a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a55b344fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce30a95082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a554c6943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd8,0xab,0xd7,0xaf, Step #5: \330\253\327\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-ced4b7f94490d92e907ae731c11f18a0359af8b7 Step #5: Base64: 2KvXrw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 491 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3881729890 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc48ff5d60, 0x55fc491de71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc491de720,0x55fc4b0682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ced4b7f94490d92e907ae731c11f18a0359af8b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 531 processed earlier; will process 10445 files now Step #5: ==17710== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc3fb382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc46173728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc4615646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc4615638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc3fb3e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc3fa9f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc3fa99c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc3fb30595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc42b5f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc42b5f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc42b5f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc42b5f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc42b5f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc42b5f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc42b5f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc42b5f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc42b5f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc42b5f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc44d6445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc41ac0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc41acb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc41876d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc41876d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc41877808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc41876944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc41876944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc41876944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc4615894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc461617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc46149529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc46173fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9eb119e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc3fa9843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x20,0x20,0x0, Step #5: \000 Step #5: artifact_prefix='./'; Test unit written to ./oom-ce4a44845af890b67469795a0af2d8dd6858df19 Step #5: Base64: ICAgAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 492 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3882165297 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585f1473d60, 0x5585f165c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585f165c720,0x5585f34e62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ce4a44845af890b67469795a0af2d8dd6858df19' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 532 processed earlier; will process 10444 files now Step #5: ==17746== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585e7fb62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585ee5f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585ee5d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585ee5d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585e7fbc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585e7f1d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585e7f17c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585e7fae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585eafdd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585eafdd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585eafdd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585eafdd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585eafdd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585eafdd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585eafdd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585eafdd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585eafdd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585eafdd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585ed1e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585e9f3e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585e9f495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5585e9cf4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5585e9cf4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5585e9cf5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5585e9cf4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5585e9cf4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5585e9cf4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585ee5d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585ee5df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585ee5c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585ee5f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd902e95082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585e7f1643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x71,0x62,0x6c, Step #5: sqbl Step #5: artifact_prefix='./'; Test unit written to ./oom-d97669e3674629fd0d40b84d981d5d30a56f1898 Step #5: Base64: c3FibA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 493 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3882604331 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5604cd4c5d60, 0x5604cd6ae71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5604cd6ae720,0x5604cf5382c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d97669e3674629fd0d40b84d981d5d30a56f1898' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 533 processed earlier; will process 10443 files now Step #5: ==17782== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5604c40082d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5604ca643728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5604ca62646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5604ca62638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5604c400e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5604c3f6f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5604c3f69c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5604c4000595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604c702f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604c702f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604c702f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604c702f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604c702f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604c702f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604c702f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604c702f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604c702f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604c702f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5604c923445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5604c5f90578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604c5f9b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5604c5d46d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5604c5d46d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5604c5d47808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5604c5d46944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5604c5d46944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5604c5d46944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5604ca62894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5604ca6317b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5604ca619529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5604ca643fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f08114082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5604c3f6843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xe2,0xbf,0xa1, Step #5: <\342\277\241 Step #5: artifact_prefix='./'; Test unit written to ./oom-cd976c18af5af82bb1d26d044e75a5730a3665c6 Step #5: Base64: POK/oQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 494 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3883044184 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eedd20dd60, 0x55eedd3f671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eedd3f6720,0x55eedf2802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cd976c18af5af82bb1d26d044e75a5730a3665c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 534 processed earlier; will process 10442 files now Step #5: ==17818== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eed3d502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eeda38b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eeda36e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eeda36e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eed3d56652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eed3cb742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eed3cb1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eed3d48595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eed6d778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eed6d778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eed6d778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eed6d778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eed6d778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eed6d778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eed6d778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eed6d778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eed6d778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eed6d778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eed8f7c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eed5cd8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eed5ce35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eed5a8ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eed5a8ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eed5a8f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eed5a8e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eed5a8e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eed5a8e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eeda37094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eeda3797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eeda361529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eeda38bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f36645c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eed3cb043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3a,0xcd,0xad, Step #5: <:\315\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-7925f6f3c1dea95380bb94c2e09ffe2b1cb07f6a Step #5: Base64: PDrNrQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 495 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3883500577 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5576ca541d60, 0x5576ca72a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5576ca72a720,0x5576cc5b42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7925f6f3c1dea95380bb94c2e09ffe2b1cb07f6a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 535 processed earlier; will process 10441 files now Step #5: ==17854== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5576c10842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5576c76bf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5576c76a246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5576c76a238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5576c108a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5576c0feb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5576c0fe5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5576c107c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5576c40ab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5576c40ab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5576c40ab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5576c40ab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5576c40ab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5576c40ab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5576c40ab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5576c40ab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5576c40ab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5576c40ab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5576c62b045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5576c300c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5576c30175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5576c2dc2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5576c2dc2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5576c2dc3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5576c2dc2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5576c2dc2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5576c2dc2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5576c76a494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5576c76ad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5576c7695529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5576c76bffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbef113c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5576c0fe443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f,0x26,0x7a, Step #5: //&z Step #5: artifact_prefix='./'; Test unit written to ./oom-dfddbd81409335cab48997c438e75714740402f4 Step #5: Base64: Ly8meg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 496 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3883931481 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5640b6148d60, 0x5640b633171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5640b6331720,0x5640b81bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dfddbd81409335cab48997c438e75714740402f4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 536 processed earlier; will process 10440 files now Step #5: ==17890== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5640acc8b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5640b32c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5640b32a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5640b32a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5640acc91652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5640acbf242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640acbecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5640acc83595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5640afcb28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5640afcb28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5640afcb28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5640afcb28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5640afcb28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5640afcb28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5640afcb28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5640afcb28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5640afcb28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5640afcb28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5640b1eb745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5640aec13578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5640aec1e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5640ae9c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5640ae9c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5640ae9ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5640ae9c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5640ae9c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5640ae9c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5640b32ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5640b32b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5640b329c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5640b32c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7cdec18082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5640acbeb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x2f,0x0,0x2f, Step #5: +/\000/ Step #5: artifact_prefix='./'; Test unit written to ./oom-5bd10a6f4cb8403bba2838596285910e8868e676 Step #5: Base64: Ky8ALw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 497 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3884375499 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b0ebfa8d60, 0x55b0ec19171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b0ec191720,0x55b0ee01b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5bd10a6f4cb8403bba2838596285910e8868e676' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 537 processed earlier; will process 10439 files now Step #5: ==17926== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b0e2aeb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b0e9126728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b0e910946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b0e910938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b0e2af1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b0e2a5242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b0e2a4cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b0e2ae3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b0e5b128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b0e5b128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b0e5b128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b0e5b128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b0e5b128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b0e5b128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b0e5b128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b0e5b128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b0e5b128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b0e5b128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b0e7d1745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b0e4a73578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b0e4a7e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b0e4829d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b0e4829d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b0e482a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b0e4829944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b0e4829944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b0e4829944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b0e910b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b0e91147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b0e90fc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b0e9126fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fca13352082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b0e2a4b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0x85,0xc2,0x85, Step #5: \302\205\302\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-76d14ec0e9c4863455ac7c2d605f0d2f8baa106a Step #5: Base64: woXChQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 498 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3884812694 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5637781abd60, 0x56377839471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563778394720,0x56377a21e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/76d14ec0e9c4863455ac7c2d605f0d2f8baa106a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 538 processed earlier; will process 10438 files now Step #5: #1 pulse cov: 3566 ft: 3567 exec/s: 0 rss: 156Mb Step #5: ==17962== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56376ecee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563775329728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56377530c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56377530c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56376ecf4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56376ec5542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56376ec4fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56376ece6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563771d158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563771d158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563771d158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563771d158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563771d158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563771d158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563771d158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563771d158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563771d158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563771d158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563773f1a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563770c76578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563770c815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563770a2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563770a2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563770a2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563770a2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563770a2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563770a2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56377530e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5637753177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5637752ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563775329fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0ecff8e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56376ec4e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x60,0x60,0x3f, Step #5: +``? Step #5: artifact_prefix='./'; Test unit written to ./oom-2cf6582f60bb603ba94bb44e45a212636e47eed7 Step #5: Base64: K2BgPw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 499 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3885414955 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5582f8f47d60, 0x5582f913071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5582f9130720,0x5582fafba2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2cf6582f60bb603ba94bb44e45a212636e47eed7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 540 processed earlier; will process 10436 files now Step #5: #1 pulse cov: 3435 ft: 3436 exec/s: 0 rss: 154Mb Step #5: ==17998== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5582efa8a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5582f60c5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5582f60a846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5582f60a838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5582efa90652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5582ef9f142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5582ef9ebc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5582efa82595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5582f2ab18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5582f2ab18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5582f2ab18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5582f2ab18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5582f2ab18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5582f2ab18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5582f2ab18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5582f2ab18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5582f2ab18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5582f2ab18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5582f4cb645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5582f1a12578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5582f1a1d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5582f17c8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5582f17c8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5582f17c9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5582f17c8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5582f17c8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5582f17c8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5582f60aa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5582f60b37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5582f609b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5582f60c5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4d57a58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5582ef9ea43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0xe1,0x9f,0xb6, Step #5: ?\341\237\266 Step #5: artifact_prefix='./'; Test unit written to ./oom-3dba75b5915cef91a1e07db5b1da21d087368af4 Step #5: Base64: P+Gftg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 500 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3885892748 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db04cacd60, 0x55db04e9571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db04e95720,0x55db06d1f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3dba75b5915cef91a1e07db5b1da21d087368af4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 542 processed earlier; will process 10434 files now Step #5: ==18034== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dafb7ef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db01e2a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db01e0d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db01e0d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dafb7f5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dafb75642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dafb750c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dafb7e7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dafe8168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dafe8168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dafe8168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dafe8168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dafe8168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dafe8168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dafe8168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dafe8168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dafe8168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dafe8168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db00a1b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dafd777578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dafd7825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dafd52dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dafd52dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dafd52e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dafd52d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dafd52d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dafd52d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db01e0f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db01e187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db01e00529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db01e2afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f570f156082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dafb74f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf1,0xbf,0xbf,0xbf, Step #5: \361\277\277\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-d01ff39c0800360ff31398cb1d34dea09a6af7d4 Step #5: Base64: 8b+/vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 501 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3886330490 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602e0cdbd60, 0x5602e0ec471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602e0ec4720,0x5602e2d4e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d01ff39c0800360ff31398cb1d34dea09a6af7d4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 543 processed earlier; will process 10433 files now Step #5: ==18070== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5602d781e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5602dde59728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5602dde3c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5602dde3c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5602d7824652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5602d778542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5602d777fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5602d7816595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5602da8458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5602da8458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5602da8458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5602da8458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5602da8458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5602da8458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5602da8458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5602da8458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5602da8458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5602da8458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602dca4a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5602d97a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5602d97b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5602d955cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5602d955cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5602d955d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5602d955c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5602d955c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5602d955c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5602dde3e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602dde477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5602dde2f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5602dde59fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f2d389082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5602d777e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0x59,0x58,0x7d, Step #5: XYX} Step #5: artifact_prefix='./'; Test unit written to ./oom-28281e68222e3277005deb07b673d06c3abae786 Step #5: Base64: WFlYfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 502 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3886770660 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d295a6fd60, 0x55d295c5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d295c58720,0x55d297ae22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28281e68222e3277005deb07b673d06c3abae786' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 544 processed earlier; will process 10432 files now Step #5: ==18106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d28c5b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d292bed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d292bd046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d292bd038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d28c5b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d28c51942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d28c513c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d28c5aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d28f5d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d28f5d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d28f5d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d28f5d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d28f5d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d28f5d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d28f5d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d28f5d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d28f5d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d28f5d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d2917de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d28e53a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d28e5455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d28e2f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d28e2f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d28e2f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d28e2f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d28e2f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d28e2f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d292bd294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d292bdb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d292bc3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d292bedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3bf1fcf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d28c51243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x52,0x43,0x5f, Step #5: _RC_ Step #5: artifact_prefix='./'; Test unit written to ./oom-b5f91bfe2ebe809978504df1db38404f55fa59d7 Step #5: Base64: X1JDXw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 503 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3887207873 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56256426bd60, 0x56256445471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562564454720,0x5625662de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5f91bfe2ebe809978504df1db38404f55fa59d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 545 processed earlier; will process 10431 files now Step #5: ==18142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56255adae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625613e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625613cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625613cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56255adb4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56255ad1542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56255ad0fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56255ada6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56255ddd58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56255ddd58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56255ddd58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56255ddd58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56255ddd58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56255ddd58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56255ddd58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56255ddd58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56255ddd58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56255ddd58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56255ffda45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56255cd36578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56255cd415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56255caecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56255caecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56255caed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56255caec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56255caec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56255caec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625613ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625613d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625613bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625613e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91c718c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56255ad0e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xaf,0x8e,0xaf, Step #5: \360\257\216\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-48c4713cfdb17e7762a2c489a17713d01b0f1b71 Step #5: Base64: 8K+Orw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 504 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3887665083 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c94d4ded60, 0x55c94d6c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c94d6c7720,0x55c94f5512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/48c4713cfdb17e7762a2c489a17713d01b0f1b71' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 546 processed earlier; will process 10430 files now Step #5: #1 pulse cov: 3517 ft: 3518 exec/s: 0 rss: 156Mb Step #5: ==18178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c9440212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c94a65c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c94a63f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c94a63f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c944027652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c943f8842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c943f82c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c944019595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c9470488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c9470488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c9470488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c9470488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c9470488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c9470488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c9470488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c9470488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c9470488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c9470488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c94924d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c945fa9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c945fb45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c945d5fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c945d5fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c945d60808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c945d5f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c945d5f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c945d5f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c94a64194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c94a64a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c94a632529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c94a65cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f38f6b2b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c943f8143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0xef,0xb7,0xbc, Step #5: n\357\267\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-565282426b5e6935e459e1e09a2bf8df5d1262bf Step #5: Base64: bu+3vA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 505 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3888153676 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557ad5504d60, 0x557ad56ed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557ad56ed720,0x557ad75772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/565282426b5e6935e459e1e09a2bf8df5d1262bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 548 processed earlier; will process 10428 files now Step #5: ==18214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557acc0472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ad2682728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ad266546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ad266538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557acc04d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557acbfae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557acbfa8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557acc03f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557acf06e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557acf06e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557acf06e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557acf06e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557acf06e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557acf06e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557acf06e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557acf06e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557acf06e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557acf06e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ad127345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557acdfcf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557acdfda5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557acdd85d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557acdd85d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557acdd86808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557acdd85944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557acdd85944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557acdd85944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ad266794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ad26707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ad2658529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ad2682fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa4df9e2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557acbfa743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x9,0x9,0x9,0x9, Step #5: \011\011\011\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-e0bafe976d92fbad43d8806b0e6d3460192e10aa Step #5: Base64: CQkJCQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 506 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3888575513 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559092518d60, 0x55909270171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559092701720,0x55909458b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e0bafe976d92fbad43d8806b0e6d3460192e10aa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 549 processed earlier; will process 10427 files now Step #5: ==18250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55908905b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55908f696728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55908f67946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55908f67938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559089061652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559088fc242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559088fbcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559089053595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55908c0828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55908c0828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55908c0828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55908c0828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55908c0828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55908c0828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55908c0828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55908c0828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55908c0828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55908c0828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55908e28745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55908afe3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55908afee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55908ad99d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55908ad99d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55908ad9a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55908ad99944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55908ad99944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55908ad99944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55908f67b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55908f6847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55908f66c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55908f696fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb0916df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559088fbb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xef,0xbe,0xb5, Step #5: \000\357\276\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-7dfa9bf6e6c8861b50d748820b1e160fd66845bb Step #5: Base64: AO++tQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 507 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3889019495 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fa71a32d60, 0x55fa71c1b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fa71c1b720,0x55fa73aa52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7dfa9bf6e6c8861b50d748820b1e160fd66845bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 550 processed earlier; will process 10426 files now Step #5: ==18286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fa685752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fa6ebb0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fa6eb9346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fa6eb9338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fa6857b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fa684dc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fa684d6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fa6856d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fa6b59c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fa6b59c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fa6b59c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fa6b59c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fa6b59c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fa6b59c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fa6b59c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fa6b59c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fa6b59c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fa6b59c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fa6d7a145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fa6a4fd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fa6a5085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fa6a2b3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fa6a2b3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fa6a2b4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fa6a2b3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fa6a2b3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fa6a2b3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fa6eb9594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fa6eb9e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fa6eb86529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fa6ebb0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1b49162082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fa684d543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x4f, Step #5: Step #5: Step #5: #0 0x56312bdfd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563132438728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56313241b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56313241b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56312be03652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56312bd6442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56312bd5ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56312bdf5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56312ee248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56312ee248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56312ee248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56312ee248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56312ee248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56312ee248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56312ee248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56312ee248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56312ee248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56312ee248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56313102945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56312dd85578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56312dd905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56312db3bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56312db3bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56312db3c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56312db3b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56312db3b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56312db3b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56313241d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5631324267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56313240e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563132438fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f588a5e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56312bd5d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8d,0xba,0xbb, Step #5: \364\215\272\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-bb1963b15cc7cd79c2640e471ff3f0a0fef74cc0 Step #5: Base64: 9I26uw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 509 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3889910154 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562780db7d60, 0x562780fa071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562780fa0720,0x562782e2a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bb1963b15cc7cd79c2640e471ff3f0a0fef74cc0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 552 processed earlier; will process 10424 files now Step #5: ==18358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5627778fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56277df35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56277df1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56277df1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562777900652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56277786142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56277785bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5627778f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56277a9218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56277a9218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56277a9218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56277a9218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56277a9218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56277a9218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56277a9218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56277a9218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56277a9218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56277a9218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56277cb2645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562779882578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56277988d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562779638d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562779638d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562779639808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562779638944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562779638944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562779638944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56277df1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56277df237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56277df0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56277df35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f99f72e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56277785a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0x8f,0xdf,0x3d, Step #5: \303\217\337= Step #5: artifact_prefix='./'; Test unit written to ./oom-f66e707d2dfe314109fdd84c903caef81e01a710 Step #5: Base64: w4/fPQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 510 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3890344539 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8f3a86d60, 0x55e8f3c6f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8f3c6f720,0x55e8f5af92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f66e707d2dfe314109fdd84c903caef81e01a710' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 553 processed earlier; will process 10423 files now Step #5: ==18394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8ea5c92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8f0c04728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8f0be746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8f0be738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8ea5cf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8ea53042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8ea52ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8ea5c1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8ed5f08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8ed5f08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8ed5f08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8ed5f08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8ed5f08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8ed5f08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8ed5f08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8ed5f08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8ed5f08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8ed5f08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8ef7f545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8ec551578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8ec55c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8ec307d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8ec307d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8ec308808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8ec307944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8ec307944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8ec307944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8f0be994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8f0bf27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8f0bda529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8f0c04fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f57c445c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8ea52943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x10,0x24,0x2f, Step #5: $\020$/ Step #5: artifact_prefix='./'; Test unit written to ./oom-9e763538b7dec7afbfc30e59cc979f69c64b5892 Step #5: Base64: JBAkLw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 511 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3890790040 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e032d98d60, 0x55e032f8171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e032f81720,0x55e034e0b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9e763538b7dec7afbfc30e59cc979f69c64b5892' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 554 processed earlier; will process 10422 files now Step #5: ==18430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e0298db2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e02ff16728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e02fef946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e02fef938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e0298e1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e02984242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e02983cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e0298d3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e02c9028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e02c9028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e02c9028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e02c9028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e02c9028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e02c9028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e02c9028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e02c9028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e02c9028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e02c9028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e02eb0745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e02b863578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e02b86e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e02b619d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e02b619d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e02b61a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e02b619944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e02b619944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e02b619944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e02fefb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e02ff047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e02feec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e02ff16fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6fa2f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e02983b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbe,0x80,0x95, Step #5: \340\276\200\225 Step #5: artifact_prefix='./'; Test unit written to ./oom-6bdf9c13230506c5e4ac8be1f17556a0c7689735 Step #5: Base64: 4L6AlQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 512 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3891234350 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559d7176fd60, 0x559d7195871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559d71958720,0x559d737e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6bdf9c13230506c5e4ac8be1f17556a0c7689735' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 555 processed earlier; will process 10421 files now Step #5: ==18466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559d682b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559d6e8ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559d6e8d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559d6e8d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559d682b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559d6821942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559d68213c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559d682aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559d6b2d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559d6b2d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559d6b2d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559d6b2d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559d6b2d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559d6b2d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559d6b2d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559d6b2d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559d6b2d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559d6b2d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559d6d4de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559d6a23a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559d6a2455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559d69ff0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559d69ff0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559d69ff1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559d69ff0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559d69ff0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559d69ff0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559d6e8d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559d6e8db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559d6e8c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559d6e8edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f96d4536082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559d6821243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x79,0x70,0x65, Step #5: type Step #5: artifact_prefix='./'; Test unit written to ./oom-d0a3e7f81a9885e99049d1cae0336d269d5e47a9 Step #5: Base64: dHlwZQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 513 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3891674783 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605b0953d60, 0x5605b0b3c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605b0b3c720,0x5605b29c62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d0a3e7f81a9885e99049d1cae0336d269d5e47a9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 556 processed earlier; will process 10420 files now Step #5: ==18502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605a74962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605adad1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605adab446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605adab438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605a749c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605a73fd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605a73f7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605a748e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605aa4bd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605aa4bd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605aa4bd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605aa4bd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605aa4bd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605aa4bd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605aa4bd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605aa4bd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605aa4bd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605aa4bd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605ac6c245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605a941e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605a94295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605a91d4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605a91d4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605a91d5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605a91d4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605a91d4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605a91d4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605adab694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605adabf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605adaa7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605adad1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2a60bee082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605a73f643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x5b,0x4,0x5d, Step #5: a[\004] Step #5: artifact_prefix='./'; Test unit written to ./oom-e5b43f2811f601dc7bb0b79cd476f068c09d614c Step #5: Base64: YVsEXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 514 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3892118387 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564aa75f0d60, 0x564aa77d971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564aa77d9720,0x564aa96632c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e5b43f2811f601dc7bb0b79cd476f068c09d614c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 557 processed earlier; will process 10419 files now Step #5: ==18538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a9e1332d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564aa476e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564aa475146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564aa475138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a9e139652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a9e09a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a9e094c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a9e12b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564aa115a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564aa115a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564aa115a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564aa115a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564aa115a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564aa115a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564aa115a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564aa115a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564aa115a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564aa115a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564aa335f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564aa00bb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564aa00c65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a9fe71d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a9fe71d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a9fe72808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a9fe71944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a9fe71944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a9fe71944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564aa475394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564aa475c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564aa4744529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564aa476efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4875578082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a9e09343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4,0x60,0x21,0x60, Step #5: \004`!` Step #5: artifact_prefix='./'; Test unit written to ./oom-f055539acb9c326d2d98cccff8d22d19268c55fc Step #5: Base64: BGAhYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 515 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3892698725 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564259fc8d60, 0x56425a1b171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56425a1b1720,0x56425c03b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f055539acb9c326d2d98cccff8d22d19268c55fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 558 processed earlier; will process 10418 files now Step #5: ==18574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564250b0b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564257146728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56425712946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56425712938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564250b11652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564250a7242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564250a6cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564250b03595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564253b328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564253b328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564253b328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564253b328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564253b328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564253b328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564253b328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564253b328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564253b328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564253b328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564255d3745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564252a93578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564252a9e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564252849d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564252849d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56425284a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564252849944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564252849944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564252849944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56425712b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642571347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56425711c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564257146fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe60fd7b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564250a6b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0x60,0x7e,0x60, Step #5: \015`~` Step #5: artifact_prefix='./'; Test unit written to ./oom-863b53c7aee9667cc086918c427266da68ed8a6a Step #5: Base64: DWB+YA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 516 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3893261899 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560567d49d60, 0x560567f3271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560567f32720,0x560569dbc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/863b53c7aee9667cc086918c427266da68ed8a6a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 559 processed earlier; will process 10417 files now Step #5: ==18610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56055e88c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560564ec7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560564eaa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560564eaa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56055e892652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56055e7f342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56055e7edc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56055e884595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605618b38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605618b38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605618b38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605618b38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605618b38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605618b38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605618b38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605618b38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605618b38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605618b38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560563ab845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560560814578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56056081f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605605cad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605605cad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605605cb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605605ca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605605ca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605605ca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560564eac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560564eb57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560564e9d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560564ec7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd28acf0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56055e7ec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x3a,0x60,0x20, Step #5: `:` Step #5: artifact_prefix='./'; Test unit written to ./oom-412e52d7dc988a56ec5bbc54af51b4322436e5dc Step #5: Base64: YDpgIA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 517 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3893829870 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55597d759d60, 0x55597d94271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55597d942720,0x55597f7cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/412e52d7dc988a56ec5bbc54af51b4322436e5dc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 560 processed earlier; will process 10416 files now Step #5: ==18646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55597429c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55597a8d7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55597a8ba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55597a8ba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5559742a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55597420342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5559741fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555974294595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5559772c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5559772c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5559772c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5559772c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5559772c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5559772c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5559772c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5559772c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5559772c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5559772c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5559794c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555976224578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55597622f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555975fdad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555975fdad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555975fdb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555975fda944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555975fda944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555975fda944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55597a8bc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55597a8c57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55597a8ad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55597a8d7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb5295d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5559741fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0xb1,0x0,0x41, Step #5: \334\261\000A Step #5: artifact_prefix='./'; Test unit written to ./oom-20d94fbcff17896fbf80ba18d548633d82890d70 Step #5: Base64: 3LEAQQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 518 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3894274240 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d274e9cd60, 0x55d27508571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d275085720,0x55d276f0f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/20d94fbcff17896fbf80ba18d548633d82890d70' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 561 processed earlier; will process 10415 files now Step #5: ==18682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d26b9df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d27201a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d271ffd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d271ffd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d26b9e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d26b94642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d26b940c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d26b9d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d26ea068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d26ea068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d26ea068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d26ea068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d26ea068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d26ea068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d26ea068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d26ea068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d26ea068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d26ea068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d270c0b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d26d967578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d26d9725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d26d71dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d26d71dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d26d71e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d26d71d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d26d71d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d26d71d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d271fff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d2720087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d271ff0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d27201afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc066afd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d26b93f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0xcc,0x80, Step #5: Step #5: Step #5: #0 0x562a0bdff2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562a1243a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562a1241d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562a1241d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562a0be05652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562a0bd6642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562a0bd60c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562a0bdf7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562a0ee268c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562a0ee268c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562a0ee268c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562a0ee268c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562a0ee268c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562a0ee268c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562a0ee268c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562a0ee268c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562a0ee268c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562a0ee268c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562a1102b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562a0dd87578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562a0dd925a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562a0db3dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562a0db3dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562a0db3e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562a0db3d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562a0db3d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562a0db3d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562a1241f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562a124287b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562a12410529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562a1243afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0b69b26082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562a0bd5f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c,0x26,0xdb,0xbf, Step #5: |&\333\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-755c7185fab0b9e2d3d422062135a9a19f5dfed1 Step #5: Base64: fCbbvw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 520 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3895150810 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea445d6d60, 0x55ea447bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea447bf720,0x55ea466492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/755c7185fab0b9e2d3d422062135a9a19f5dfed1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 563 processed earlier; will process 10413 files now Step #5: ==18754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea3b1192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea41754728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea4173746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea4173738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea3b11f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea3b08042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea3b07ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea3b111595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea3e1408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea3e1408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea3e1408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea3e1408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea3e1408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea3e1408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea3e1408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea3e1408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea3e1408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea3e1408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea4034545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea3d0a1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea3d0ac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea3ce57d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea3ce57d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea3ce58808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea3ce57944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea3ce57944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea3ce57944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea4173994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea417427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea4172a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea41754fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f34ff31a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea3b07943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x4f,0x34,0x32, Step #5: 0O42 Step #5: artifact_prefix='./'; Test unit written to ./oom-d56b68b9e2cbb02011a146d2a634011bfc1fe8b2 Step #5: Base64: ME80Mg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 521 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3895601422 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b10eef0d60, 0x55b10f0d971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b10f0d9720,0x55b110f632c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d56b68b9e2cbb02011a146d2a634011bfc1fe8b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 564 processed earlier; will process 10412 files now Step #5: ==18790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b105a332d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b10c06e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b10c05146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b10c05138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b105a39652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b10599a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b105994c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b105a2b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b108a5a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b108a5a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b108a5a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b108a5a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b108a5a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b108a5a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b108a5a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b108a5a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b108a5a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b108a5a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b10ac5f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b1079bb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1079c65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b107771d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b107771d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b107772808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b107771944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b107771944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b107771944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b10c05394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b10c05c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b10c044529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b10c06efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb9d2bfb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b10599343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0x9f,0xb5, Step #5: \364\217\237\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-1364d85dd47c79cf848fb173e76445e42cba3dd4 Step #5: Base64: 9I+ftQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 522 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3896056307 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ba0e0ccd60, 0x55ba0e2b571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ba0e2b5720,0x55ba1013f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1364d85dd47c79cf848fb173e76445e42cba3dd4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 565 processed earlier; will process 10411 files now Step #5: ==18826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ba04c0f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ba0b24a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ba0b22d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ba0b22d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ba04c15652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ba04b7642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ba04b70c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ba04c07595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ba07c368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ba07c368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ba07c368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ba07c368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ba07c368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ba07c368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ba07c368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ba07c368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ba07c368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ba07c368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ba09e3b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ba06b97578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ba06ba25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ba0694dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ba0694dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ba0694e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ba0694d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ba0694d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ba0694d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ba0b22f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ba0b2387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ba0b220529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ba0b24afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4983551082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ba04b6f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x41,0x51,0x51, Step #5: RAQQ Step #5: artifact_prefix='./'; Test unit written to ./oom-04dca612fda9e369278031ed294d2611ea8a17e4 Step #5: Base64: UkFRUQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 523 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3896503536 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5620512bdd60, 0x5620514a671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5620514a6720,0x5620533302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04dca612fda9e369278031ed294d2611ea8a17e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 566 processed earlier; will process 10410 files now Step #5: ==18862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562047e002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56204e43b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56204e41e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56204e41e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562047e06652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562047d6742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562047d61c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562047df8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56204ae278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56204ae278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56204ae278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56204ae278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56204ae278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56204ae278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56204ae278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56204ae278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56204ae278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56204ae278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56204d02c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562049d88578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562049d935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562049b3ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562049b3ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562049b3f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562049b3e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562049b3e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562049b3e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56204e42094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56204e4297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56204e411529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56204e43bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f54f9b25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562047d6043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0xc2,0xbd,0x27, Step #5: S\302\275' Step #5: artifact_prefix='./'; Test unit written to ./oom-77cbd95f053940bfc6ab0060728e2176704a41ff Step #5: Base64: U8K9Jw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 524 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3896950753 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f835e82d60, 0x55f83606b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f83606b720,0x55f837ef52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/77cbd95f053940bfc6ab0060728e2176704a41ff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 567 processed earlier; will process 10409 files now Step #5: ==18898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f82c9c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f833000728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f832fe346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f832fe338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f82c9cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f82c92c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f82c926c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f82c9bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f82f9ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f82f9ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f82f9ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f82f9ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f82f9ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f82f9ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f82f9ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f82f9ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f82f9ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f82f9ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f831bf145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f82e94d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f82e9585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f82e703d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f82e703d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f82e704808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f82e703944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f82e703944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f82e703944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f832fe594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f832fee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f832fd6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f833000fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8c3d7c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f82c92543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x3e,0x42, Step #5: - >B Step #5: artifact_prefix='./'; Test unit written to ./oom-3d32fb4a8aacad343dba8e03b9c5cc342a1268d6 Step #5: Base64: LSA+Qg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 525 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3897392151 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a72f2fed60, 0x55a72f4e771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a72f4e7720,0x55a7313712c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d32fb4a8aacad343dba8e03b9c5cc342a1268d6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 568 processed earlier; will process 10408 files now Step #5: ==18934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a725e412d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a72c47c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a72c45f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a72c45f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a725e47652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a725da842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a725da2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a725e39595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a728e688c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a728e688c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a728e688c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a728e688c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a728e688c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a728e688c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a728e688c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a728e688c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a728e688c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a728e688c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a72b06d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a727dc9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a727dd45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a727b7fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a727b7fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a727b80808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a727b7f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a727b7f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a727b7f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a72c46194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a72c46a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a72c452529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a72c47cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d7ee97082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a725da143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x6d,0x24,0x6d, Step #5: $m$m Step #5: artifact_prefix='./'; Test unit written to ./oom-2d071d4fab55454afaf682119370590f6af18eaa Step #5: Base64: JG0kbQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 526 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3897834273 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d46f3e3d60, 0x55d46f5cc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d46f5cc720,0x55d4714562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d071d4fab55454afaf682119370590f6af18eaa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 569 processed earlier; will process 10407 files now Step #5: ==18970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d465f262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d46c561728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d46c54446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d46c54438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d465f2c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d465e8d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d465e87c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d465f1e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d468f4d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d468f4d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d468f4d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d468f4d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d468f4d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d468f4d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d468f4d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d468f4d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d468f4d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d468f4d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d46b15245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d467eae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d467eb95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d467c64d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d467c64d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d467c65808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d467c64944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d467c64944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d467c64944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d46c54694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d46c54f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d46c537529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d46c561fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1573af1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d465e8643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0xbb,0xdc,0xb5, Step #5: \334\273\334\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-9920b2c2c88ca4971191e0e64b1bdc8ed26460f4 Step #5: Base64: 3LvctQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 527 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3898274784 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559833e33d60, 0x55983401c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55983401c720,0x559835ea62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9920b2c2c88ca4971191e0e64b1bdc8ed26460f4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 570 processed earlier; will process 10406 files now Step #5: #1 pulse cov: 3403 ft: 3404 exec/s: 0 rss: 157Mb Step #5: ==19006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55982a9762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559830fb1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559830f9446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559830f9438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55982a97c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55982a8dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55982a8d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55982a96e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55982d99d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55982d99d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55982d99d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55982d99d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55982d99d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55982d99d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55982d99d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55982d99d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55982d99d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55982d99d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55982fba245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55982c8fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55982c9095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55982c6b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55982c6b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55982c6b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55982c6b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55982c6b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55982c6b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559830f9694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559830f9f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559830f87529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559830fb1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba3838f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55982a8d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x1,0x1d,0x4d, Step #5: D\001\035M Step #5: artifact_prefix='./'; Test unit written to ./oom-65324671c009c6add3d99679cc8aeb243bc67359 Step #5: Base64: RAEdTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 528 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3898757529 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56406dac7d60, 0x56406dcb071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56406dcb0720,0x56406fb3a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/65324671c009c6add3d99679cc8aeb243bc67359' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 572 processed earlier; will process 10404 files now Step #5: ==19042== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56406460a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56406ac45728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56406ac2846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56406ac2838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564064610652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56406457142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56406456bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564064602595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5640676318c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5640676318c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5640676318c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5640676318c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5640676318c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5640676318c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5640676318c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5640676318c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5640676318c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5640676318c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56406983645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564066592578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56406659d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564066348d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564066348d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564066349808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564066348944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564066348944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564066348944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56406ac2a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56406ac337b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56406ac1b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56406ac45fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f74a29e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56406456a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x68,0x74,0x68, Step #5: xhth Step #5: artifact_prefix='./'; Test unit written to ./oom-341b5ad30dbad5c398dee8c52f054d55bba42f90 Step #5: Base64: eGh0aA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 529 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3899207550 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556471005d60, 0x5564711ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5564711ee720,0x5564730782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/341b5ad30dbad5c398dee8c52f054d55bba42f90' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 573 processed earlier; will process 10403 files now Step #5: ==19078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556467b482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55646e183728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55646e16646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55646e16638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556467b4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556467aaf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556467aa9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556467b40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55646ab6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55646ab6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55646ab6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55646ab6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55646ab6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55646ab6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55646ab6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55646ab6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55646ab6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55646ab6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55646cd7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556469ad0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556469adb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556469886d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556469886d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556469887808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556469886944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556469886944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556469886944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55646e16894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55646e1717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55646e159529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55646e183fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcbefddb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556467aa843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x2,0x42,0x0, Step #5: 0\002B\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4871f93fee5a71388a436cb2698de6143da565c4 Step #5: Base64: MAJCAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 530 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3899650835 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cbf269bd60, 0x55cbf288471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cbf2884720,0x55cbf470e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4871f93fee5a71388a436cb2698de6143da565c4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 574 processed earlier; will process 10402 files now Step #5: ==19114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cbe91de2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cbef819728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cbef7fc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cbef7fc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cbe91e4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cbe914542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cbe913fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cbe91d6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cbec2058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cbec2058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cbec2058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cbec2058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cbec2058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cbec2058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cbec2058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cbec2058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cbec2058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cbec2058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cbee40a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cbeb166578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cbeb1715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cbeaf1cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cbeaf1cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cbeaf1d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cbeaf1c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cbeaf1c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cbeaf1c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cbef7fe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cbef8077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cbef7ef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cbef819fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa9493bf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cbe913e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0xa,0xa, Step #5: $$\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-00c2fa4eae5010370e9e06244f9b521a1f8d7476 Step #5: Base64: JCQKCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 531 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3900097364 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cb944d6d60, 0x55cb946bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cb946bf720,0x55cb965492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00c2fa4eae5010370e9e06244f9b521a1f8d7476' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 575 processed earlier; will process 10401 files now Step #5: ==19150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cb8b0192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cb91654728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cb9163746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cb9163738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cb8b01f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cb8af8042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cb8af7ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cb8b011595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cb8e0408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cb8e0408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cb8e0408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cb8e0408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cb8e0408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cb8e0408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cb8e0408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cb8e0408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cb8e0408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cb8e0408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cb9024545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cb8cfa1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cb8cfac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cb8cd57d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cb8cd57d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cb8cd58808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cb8cd57944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cb8cd57944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cb8cd57944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cb9163994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cb916427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cb9162a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cb91654fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff4d4e5f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cb8af7943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc9,0xa1,0xcd,0x84, Step #5: \311\241\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-2af3842fde194465586526b7ca1d6feae8e181ce Step #5: Base64: yaHNhA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 532 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3900542635 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b9ed6dbd60, 0x55b9ed8c471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b9ed8c4720,0x55b9ef74e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2af3842fde194465586526b7ca1d6feae8e181ce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 576 processed earlier; will process 10400 files now Step #5: ==19186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b9e421e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b9ea859728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b9ea83c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b9ea83c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b9e4224652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b9e418542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b9e417fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b9e4216595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9e72458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9e72458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9e72458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9e72458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9e72458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9e72458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9e72458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9e72458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9e72458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9e72458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b9e944a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9e61a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9e61b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b9e5f5cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b9e5f5cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b9e5f5d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b9e5f5c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b9e5f5c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b9e5f5c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b9ea83e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b9ea8477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b9ea82f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b9ea859fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f598afe9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b9e417e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x44,0xb,0xa, Step #5: \013D\013\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-a2a3d85e4ca444145d0339f865dc2e3c1ed5b53b Step #5: Base64: C0QLCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 533 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3900985570 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0352fbd60, 0x55a0354e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0354e4720,0x55a03736e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2a3d85e4ca444145d0339f865dc2e3c1ed5b53b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 577 processed earlier; will process 10399 files now Step #5: ==19222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a02be3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a032479728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a03245c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a03245c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a02be44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a02bda542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a02bd9fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a02be36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a02ee658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a02ee658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a02ee658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a02ee658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a02ee658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a02ee658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a02ee658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a02ee658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a02ee658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a02ee658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a03106a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a02ddc6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a02ddd15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a02db7cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a02db7cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a02db7d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a02db7c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a02db7c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a02db7c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a03245e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0324677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a03244f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a032479fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f50a23b5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a02bd9e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xef,0xb8,0x8f, Step #5: \"\357\270\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-fee0c1539c5a7279c1a51f403bcae093ac6455af Step #5: Base64: Iu+4jw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 534 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3901436491 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eac617bd60, 0x55eac636471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eac6364720,0x55eac81ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fee0c1539c5a7279c1a51f403bcae093ac6455af' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 578 processed earlier; will process 10398 files now Step #5: ==19258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eabccbe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eac32f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eac32dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eac32dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eabccc4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eabcc2542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eabcc1fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eabccb6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eabfce58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eabfce58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eabfce58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eabfce58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eabfce58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eabfce58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eabfce58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eabfce58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eabfce58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eabfce58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eac1eea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eabec46578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eabec515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eabe9fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eabe9fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eabe9fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eabe9fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eabe9fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eabe9fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eac32de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eac32e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eac32cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eac32f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc973893082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eabcc1e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x3a,0x30,0x28, Step #5: 2:0( Step #5: artifact_prefix='./'; Test unit written to ./oom-4bed5e91896e6adc187a3b5b24a21028943faff5 Step #5: Base64: MjowKA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 535 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3901878156 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a64549dd60, 0x55a64568671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a645686720,0x55a6475102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4bed5e91896e6adc187a3b5b24a21028943faff5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 579 processed earlier; will process 10397 files now Step #5: ==19294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a63bfe02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a64261b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a6425fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a6425fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a63bfe6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a63bf4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a63bf41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a63bfd8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a63f0078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a63f0078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a63f0078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a63f0078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a63f0078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a63f0078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a63f0078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a63f0078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a63f0078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a63f0078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a64120c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a63df68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a63df735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a63dd1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a63dd1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a63dd1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a63dd1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a63dd1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a63dd1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a64260094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a6426097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a6425f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a64261bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f15b61ce082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a63bf4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xef,0xbc,0x88, Step #5: <\357\274\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-0f6ea9cd44c02f0e93b000d5060b28c8fb4f3b88 Step #5: Base64: PO+8iA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 536 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3902328211 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56497cc2ed60, 0x56497ce1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56497ce17720,0x56497eca12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f6ea9cd44c02f0e93b000d5060b28c8fb4f3b88' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 580 processed earlier; will process 10396 files now Step #5: ==19330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5649737712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564979dac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564979d8f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564979d8f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564973777652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5649736d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5649736d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564973769595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5649767988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5649767988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5649767988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5649767988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5649767988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5649767988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5649767988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5649767988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5649767988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5649767988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56497899d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5649756f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5649757045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5649754afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5649754afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5649754b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5649754af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5649754af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5649754af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564979d9194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564979d9a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564979d82529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564979dacfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd281d5f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5649736d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x0,0x6e,0x4d, Step #5: \001\000nM Step #5: artifact_prefix='./'; Test unit written to ./oom-4dbffaa08725156865fe4cef14fa5962030ddb07 Step #5: Base64: AQBuTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 537 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3902800597 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564744874d60, 0x564744a5d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564744a5d720,0x5647468e72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4dbffaa08725156865fe4cef14fa5962030ddb07' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 581 processed earlier; will process 10395 files now Step #5: ==19366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56473b3b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5647419f2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5647419d546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5647419d538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56473b3bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56473b31e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56473b318c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56473b3af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56473e3de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56473e3de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56473e3de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56473e3de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56473e3de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56473e3de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56473e3de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56473e3de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56473e3de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56473e3de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5647405e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56473d33f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56473d34a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56473d0f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56473d0f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56473d0f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56473d0f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56473d0f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56473d0f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5647419d794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5647419e07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5647419c8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5647419f2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f41cbb76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56473b31743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x31,0x20,0xd, Step #5: P1 \015 Step #5: artifact_prefix='./'; Test unit written to ./oom-5247c13a159c4e83b8a8e85169471fa415d2051e Step #5: Base64: UDEgDQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 538 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3903247532 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f35a24cd60, 0x55f35a43571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f35a435720,0x55f35c2bf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5247c13a159c4e83b8a8e85169471fa415d2051e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 582 processed earlier; will process 10394 files now Step #5: ==19402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f350d8f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f3573ca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f3573ad46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f3573ad38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f350d95652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f350cf642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f350cf0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f350d87595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f353db68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f353db68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f353db68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f353db68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f353db68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f353db68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f353db68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f353db68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f353db68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f353db68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f355fbb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f352d17578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f352d225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f352acdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f352acdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f352ace808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f352acd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f352acd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f352acd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f3573af94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f3573b87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f3573a0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f3573cafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff24752c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f350cef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x31,0x54,0x1a, Step #5: \0121T\032 Step #5: artifact_prefix='./'; Test unit written to ./oom-3742c700a9f5978da05eb06f344de5471e6da05d Step #5: Base64: CjFUGg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 539 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3903705512 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bed9949d60, 0x55bed9b3271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bed9b32720,0x55bedb9bc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3742c700a9f5978da05eb06f344de5471e6da05d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 583 processed earlier; will process 10393 files now Step #5: ==19438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bed048c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bed6ac7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bed6aaa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bed6aaa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bed0492652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bed03f342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bed03edc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bed0484595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bed34b38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bed34b38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bed34b38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bed34b38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bed34b38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bed34b38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bed34b38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bed34b38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bed34b38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bed34b38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bed56b845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bed2414578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bed241f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bed21cad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bed21cad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bed21cb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bed21ca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bed21ca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bed21ca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bed6aac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bed6ab57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bed6a9d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bed6ac7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3166540082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bed03ec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x23,0x30,0xa, Step #5: �\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-5a14fe995564c1980305479d5b18a2c5799b4a1f Step #5: Base64: JiMwCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 540 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3904149409 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56262f30fd60, 0x56262f4f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56262f4f8720,0x5626313822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5a14fe995564c1980305479d5b18a2c5799b4a1f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 584 processed earlier; will process 10392 files now Step #5: #1 pulse cov: 3469 ft: 3470 exec/s: 0 rss: 156Mb Step #5: ==19474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562625e522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56262c48d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56262c47046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56262c47038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562625e58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562625db942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562625db3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562625e4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562628e798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562628e798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562628e798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562628e798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562628e798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562628e798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562628e798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562628e798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562628e798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562628e798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56262b07e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562627dda578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562627de55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562627b90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562627b90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562627b91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562627b90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562627b90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562627b90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56262c47294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56262c47b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56262c463529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56262c48dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5466a0b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562625db243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x90,0x90,0x80, Step #5: \360\220\220\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-534afaee86a82f32bb592a608a465d996ba0c38d Step #5: Base64: 8JCQgA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 541 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3904637548 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ce44aedd60, 0x55ce44cd671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ce44cd6720,0x55ce46b602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/534afaee86a82f32bb592a608a465d996ba0c38d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 586 processed earlier; will process 10390 files now Step #5: ==19510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ce3b6302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ce41c6b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ce41c4e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ce41c4e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ce3b636652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ce3b59742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ce3b591c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ce3b628595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ce3e6578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ce3e6578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ce3e6578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ce3e6578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ce3e6578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ce3e6578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ce3e6578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ce3e6578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ce3e6578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ce3e6578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ce4085c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ce3d5b8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ce3d5c35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ce3d36ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ce3d36ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ce3d36f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ce3d36e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ce3d36e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ce3d36e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ce41c5094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ce41c597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ce41c41529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ce41c6bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4239806082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ce3b59043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5c,0xb,0x5c, Step #5: [\\\013\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-0364c0dbb53cc81a6b747eb7d78879c235863bc1 Step #5: Base64: W1wLXA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 542 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3905086957 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b3d92bdd60, 0x55b3d94a671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b3d94a6720,0x55b3db3302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0364c0dbb53cc81a6b747eb7d78879c235863bc1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 587 processed earlier; will process 10389 files now Step #5: ==19546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b3cfe002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b3d643b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b3d641e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b3d641e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b3cfe06652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b3cfd6742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b3cfd61c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b3cfdf8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b3d2e278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b3d2e278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b3d2e278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b3d2e278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b3d2e278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b3d2e278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b3d2e278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b3d2e278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b3d2e278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b3d2e278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b3d502c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b3d1d88578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b3d1d935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b3d1b3ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b3d1b3ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b3d1b3f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b3d1b3e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b3d1b3e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b3d1b3e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b3d642094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b3d64297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b3d6411529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b3d643bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa6b646e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b3cfd6043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbd,0xb6,0x3d, Step #5: \340\275\266= Step #5: artifact_prefix='./'; Test unit written to ./oom-866b865ff43d088591b0f5d588bbc57feb08b179 Step #5: Base64: 4L22PQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 543 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3905534045 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555f071e9d60, 0x555f073d271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555f073d2720,0x555f0925c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/866b865ff43d088591b0f5d588bbc57feb08b179' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 588 processed earlier; will process 10388 files now Step #5: ==19582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555efdd2c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555f04367728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555f0434a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555f0434a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555efdd32652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555efdc9342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555efdc8dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555efdd24595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555f00d538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555f00d538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555f00d538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555f00d538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555f00d538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555f00d538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555f00d538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555f00d538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555f00d538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555f00d538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555f02f5845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555effcb4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555effcbf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555effa6ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555effa6ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555effa6b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555effa6a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555effa6a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555effa6a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555f0434c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555f043557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555f0433d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555f04367fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbcef958082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555efdc8c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x31,0x32,0x38, Step #5: 2128 Step #5: artifact_prefix='./'; Test unit written to ./oom-78c217d6e87dedb3ff90a522b3b1f9879145c39b Step #5: Base64: MjEyOA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 544 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3905980435 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e924e19d60, 0x55e92500271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e925002720,0x55e926e8c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/78c217d6e87dedb3ff90a522b3b1f9879145c39b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 589 processed earlier; will process 10387 files now Step #5: ==19618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e91b95c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e921f97728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e921f7a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e921f7a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e91b962652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e91b8c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e91b8bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e91b954595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e91e9838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e91e9838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e91e9838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e91e9838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e91e9838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e91e9838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e91e9838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e91e9838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e91e9838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e91e9838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e920b8845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e91d8e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e91d8ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e91d69ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e91d69ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e91d69b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e91d69a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e91d69a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e91d69a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e921f7c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e921f857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e921f6d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e921f97fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7fa2e65082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e91b8bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x2f,0x2f,0x40, Step #5: &//@ Step #5: artifact_prefix='./'; Test unit written to ./oom-f6cb74968dbb70a690b369ddee555f9f75f319da Step #5: Base64: Ji8vQA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 545 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3906422746 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561ddefe0d60, 0x561ddf1c971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561ddf1c9720,0x561de10532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f6cb74968dbb70a690b369ddee555f9f75f319da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 590 processed earlier; will process 10386 files now Step #5: ==19654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561dd5b232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ddc15e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ddc14146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ddc14138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561dd5b29652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561dd5a8a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561dd5a84c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561dd5b1b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561dd8b4a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561dd8b4a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561dd8b4a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561dd8b4a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561dd8b4a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561dd8b4a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561dd8b4a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561dd8b4a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561dd8b4a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561dd8b4a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ddad4f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561dd7aab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561dd7ab65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561dd7861d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561dd7861d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561dd7862808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561dd7861944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561dd7861944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561dd7861944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ddc14394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ddc14c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ddc134529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ddc15efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f72333ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561dd5a8343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x6c,0x3a,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-24ea30e758ce4da239458494f35a28bb7d7052de Step #5: Base64: PGw6Pg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 546 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3906861862 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564e5466cd60, 0x564e5485571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564e54855720,0x564e566df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/24ea30e758ce4da239458494f35a28bb7d7052de' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 591 processed earlier; will process 10385 files now Step #5: ==19690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564e4b1af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564e517ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564e517cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564e517cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564e4b1b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564e4b11642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564e4b110c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564e4b1a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564e4e1d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564e4e1d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564e4e1d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564e4e1d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564e4e1d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564e4e1d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564e4e1d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564e4e1d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564e4e1d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564e4e1d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564e503db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564e4d137578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564e4d1425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564e4ceedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564e4ceedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564e4ceee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564e4ceed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564e4ceed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564e4ceed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564e517cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564e517d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564e517c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564e517eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0f8c561082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564e4b10f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d, Step #5: DanM Step #5: artifact_prefix='./'; Test unit written to ./oom-2df44406c5ab1ddcb231804f74b442e46a7e462f Step #5: Base64: RGFuTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 547 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3907307029 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564e0580ed60, 0x564e059f771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564e059f7720,0x564e078812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2df44406c5ab1ddcb231804f74b442e46a7e462f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 592 processed earlier; will process 10384 files now Step #5: ==19726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564dfc3512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564e0298c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564e0296f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564e0296f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564dfc357652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564dfc2b842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564dfc2b2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564dfc349595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564dff3788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564dff3788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564dff3788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564dff3788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564dff3788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564dff3788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564dff3788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564dff3788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564dff3788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564dff3788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564e0157d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564dfe2d9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564dfe2e45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564dfe08fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564dfe08fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564dfe090808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564dfe08f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564dfe08f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564dfe08f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564e0297194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564e0297a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564e02962529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564e0298cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3db79bd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564dfc2b143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3c,0x77,0x3e, Step #5: ( Step #5: artifact_prefix='./'; Test unit written to ./oom-b50de48adda629150492e9e7ea831b16a50c9cdd Step #5: Base64: KDx3Pg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 548 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3907757809 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bf06c2fd60, 0x55bf06e1871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bf06e18720,0x55bf08ca22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b50de48adda629150492e9e7ea831b16a50c9cdd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 593 processed earlier; will process 10383 files now Step #5: ==19762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55befd7722d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bf03dad728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bf03d9046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bf03d9038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55befd778652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55befd6d942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55befd6d3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55befd76a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bf007998c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bf007998c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bf007998c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bf007998c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bf007998c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bf007998c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bf007998c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bf007998c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bf007998c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bf007998c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bf0299e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55beff6fa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55beff7055a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55beff4b0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55beff4b0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55beff4b1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55beff4b0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55beff4b0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55beff4b0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bf03d9294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bf03d9b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bf03d83529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bf03dadfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22cf312082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55befd6d243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x40,0x20,0x20, Step #5: @ Step #5: artifact_prefix='./'; Test unit written to ./oom-f80c5382a4e5d12d5bf0d9697bdf4ced00785f46 Step #5: Base64: IEAgIA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 549 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3908193514 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a38b8add60, 0x55a38ba9671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a38ba96720,0x55a38d9202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f80c5382a4e5d12d5bf0d9697bdf4ced00785f46' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 594 processed earlier; will process 10382 files now Step #5: ==19798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3823f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a388a2b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a388a0e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a388a0e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3823f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a38235742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a382351c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3823e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3854178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3854178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3854178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3854178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3854178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3854178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3854178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3854178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3854178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3854178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a38761c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a384378578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3843835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a38412ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a38412ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a38412f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a38412e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a38412e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a38412e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a388a1094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a388a197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a388a01529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a388a2bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1b3fae5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a38235043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x61,0x13,0x0, Step #5: \000a\023\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-5b4c7710b7cff37dd6b6b6ea0bf706c085e60844 Step #5: Base64: AGETAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 550 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3908637651 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563610bb7d60, 0x563610da071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563610da0720,0x563612c2a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5b4c7710b7cff37dd6b6b6ea0bf706c085e60844' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 595 processed earlier; will process 10381 files now Step #5: ==19834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5636076fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56360dd35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56360dd1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56360dd1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563607700652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56360766142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56360765bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5636076f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56360a7218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56360a7218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56360a7218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56360a7218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56360a7218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56360a7218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56360a7218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56360a7218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56360a7218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56360a7218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56360c92645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563609682578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56360968d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563609438d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563609438d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563609439808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563609438944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563609438944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563609438944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56360dd1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56360dd237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56360dd0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56360dd35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0f8dfdb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56360765a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbe,0xa0,0x0, Step #5: \357\276\240\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f7df5c16d00fef608ab5f1a7459e4ba4caec9005 Step #5: Base64: 776gAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 551 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3909083475 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56013f82dd60, 0x56013fa1671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56013fa16720,0x5601418a02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7df5c16d00fef608ab5f1a7459e4ba4caec9005' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 596 processed earlier; will process 10380 files now Step #5: ==19870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601363702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56013c9ab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56013c98e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56013c98e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560136376652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5601362d742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5601362d1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560136368595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601393978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601393978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601393978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601393978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601393978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601393978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601393978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601393978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601393978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601393978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56013b59c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601382f8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601383035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601380aed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601380aed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601380af808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601380ae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601380ae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601380ae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56013c99094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56013c9997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56013c981529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56013c9abfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd3205b8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5601362d043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xd2,0xbb,0xa, Step #5: \000\322\273\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-88e0d72650f46a6e71551e19249ee11525016b05 Step #5: Base64: ANK7Cg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 552 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3909538578 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55acb734ed60, 0x55acb753771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55acb7537720,0x55acb93c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/88e0d72650f46a6e71551e19249ee11525016b05' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 597 processed earlier; will process 10379 files now Step #5: ==19906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55acade912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55acb44cc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55acb44af46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55acb44af38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55acade97652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55acaddf842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55acaddf2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55acade89595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55acb0eb88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55acb0eb88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55acb0eb88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55acb0eb88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55acb0eb88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55acb0eb88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55acb0eb88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55acb0eb88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55acb0eb88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55acb0eb88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55acb30bd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55acafe19578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55acafe245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55acafbcfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55acafbcfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55acafbd0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55acafbcf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55acafbcf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55acafbcf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55acb44b194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55acb44ba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55acb44a2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55acb44ccfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f297fede082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55acaddf143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x6f,0x72,0x6d, Step #5: Form Step #5: artifact_prefix='./'; Test unit written to ./oom-80446347ede53cf9ce56b3d59fda4b5c96dc25c4 Step #5: Base64: Rm9ybQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 553 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3909985738 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561926eefd60, 0x5619270d871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619270d8720,0x561928f622c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80446347ede53cf9ce56b3d59fda4b5c96dc25c4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 598 processed earlier; will process 10378 files now Step #5: ==19942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56191da322d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56192406d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56192405046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56192405038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56191da38652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56191d99942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56191d993c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56191da2a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561920a598c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561920a598c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561920a598c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561920a598c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561920a598c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561920a598c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561920a598c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561920a598c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561920a598c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561920a598c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561922c5e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56191f9ba578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56191f9c55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56191f770d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56191f770d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56191f771808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56191f770944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56191f770944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56191f770944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56192405294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56192405b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561924043529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56192406dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff963330082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56191d99243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc,0xc,0xc,0xc, Step #5: \014\014\014\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-28f40c9ade49b97b030a35a36f2e0f4c7c3a08f1 Step #5: Base64: DAwMDA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 554 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3910415746 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562db63cdd60, 0x562db65b671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562db65b6720,0x562db84402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28f40c9ade49b97b030a35a36f2e0f4c7c3a08f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 599 processed earlier; will process 10377 files now Step #5: ==19978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562dacf102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562db354b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562db352e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562db352e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562dacf16652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562dace7742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562dace71c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562dacf08595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562daff378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562daff378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562daff378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562daff378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562daff378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562daff378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562daff378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562daff378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562daff378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562daff378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562db213c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562daee98578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562daeea35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562daec4ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562daec4ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562daec4f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562daec4e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562daec4e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562daec4e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562db353094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562db35397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562db3521529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562db354bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc02caf2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562dace7043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x0,0xcd,0xac, Step #5: S\000\315\254 Step #5: artifact_prefix='./'; Test unit written to ./oom-2f5763a8826b16b0bf2550f52b0388d1c3f4ac7d Step #5: Base64: UwDNrA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 555 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3910869901 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a893dbd60, 0x564a895c471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a895c4720,0x564a8b44e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f5763a8826b16b0bf2550f52b0388d1c3f4ac7d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 600 processed earlier; will process 10376 files now Step #5: ==20014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a7ff1e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a86559728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a8653c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a8653c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a7ff24652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a7fe8542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a7fe7fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a7ff16595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a82f458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a82f458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a82f458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a82f458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a82f458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a82f458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a82f458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a82f458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a82f458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a82f458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a8514a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a81ea6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a81eb15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a81c5cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a81c5cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a81c5d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a81c5c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a81c5c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a81c5c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a8653e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a865477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a8652f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a86559fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f24a4b30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a7fe7e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0xa,0xde,0x99, Step #5: H\012\336\231 Step #5: artifact_prefix='./'; Test unit written to ./oom-146327395fa6a67e28f5a5fa8f2e4978cb1239a8 Step #5: Base64: SAremQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 556 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3911314319 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559addeb9d60, 0x559ade0a271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559ade0a2720,0x559adff2c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/146327395fa6a67e28f5a5fa8f2e4978cb1239a8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 601 processed earlier; will process 10375 files now Step #5: ==20050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559ad49fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559adb037728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559adb01a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559adb01a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559ad4a02652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559ad496342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559ad495dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559ad49f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ad7a238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ad7a238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ad7a238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ad7a238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ad7a238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ad7a238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ad7a238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ad7a238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ad7a238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ad7a238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559ad9c2845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559ad6984578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559ad698f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559ad673ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559ad673ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559ad673b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559ad673a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559ad673a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559ad673a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559adb01c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559adb0257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559adb00d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559adb037fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3bf12f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559ad495c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f,0xa,0x24,0x24, Step #5: \177\012$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-11aff4eec32f2f8a829877d57d9dc6520f9d1cf9 Step #5: Base64: fwokJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 557 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3911757312 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5615eac58d60, 0x5615eae4171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5615eae41720,0x5615ecccb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11aff4eec32f2f8a829877d57d9dc6520f9d1cf9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 602 processed earlier; will process 10374 files now Step #5: ==20086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615e179b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5615e7dd6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5615e7db946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5615e7db938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5615e17a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615e170242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615e16fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5615e1793595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615e47c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615e47c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615e47c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615e47c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615e47c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615e47c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615e47c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615e47c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615e47c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615e47c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5615e69c745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5615e3723578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615e372e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615e34d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615e34d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615e34da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615e34d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615e34d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615e34d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5615e7dbb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5615e7dc47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5615e7dac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5615e7dd6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff7c2ed1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615e16fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x91,0x84,0x80, Step #5: \360\221\204\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-a3e64ce609486db00614861752524ecd62e95bb3 Step #5: Base64: 8JGEgA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 558 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3912226225 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564b58e42d60, 0x564b5902b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564b5902b720,0x564b5aeb52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a3e64ce609486db00614861752524ecd62e95bb3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 603 processed earlier; will process 10373 files now Step #5: ==20122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564b4f9852d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564b55fc0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564b55fa346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564b55fa338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564b4f98b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564b4f8ec42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564b4f8e6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564b4f97d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564b529ac8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564b529ac8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564b529ac8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564b529ac8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564b529ac8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564b529ac8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564b529ac8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564b529ac8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564b529ac8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564b529ac8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564b54bb145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564b5190d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564b519185a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564b516c3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564b516c3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564b516c4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564b516c3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564b516c3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564b516c3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564b55fa594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564b55fae7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564b55f96529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564b55fc0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb1130e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564b4f8e543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9d,0x85,0xb1, Step #5: \360\235\205\261 Step #5: artifact_prefix='./'; Test unit written to ./oom-beb09eaa338a615348c6a2fe9637f28453761058 Step #5: Base64: 8J2FsQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 559 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3912675755 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55587ee19d60, 0x55587f00271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55587f002720,0x555880e8c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/beb09eaa338a615348c6a2fe9637f28453761058' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 604 processed earlier; will process 10372 files now Step #5: ==20158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55587595c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55587bf97728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55587bf7a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55587bf7a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555875962652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5558758c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5558758bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555875954595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5558789838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5558789838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5558789838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5558789838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5558789838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5558789838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5558789838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5558789838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5558789838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5558789838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55587ab8845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5558778e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5558778ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55587769ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55587769ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55587769b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55587769a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55587769a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55587769a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55587bf7c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55587bf857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55587bf6d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55587bf97fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f210cbfc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5558758bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x58,0x5c,0x58, Step #5: \\X\\X Step #5: artifact_prefix='./'; Test unit written to ./oom-a0a6d51c403dcdfcc0f7fdd36627e238987f6c27 Step #5: Base64: XFhcWA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 560 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3913131474 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5616b232dd60, 0x5616b251671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5616b2516720,0x5616b43a02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a0a6d51c403dcdfcc0f7fdd36627e238987f6c27' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 605 processed earlier; will process 10371 files now Step #5: ==20194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616a8e702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5616af4ab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5616af48e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5616af48e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616a8e76652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616a8dd742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616a8dd1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616a8e68595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616abe978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616abe978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616abe978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616abe978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616abe978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616abe978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616abe978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616abe978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616abe978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616abe978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5616ae09c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616aadf8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616aae035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616aabaed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616aabaed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616aabaf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616aabae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616aabae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616aabae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5616af49094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5616af4997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5616af481529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5616af4abfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8d101b1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616a8dd043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x9,0x5b,0x9, Step #5: '\011[\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-b0d445c7ba5cd06aca122f0171bc158d3ed43979 Step #5: Base64: JwlbCQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 561 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3913578758 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56462bbc5d60, 0x56462bdae71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56462bdae720,0x56462dc382c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b0d445c7ba5cd06aca122f0171bc158d3ed43979' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 606 processed earlier; will process 10370 files now Step #5: ==20230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5646227082d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564628d43728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564628d2646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564628d2638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56462270e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56462266f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564622669c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564622700595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56462572f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56462572f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56462572f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56462572f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56462572f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56462572f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56462572f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56462572f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56462572f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56462572f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56462793445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564624690578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56462469b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564624446d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564624446d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564624447808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564624446944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564624446944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564624446944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564628d2894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564628d317b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564628d19529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564628d43fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe163f8a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56462266843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xb5,0xf3,0x0, Step #5: \326\265\363\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-d93467bc4fd53ce5d4cfaf0d82f80c9ccdda7726 Step #5: Base64: 1rXzAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 562 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3914026447 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e4bf14fd60, 0x55e4bf33871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e4bf338720,0x55e4c11c22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d93467bc4fd53ce5d4cfaf0d82f80c9ccdda7726' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 607 processed earlier; will process 10369 files now Step #5: ==20266== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e4b5c922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e4bc2cd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e4bc2b046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e4bc2b038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e4b5c98652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e4b5bf942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e4b5bf3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e4b5c8a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e4b8cb98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e4b8cb98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e4b8cb98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e4b8cb98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e4b8cb98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e4b8cb98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e4b8cb98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e4b8cb98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e4b8cb98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e4b8cb98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e4baebe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e4b7c1a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e4b7c255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e4b79d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e4b79d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e4b79d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e4b79d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e4b79d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e4b79d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e4bc2b294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e4bc2bb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e4bc2a3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e4bc2cdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f39975db082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e4b5bf243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0xbe,0x80, Step #5: \364\217\276\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-38e1c878e88bc77c7f4b313f2b57ab5056539ecd Step #5: Base64: 9I++gA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 563 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3914476003 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56341786ed60, 0x563417a5771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563417a57720,0x5634198e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/38e1c878e88bc77c7f4b313f2b57ab5056539ecd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 608 processed earlier; will process 10368 files now Step #5: ==20302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56340e3b12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5634149ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5634149cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5634149cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56340e3b7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56340e31842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56340e312c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56340e3a9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634113d88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634113d88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634113d88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634113d88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634113d88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634113d88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634113d88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634113d88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634113d88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634113d88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5634135dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563410339578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634103445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5634100efd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5634100efd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5634100f0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5634100ef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5634100ef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5634100ef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5634149d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5634149da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5634149c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5634149ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f32d50cf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56340e31143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x2,0x2,0x2b, Step #5: r\002\002+ Step #5: artifact_prefix='./'; Test unit written to ./oom-50470c7bfa39be3b301dcfa56f27197be99a967c Step #5: Base64: cgICKw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 564 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3914922271 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55965bbcad60, 0x55965bdb371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55965bdb3720,0x55965dc3d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/50470c7bfa39be3b301dcfa56f27197be99a967c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 609 processed earlier; will process 10367 files now Step #5: #1 pulse cov: 3474 ft: 3475 exec/s: 0 rss: 154Mb Step #5: ==20338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55965270d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559658d48728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559658d2b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559658d2b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559652713652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55965267442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55965266ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559652705595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5596557348c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5596557348c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5596557348c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5596557348c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5596557348c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5596557348c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5596557348c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5596557348c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5596557348c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5596557348c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55965793945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559654695578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5596546a05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55965444bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55965444bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55965444c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55965444b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55965444b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55965444b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559658d2d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559658d367b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559658d1e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559658d48fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82f4108082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55965266d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0xe1,0x9f,0x96, Step #5: ?\341\237\226 Step #5: artifact_prefix='./'; Test unit written to ./oom-0582db50fadbc0de1e2447c4dc70c781f7ea9059 Step #5: Base64: P+Gflg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 565 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3915409230 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a3f2cdfd60, 0x55a3f2ec871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a3f2ec8720,0x55a3f4d522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0582db50fadbc0de1e2447c4dc70c781f7ea9059' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 611 processed earlier; will process 10365 files now Step #5: ==20374== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3e98222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a3efe5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a3efe4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a3efe4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3e9828652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a3e978942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a3e9783c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3e981a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3ec8498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3ec8498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3ec8498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3ec8498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3ec8498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3ec8498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3ec8498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3ec8498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3ec8498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3ec8498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a3eea4e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a3eb7aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3eb7b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3eb560d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3eb560d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3eb561808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3eb560944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3eb560944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3eb560944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a3efe4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a3efe4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a3efe33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a3efe5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28a0195082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a3e978243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x74,0x63,0x59, Step #5: ttcY Step #5: artifact_prefix='./'; Test unit written to ./oom-4b8ea8d13a0810121fd9880ff9985e51e2d6de2c Step #5: Base64: dHRjWQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 566 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3915862505 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8dfcb0d60, 0x55e8dfe9971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8dfe99720,0x55e8e1d232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4b8ea8d13a0810121fd9880ff9985e51e2d6de2c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 612 processed earlier; will process 10364 files now Step #5: #1 pulse cov: 3501 ft: 3502 exec/s: 0 rss: 158Mb Step #5: ==20410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8d67f32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8dce2e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8dce1146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8dce1138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8d67f9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8d675a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8d6754c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8d67eb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8d981a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8d981a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8d981a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8d981a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8d981a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8d981a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8d981a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8d981a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8d981a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8d981a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8dba1f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8d877b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8d87865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8d8531d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8d8531d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8d8532808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8d8531944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8d8531944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8d8531944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8dce1394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8dce1c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8dce04529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8dce2efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fec36a20082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8d675343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9d,0x85,0xbd, Step #5: \360\235\205\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-a6ba76a2fca45afee811efa2862e3befe50a01a1 Step #5: Base64: 8J2FvQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 567 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3916347055 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56546131cd60, 0x56546150571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565461505720,0x56546338f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a6ba76a2fca45afee811efa2862e3befe50a01a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 614 processed earlier; will process 10362 files now Step #5: ==20446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565457e5f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56545e49a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56545e47d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56545e47d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565457e65652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565457dc642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565457dc0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565457e57595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56545ae868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56545ae868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56545ae868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56545ae868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56545ae868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56545ae868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56545ae868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56545ae868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56545ae868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56545ae868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56545d08b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565459de7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565459df25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565459b9dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565459b9dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565459b9e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565459b9d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565459b9d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565459b9d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56545e47f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56545e4887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56545e470529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56545e49afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a1e402082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565457dbf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0xb2,0xbb, Step #5: \364\217\262\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-e845b9fb6d3632af043838ce8a3e85ebf58d6734 Step #5: Base64: 9I+yuw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 568 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3916788603 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558150018d60, 0x55815020171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558150201720,0x55815208b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e845b9fb6d3632af043838ce8a3e85ebf58d6734' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 615 processed earlier; will process 10361 files now Step #5: ==20482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558146b5b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55814d196728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55814d17946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55814d17938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558146b61652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558146ac242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558146abcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558146b53595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558149b828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558149b828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558149b828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558149b828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558149b828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558149b828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558149b828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558149b828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558149b828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558149b828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55814bd8745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558148ae3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558148aee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558148899d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558148899d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55814889a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558148899944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558148899944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558148899944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55814d17b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55814d1847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55814d16c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55814d196fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbdc75fc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558146abb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf1,0x9e,0x96,0xa0, Step #5: \361\236\226\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-88b627f2ffb89e078c0d49125eb1969105ff41dd Step #5: Base64: 8Z6WoA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 569 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3917233323 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55742682cd60, 0x557426a1571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557426a15720,0x55742889f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/88b627f2ffb89e078c0d49125eb1969105ff41dd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 616 processed earlier; will process 10360 files now Step #5: ==20518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55741d36f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5574239aa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55742398d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55742398d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55741d375652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55741d2d642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55741d2d0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55741d367595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5574203968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5574203968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5574203968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5574203968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5574203968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5574203968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5574203968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5574203968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5574203968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5574203968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55742259b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55741f2f7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55741f3025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55741f0add3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55741f0add3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55741f0ae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55741f0ad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55741f0ad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55741f0ad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55742398f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5574239987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557423980529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5574239aafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9856ac1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55741d2cf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x4a,0x32,0xf0, Step #5: BJ2\360 Step #5: artifact_prefix='./'; Test unit written to ./oom-f36edf4da3a5f334a0f86a09d8184735e15f79b7 Step #5: Base64: Qkoy8A== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 570 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3917680467 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557858ed1d60, 0x5578590ba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5578590ba720,0x55785af442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f36edf4da3a5f334a0f86a09d8184735e15f79b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 617 processed earlier; will process 10359 files now Step #5: ==20554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55784fa142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55785604f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55785603246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55785603238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55784fa1a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55784f97b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55784f975c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55784fa0c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557852a3b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557852a3b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557852a3b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557852a3b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557852a3b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557852a3b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557852a3b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557852a3b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557852a3b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557852a3b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557854c4045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55785199c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5578519a75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557851752d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557851752d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557851753808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557851752944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557851752944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557851752944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55785603494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55785603d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557856025529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55785604ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ea1537082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55784f97443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x61,0x70,0x3b, Step #5: ≈ Step #5: artifact_prefix='./'; Test unit written to ./oom-edeb42d0f7ab538e500528d526c922b464c80d91 Step #5: Base64: JmFwOw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 571 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3918119772 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5556a14c6d60, 0x5556a16af71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556a16af720,0x5556a35392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/edeb42d0f7ab538e500528d526c922b464c80d91' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 618 processed earlier; will process 10358 files now Step #5: ==20590== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556980092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55569e644728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55569e62746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55569e62738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55569800f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555697f7042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555697f6ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555698001595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55569b0308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55569b0308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55569b0308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55569b0308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55569b0308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55569b0308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55569b0308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55569b0308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55569b0308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55569b0308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55569d23545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555699f91578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555699f9c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555699d47d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555699d47d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555699d48808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555699d47944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555699d47944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555699d47944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55569e62994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55569e6327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55569e61a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55569e644fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f51dc5ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555697f6943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x2d,0x34,0xc3, Step #5: 9-4\303 Step #5: artifact_prefix='./'; Test unit written to ./oom-3790a16df7b5f10bc54ded48e3be13cee658c390 Step #5: Base64: OS00ww== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 572 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3918571983 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ecc61eed60, 0x55ecc63d771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ecc63d7720,0x55ecc82612c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3790a16df7b5f10bc54ded48e3be13cee658c390' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 619 processed earlier; will process 10357 files now Step #5: ==20626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ecbcd312d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ecc336c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ecc334f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ecc334f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ecbcd37652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ecbcc9842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ecbcc92c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ecbcd29595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ecbfd588c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ecbfd588c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ecbfd588c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ecbfd588c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ecbfd588c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ecbfd588c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ecbfd588c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ecbfd588c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ecbfd588c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ecbfd588c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ecc1f5d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ecbecb9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ecbecc45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ecbea6fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ecbea6fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ecbea70808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ecbea6f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ecbea6f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ecbea6f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ecc335194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ecc335a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ecc3342529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ecc336cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f537f89e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ecbcc9143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0xa1,0xcd,0xa1,0x3d, Step #5: \315\241\315\241= Step #5: artifact_prefix='./'; Test unit written to ./oom-fbc6109c93eaba6b2547e6efc132acfd6048bc39 Step #5: Base64: zaHNoT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 573 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3919018044 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b166e7ad60, 0x55b16706371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b167063720,0x55b168eed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fbc6109c93eaba6b2547e6efc132acfd6048bc39' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 620 processed earlier; will process 10356 files now Step #5: ==20662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b15d9bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b163ff8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b163fdb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b163fdb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b15d9c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b15d92442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b15d91ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b15d9b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1609e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1609e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1609e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1609e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1609e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1609e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1609e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1609e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1609e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1609e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b162be945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b15f945578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b15f9505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b15f6fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b15f6fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b15f6fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b15f6fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b15f6fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b15f6fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b163fdd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b163fe67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b163fce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b163ff8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f94c82c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b15d91d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd1,0xbc,0x70,0x72,0x6c, Step #5: \321\274prl Step #5: artifact_prefix='./'; Test unit written to ./oom-65ce0f31346226a70888fe206e3cb8eaad2cd07d Step #5: Base64: 0bxwcmw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 574 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3919473247 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b8cc2ddd60, 0x55b8cc4c671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b8cc4c6720,0x55b8ce3502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/65ce0f31346226a70888fe206e3cb8eaad2cd07d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 621 processed earlier; will process 10355 files now Step #5: ==20698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8c2e202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b8c945b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b8c943e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b8c943e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8c2e26652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8c2d8742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8c2d81c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8c2e18595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b8c5e478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b8c5e478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b8c5e478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b8c5e478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b8c5e478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b8c5e478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b8c5e478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b8c5e478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b8c5e478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b8c5e478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b8c804c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8c4da8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8c4db35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8c4b5ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8c4b5ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8c4b5f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8c4b5e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8c4b5e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8c4b5e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b8c944094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b8c94497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b8c9431529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b8c945bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbff23d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8c2d8043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0xdf,0xba,0x5d, Step #5: [^\337\272] Step #5: artifact_prefix='./'; Test unit written to ./oom-a16b18d1d114984d46c527c065b20da89ff036f8 Step #5: Base64: W17ful0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 575 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3919926543 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b8ed811d60, 0x55b8ed9fa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b8ed9fa720,0x55b8ef8842c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a16b18d1d114984d46c527c065b20da89ff036f8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 622 processed earlier; will process 10354 files now Step #5: ==20734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8e43542d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b8ea98f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b8ea97246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b8ea97238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8e435a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8e42bb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8e42b5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8e434c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b8e737b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b8e737b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b8e737b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b8e737b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b8e737b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b8e737b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b8e737b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b8e737b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b8e737b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b8e737b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b8e958045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8e62dc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8e62e75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8e6092d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8e6092d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8e6093808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8e6092944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8e6092944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8e6092944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b8ea97494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b8ea97d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b8ea965529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b8ea98ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d6f137082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8e42b443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0xa4,0x7e, Step #5: \363\240\200\244~ Step #5: artifact_prefix='./'; Test unit written to ./oom-58997cd37086f976a6970df7cc55de738463d763 Step #5: Base64: 86CApH4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 576 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3920375869 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b9b1175d60, 0x55b9b135e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b9b135e720,0x55b9b31e82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58997cd37086f976a6970df7cc55de738463d763' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 623 processed earlier; will process 10353 files now Step #5: ==20770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b9a7cb82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b9ae2f3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b9ae2d646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b9ae2d638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b9a7cbe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b9a7c1f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b9a7c19c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b9a7cb0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9aacdf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9aacdf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9aacdf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9aacdf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9aacdf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9aacdf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9aacdf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9aacdf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9aacdf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9aacdf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b9acee445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9a9c40578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9a9c4b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b9a99f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b9a99f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b9a99f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b9a99f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b9a99f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b9a99f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b9ae2d894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b9ae2e17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b9ae2c9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b9ae2f3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f71990ea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b9a7c1843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xb7,0xbc,0xcd,0x84, Step #5: \341\267\274\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-e0498eae6d81ef904f76db846bacb2d7a725f590 Step #5: Base64: 4be8zYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 577 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3920820252 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dd945a5d60, 0x55dd9478e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dd9478e720,0x55dd966182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e0498eae6d81ef904f76db846bacb2d7a725f590' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 624 processed earlier; will process 10352 files now Step #5: ==20806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dd8b0e82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dd91723728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dd9170646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dd9170638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dd8b0ee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dd8b04f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dd8b049c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dd8b0e0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dd8e10f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dd8e10f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dd8e10f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dd8e10f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dd8e10f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dd8e10f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dd8e10f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dd8e10f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dd8e10f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dd8e10f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dd9031445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dd8d070578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dd8d07b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dd8ce26d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dd8ce26d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dd8ce27808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dd8ce26944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dd8ce26944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dd8ce26944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dd9170894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dd917117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dd916f9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dd91723fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f217ab96082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dd8b04843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x22,0x22,0x22,0x22, Step #5: <\"\"\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-603f3d143019819a48a1218c67c6235c67e4fc52 Step #5: Base64: PCIiIiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 578 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3921273916 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b71beaed60, 0x55b71c09771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b71c097720,0x55b71df212c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/603f3d143019819a48a1218c67c6235c67e4fc52' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 625 processed earlier; will process 10351 files now Step #5: ==20842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7129f12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b71902c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b71900f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b71900f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7129f7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b71295842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b712952c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7129e9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b715a188c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b715a188c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b715a188c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b715a188c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b715a188c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b715a188c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b715a188c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b715a188c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b715a188c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b715a188c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b717c1d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b714979578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7149845a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b71472fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b71472fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b714730808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b71472f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b71472f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b71472f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b71901194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b71901a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b719002529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b71902cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdb29f53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b71295143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xef,0xbb,0x90,0x2f, Step #5: \000\357\273\220/ Step #5: artifact_prefix='./'; Test unit written to ./oom-a1340d4f5ed1c80b1eabeeebab884f23133f32fc Step #5: Base64: AO+7kC8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 579 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3921728793 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ada86bcd60, 0x55ada88a571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ada88a5720,0x55adaa72f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a1340d4f5ed1c80b1eabeeebab884f23133f32fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 626 processed earlier; will process 10350 files now Step #5: ==20878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad9f1ff2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ada583a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ada581d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ada581d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad9f205652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad9f16642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad9f160c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad9f1f7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ada22268c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ada22268c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ada22268c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ada22268c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ada22268c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ada22268c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ada22268c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ada22268c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ada22268c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ada22268c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ada442b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ada1187578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ada11925a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ada0f3dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ada0f3dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ada0f3e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ada0f3d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ada0f3d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ada0f3d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ada581f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ada58287b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ada5810529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ada583afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5b6e09c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad9f15f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7,0x0,0xc8,0x9f,0x0, Step #5: \007\000\310\237\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-e5a41e07c15ecd32330a4251a9d08811b8d31812 Step #5: Base64: BwDInwA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 580 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3922183160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56222b3cdd60, 0x56222b5b671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56222b5b6720,0x56222d4402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e5a41e07c15ecd32330a4251a9d08811b8d31812' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 627 processed earlier; will process 10349 files now Step #5: #1 pulse cov: 3431 ft: 3432 exec/s: 0 rss: 157Mb Step #5: ==20914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562221f102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56222854b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56222852e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56222852e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562221f16652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562221e7742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562221e71c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562221f08595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562224f378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562224f378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562224f378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562224f378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562224f378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562224f378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562224f378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562224f378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562224f378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562224f378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56222713c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562223e98578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562223ea35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562223c4ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562223c4ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562223c4f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562223c4e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562223c4e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562223c4e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56222853094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5622285397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562228521529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56222854bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb710823082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562221e7043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0xa,0x2b,0xa, Step #5: +\012\012+\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-9b7b8b0c5dc91b05514fba99037d1900f46afb47 Step #5: Base64: KwoKKwo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 581 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3922679368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e973c63d60, 0x55e973e4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e973e4c720,0x55e975cd62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9b7b8b0c5dc91b05514fba99037d1900f46afb47' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 629 processed earlier; will process 10347 files now Step #5: ==20950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e96a7a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e970de1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e970dc446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e970dc438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e96a7ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e96a70d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e96a707c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e96a79e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e96d7cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e96d7cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e96d7cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e96d7cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e96d7cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e96d7cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e96d7cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e96d7cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e96d7cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e96d7cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e96f9d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e96c72e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e96c7395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e96c4e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e96c4e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e96c4e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e96c4e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e96c4e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e96c4e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e970dc694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e970dcf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e970db7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e970de1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78bfc14082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e96a70643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xaf,0x82,0xf4,0x2c, Step #5: \340\257\202\364, Step #5: artifact_prefix='./'; Test unit written to ./oom-04028d5020e2b8d3cce71581642909169b83043e Step #5: Base64: 4K+C9Cw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 582 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3923126137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56039779dd60, 0x56039798671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560397986720,0x5603998102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04028d5020e2b8d3cce71581642909169b83043e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 630 processed earlier; will process 10346 files now Step #5: #1 pulse cov: 3571 ft: 3572 exec/s: 0 rss: 157Mb Step #5: ==20986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56038e2e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56039491b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5603948fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5603948fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56038e2e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56038e24742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56038e241c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56038e2d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5603913078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5603913078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5603913078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5603913078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5603913078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5603913078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5603913078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5603913078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5603913078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5603913078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56039350c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560390268578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5603902735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56039001ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56039001ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56039001f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56039001e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56039001e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56039001e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56039490094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5603949097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5603948f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56039491bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f115eba9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56038e24043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0xbf,0xc2,0xbf,0x9f, Step #5: \302\277\302\277\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-e6b51f92f7176e56f050b1edff179705943fc105 Step #5: Base64: wr/Cv58= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 583 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3923609308 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a817d02d60, 0x55a817eeb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a817eeb720,0x55a819d752c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e6b51f92f7176e56f050b1edff179705943fc105' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 632 processed earlier; will process 10344 files now Step #5: ==21022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a80e8452d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a814e80728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a814e6346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a814e6338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a80e84b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a80e7ac42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a80e7a6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a80e83d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a81186c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a81186c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a81186c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a81186c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a81186c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a81186c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a81186c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a81186c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a81186c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a81186c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a813a7145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8107cd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8107d85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a810583d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a810583d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a810584808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a810583944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a810583944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a810583944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a814e6594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a814e6e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a814e56529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a814e80fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22476d5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a80e7a543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5a,0x1a,0x1a,0x5a,0x4e, Step #5: Z\032\032ZN Step #5: artifact_prefix='./'; Test unit written to ./oom-403c4aeca9a062759b728758ff1bf17a7b4886b0 Step #5: Base64: WhoaWk4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 584 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3924053529 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56010ccded60, 0x56010cec771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56010cec7720,0x56010ed512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/403c4aeca9a062759b728758ff1bf17a7b4886b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 633 processed earlier; will process 10343 files now Step #5: ==21058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601038212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560109e5c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560109e3f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560109e3f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560103827652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56010378842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560103782c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560103819595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601068488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601068488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601068488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601068488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601068488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601068488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601068488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601068488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601068488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601068488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560108a4d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601057a9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601057b45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56010555fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56010555fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560105560808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56010555f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56010555f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56010555f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560109e4194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560109e4a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560109e32529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560109e5cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1a6263c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56010378143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x7a,0xe0,0xb8,0xb6, Step #5: &z\340\270\266 Step #5: artifact_prefix='./'; Test unit written to ./oom-79148ac1083f3ce08d2fcd41826c2124905b595d Step #5: Base64: JnrguLY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 585 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3924500705 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557e27b3ad60, 0x557e27d2371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557e27d23720,0x557e29bad2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/79148ac1083f3ce08d2fcd41826c2124905b595d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 634 processed earlier; will process 10342 files now Step #5: ==21094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e1e67d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557e24cb8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557e24c9b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557e24c9b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e1e683652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e1e5e442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e1e5dec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e1e675595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557e216a48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557e216a48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557e216a48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557e216a48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557e216a48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557e216a48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557e216a48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557e216a48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557e216a48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557e216a48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557e238a945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557e20605578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557e206105a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557e203bbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557e203bbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557e203bc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557e203bb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557e203bb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557e203bb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557e24c9d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557e24ca67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557e24c8e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557e24cb8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f658f5d3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e1e5dd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0x2d,0x2d, Step #5: ----- Step #5: artifact_prefix='./'; Test unit written to ./oom-fb850eb0f808c252e819acf127a5f3951c622d0e Step #5: Base64: LS0tLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 586 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3924941841 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55767d20fd60, 0x55767d3f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55767d3f8720,0x55767f2822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb850eb0f808c252e819acf127a5f3951c622d0e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 635 processed earlier; will process 10341 files now Step #5: ==21130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557673d522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55767a38d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55767a37046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55767a37038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557673d58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557673cb942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557673cb3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557673d4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557676d798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557676d798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557676d798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557676d798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557676d798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557676d798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557676d798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557676d798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557676d798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557676d798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557678f7e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557675cda578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557675ce55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557675a90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557675a90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557675a91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557675a90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557675a90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557675a90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55767a37294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55767a37b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55767a363529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55767a38dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f85c9b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557673cb243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x74,0x3,0x41,0x0, Step #5: ~t\003A\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-15943953e813944480d4105ea69c5fd3af97804c Step #5: Base64: fnQDQQA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 587 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3925385546 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5570a000fd60, 0x5570a01f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5570a01f8720,0x5570a20822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/15943953e813944480d4105ea69c5fd3af97804c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 636 processed earlier; will process 10340 files now Step #5: ==21166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557096b522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55709d18d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55709d17046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55709d17038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557096b58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557096ab942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557096ab3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557096b4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557099b798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557099b798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557099b798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557099b798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557099b798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557099b798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557099b798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557099b798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557099b798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557099b798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55709bd7e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557098ada578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557098ae55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557098890d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557098890d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557098891808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557098890944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557098890944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557098890944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55709d17294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55709d17b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55709d163529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55709d18dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f822c554082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557096ab243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0xac,0x63,0x0, Step #5: \343\200\254c\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-64e0e937088f648e3e5412ab46e00626112295c2 Step #5: Base64: 44CsYwA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 588 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3925832366 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fd3f10cd60, 0x55fd3f2f571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fd3f2f5720,0x55fd4117f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64e0e937088f648e3e5412ab46e00626112295c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 637 processed earlier; will process 10339 files now Step #5: ==21202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd35c4f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fd3c28a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fd3c26d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fd3c26d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd35c55652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd35bb642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd35bb0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd35c47595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fd38c768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fd38c768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fd38c768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fd38c768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fd38c768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fd38c768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fd38c768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fd38c768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fd38c768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fd38c768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fd3ae7b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fd37bd7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fd37be25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fd3798dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fd3798dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fd3798e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fd3798d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fd3798d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fd3798d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fd3c26f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fd3c2787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fd3c260529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fd3c28afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc162cbf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd35baf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x20,0x0,0x0,0x0, Step #5: \000 \000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-fcce5f8c70156a1095fe8e86628960583b0cbde7 Step #5: Base64: ACAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 589 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3926279255 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55921d702d60, 0x55921d8eb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55921d8eb720,0x55921f7752c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fcce5f8c70156a1095fe8e86628960583b0cbde7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 638 processed earlier; will process 10338 files now Step #5: #1 pulse cov: 3617 ft: 3618 exec/s: 0 rss: 157Mb Step #5: ==21238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5592142452d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55921a880728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55921a86346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55921a86338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55921424b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5592141ac42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5592141a6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55921423d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55921726c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55921726c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55921726c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55921726c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55921726c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55921726c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55921726c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55921726c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55921726c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55921726c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55921947145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5592161cd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5592161d85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559215f83d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559215f83d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559215f84808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559215f83944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559215f83944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559215f83944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55921a86594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55921a86e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55921a856529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55921a880fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6c9fbfa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5592141a543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x30,0x25,0xe2,0x31, Step #5: #0%\3421 Step #5: artifact_prefix='./'; Test unit written to ./oom-4806fae68640dafbc0a36b79d770e0593231aa33 Step #5: Base64: IzAl4jE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 590 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3926763058 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56549b53bd60, 0x56549b72471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56549b724720,0x56549d5ae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4806fae68640dafbc0a36b79d770e0593231aa33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 640 processed earlier; will process 10336 files now Step #5: ==21274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56549207e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5654986b9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56549869c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56549869c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565492084652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565491fe542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565491fdfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565492076595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5654950a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5654950a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5654950a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5654950a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5654950a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5654950a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5654950a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5654950a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5654950a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5654950a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5654972aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565494006578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5654940115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565493dbcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565493dbcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565493dbd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565493dbc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565493dbc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565493dbc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56549869e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5654986a77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56549868f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5654986b9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb974cf7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565491fde43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xd,0xd,0xe,0x0, Step #5: -\015\015\016\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f629ee397b2f4d141cdd526ef0391e51e443c15a Step #5: Base64: LQ0NDgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 591 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3927209875 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dae70c2d60, 0x55dae72ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dae72ab720,0x55dae91352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f629ee397b2f4d141cdd526ef0391e51e443c15a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 641 processed earlier; will process 10335 files now Step #5: ==21310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55daddc052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dae4240728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dae422346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dae422338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55daddc0b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55daddb6c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55daddb66c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55daddbfd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dae0c2c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dae0c2c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dae0c2c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dae0c2c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dae0c2c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dae0c2c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dae0c2c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dae0c2c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dae0c2c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dae0c2c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dae2e3145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dadfb8d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dadfb985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dadf943d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dadf943d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dadf944808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dadf943944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dadf943944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dadf943944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dae422594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dae422e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dae4216529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dae4240fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1277c83082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55daddb6543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0xf1,0xbf,0xbf,0xbf, Step #5: \\\361\277\277\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-b3ee7d85a99cd91a51d6850eb54f18db94ee1e37 Step #5: Base64: XPG/v78= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 592 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3927658618 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56479d8e1d60, 0x56479daca71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56479daca720,0x56479f9542c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b3ee7d85a99cd91a51d6850eb54f18db94ee1e37' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 642 processed earlier; will process 10334 files now Step #5: ==21346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5647944242d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56479aa5f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56479aa4246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56479aa4238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56479442a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56479438b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564794385c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56479441c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56479744b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56479744b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56479744b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56479744b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56479744b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56479744b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56479744b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56479744b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56479744b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56479744b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56479965045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5647963ac578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5647963b75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564796162d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564796162d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564796163808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564796162944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564796162944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564796162944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56479aa4494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56479aa4d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56479aa35529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56479aa5ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22c0dde082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56479438443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x74,0x72,0xdc,0x81, Step #5: str\334\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-1c98aaf3704e42726c0aa5bf1ca7b551142e693f Step #5: Base64: c3Ry3IE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 593 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3928114832 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56258bb0ed60, 0x56258bcf771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56258bcf7720,0x56258db812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1c98aaf3704e42726c0aa5bf1ca7b551142e693f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 643 processed earlier; will process 10333 files now Step #5: ==21382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5625826512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562588c8c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562588c6f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562588c6f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562582657652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625825b842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625825b2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562582649595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625856788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625856788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625856788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625856788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625856788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625856788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625856788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625856788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625856788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625856788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56258787d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5625845d9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5625845e45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56258438fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56258438fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562584390808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56258438f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56258438f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56258438f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562588c7194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562588c7a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562588c62529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562588c8cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f63a2691082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625825b143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5,0xf0,0x9f,0x9f,0x98, Step #5: \005\360\237\237\230 Step #5: artifact_prefix='./'; Test unit written to ./oom-1712027ef088b46e02c945b004e6c542d7001205 Step #5: Base64: BfCfn5g= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 594 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3928575534 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f438fddd60, 0x55f4391c671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f4391c6720,0x55f43b0502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1712027ef088b46e02c945b004e6c542d7001205' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 644 processed earlier; will process 10332 files now Step #5: ==21418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f42fb202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f43615b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f43613e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f43613e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f42fb26652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f42fa8742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f42fa81c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f42fb18595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f432b478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f432b478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f432b478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f432b478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f432b478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f432b478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f432b478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f432b478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f432b478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f432b478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f434d4c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f431aa8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f431ab35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f43185ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f43185ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f43185f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f43185e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f43185e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f43185e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f43614094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4361497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f436131529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f43615bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fec5fb23082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f42fa8043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xca,0x9f,0xea,0x93,0xbd, Step #5: \312\237\352\223\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-ae321bd38fb5bd0293c5c10e97bf25a15831f2d7 Step #5: Base64: yp/qk70= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 595 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3929032011 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5578b38f5d60, 0x5578b3ade71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5578b3ade720,0x5578b59682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae321bd38fb5bd0293c5c10e97bf25a15831f2d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 645 processed earlier; will process 10331 files now Step #5: ==21454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5578aa4382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5578b0a73728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5578b0a5646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5578b0a5638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5578aa43e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5578aa39f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5578aa399c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5578aa430595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5578ad45f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5578ad45f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5578ad45f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5578ad45f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5578ad45f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5578ad45f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5578ad45f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5578ad45f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5578ad45f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5578ad45f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5578af66445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5578ac3c0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5578ac3cb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5578ac176d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5578ac176d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5578ac177808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5578ac176944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5578ac176944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5578ac176944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5578b0a5894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5578b0a617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5578b0a49529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5578b0a73fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f18e1834082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5578aa39843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x53,0x2b,0x5c,0x57, Step #5: \\S+\\W Step #5: artifact_prefix='./'; Test unit written to ./oom-84906ae81f134e7897738ad4ce48fbc505666772 Step #5: Base64: XFMrXFc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 596 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3929486043 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561623004d60, 0x5616231ed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5616231ed720,0x5616250772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/84906ae81f134e7897738ad4ce48fbc505666772' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 646 processed earlier; will process 10330 files now Step #5: ==21490== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561619b472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561620182728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56162016546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56162016538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561619b4d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561619aae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561619aa8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561619b3f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56161cb6e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56161cb6e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56161cb6e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56161cb6e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56161cb6e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56161cb6e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56161cb6e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56161cb6e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56161cb6e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56161cb6e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56161ed7345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56161bacf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56161bada5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56161b885d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56161b885d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56161b886808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56161b885944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56161b885944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56161b885944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56162016794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5616201707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561620158529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561620182fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9d7406a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561619aa743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0xcc,0x84,0xcc,0x85, Step #5: n\314\204\314\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-9892883857bf214aa17fe879c27c8f63a51133b7 Step #5: Base64: bsyEzIU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 597 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3929938499 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5646feb09d60, 0x5646fecf271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5646fecf2720,0x564700b7c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9892883857bf214aa17fe879c27c8f63a51133b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 647 processed earlier; will process 10329 files now Step #5: ==21526== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5646f564c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5646fbc87728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5646fbc6a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5646fbc6a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5646f5652652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5646f55b342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5646f55adc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5646f5644595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5646f86738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5646f86738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5646f86738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5646f86738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5646f86738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5646f86738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5646f86738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5646f86738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5646f86738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5646f86738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5646fa87845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5646f75d4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5646f75df5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5646f738ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5646f738ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5646f738b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5646f738a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5646f738a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5646f738a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5646fbc6c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5646fbc757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5646fbc5d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5646fbc87fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9d21cc4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5646f55ac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd5,0x83,0x7c,0xd5,0x84, Step #5: \325\203|\325\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-e16215cbd73e8d8cb7ba2c222d49c0725bd8c607 Step #5: Base64: 1YN81YQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 598 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3930378662 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5615f8f7bd60, 0x5615f916471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5615f9164720,0x5615fafee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e16215cbd73e8d8cb7ba2c222d49c0725bd8c607' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 648 processed earlier; will process 10328 files now Step #5: ==21562== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615efabe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5615f60f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5615f60dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5615f60dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5615efac4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615efa2542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615efa1fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5615efab6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615f2ae58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615f2ae58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615f2ae58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615f2ae58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615f2ae58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615f2ae58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615f2ae58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615f2ae58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615f2ae58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615f2ae58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5615f4cea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5615f1a46578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615f1a515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615f17fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615f17fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615f17fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615f17fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615f17fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615f17fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5615f60de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5615f60e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5615f60cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5615f60f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd01ddaa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615efa1e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x46,0xa,0x30,0x58, Step #5: PF\0120X Step #5: artifact_prefix='./'; Test unit written to ./oom-f893781a5c81447612224581c2a45d8264026f88 Step #5: Base64: UEYKMFg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 599 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3930825689 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f796754d60, 0x55f79693d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f79693d720,0x55f7987c72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f893781a5c81447612224581c2a45d8264026f88' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 649 processed earlier; will process 10327 files now Step #5: ==21598== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f78d2972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7938d2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7938b546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7938b538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f78d29d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f78d1fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f78d1f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f78d28f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7902be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7902be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7902be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7902be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7902be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7902be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7902be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7902be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7902be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7902be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7924c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f78f21f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f78f22a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f78efd5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f78efd5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f78efd6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f78efd5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f78efd5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f78efd5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7938b794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7938c07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7938a8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7938d2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb99106082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f78d1f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x31,0x67, Step #5: Step #5: Step #5: #0 0x56092e3522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56093498d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56093497046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56093497038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56092e358652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56092e2b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56092e2b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56092e34a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609313798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609313798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609313798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609313798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609313798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609313798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609313798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609313798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609313798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609313798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56093357e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609302da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609302e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560930090d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560930090d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560930091808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560930090944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560930090944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560930090944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56093497294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56093497b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560934963529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56093498dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f87fc349082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56092e2b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x61,0x73,0x11,0x7e, Step #5: \000as\021~ Step #5: artifact_prefix='./'; Test unit written to ./oom-4a9a4cd57fa8caf3520e106bd549b3a6d7075b8b Step #5: Base64: AGFzEX4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 601 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3931717751 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55757cf67d60, 0x55757d15071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55757d150720,0x55757efda2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a9a4cd57fa8caf3520e106bd549b3a6d7075b8b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 651 processed earlier; will process 10325 files now Step #5: ==21670== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557573aaa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55757a0e5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55757a0c846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55757a0c838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557573ab0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557573a1142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557573a0bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557573aa2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557576ad18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557576ad18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557576ad18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557576ad18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557576ad18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557576ad18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557576ad18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557576ad18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557576ad18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557576ad18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557578cd645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557575a32578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557575a3d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5575757e8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5575757e8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5575757e9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5575757e8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5575757e8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5575757e8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55757a0ca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55757a0d37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55757a0bb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55757a0e5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f02464a6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557573a0a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe5,0xbe,0xb6,0x7c,0x49, Step #5: \345\276\266|I Step #5: artifact_prefix='./'; Test unit written to ./oom-c5e8ec4092c0c511c8d7bfb035b40003d10c77f3 Step #5: Base64: 5b62fEk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 602 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3932159035 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c6302a9d60, 0x55c63049271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c630492720,0x55c63231c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c5e8ec4092c0c511c8d7bfb035b40003d10c77f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 652 processed earlier; will process 10324 files now Step #5: ==21706== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c626dec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c62d427728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c62d40a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c62d40a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c626df2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c626d5342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c626d4dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c626de4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c629e138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c629e138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c629e138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c629e138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c629e138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c629e138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c629e138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c629e138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c629e138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c629e138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c62c01845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c628d74578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c628d7f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c628b2ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c628b2ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c628b2b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c628b2a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c628b2a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c628b2a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c62d40c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c62d4157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c62d3fd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c62d427fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fed50f21082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c626d4c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x3f, Step #5: - - ? Step #5: artifact_prefix='./'; Test unit written to ./oom-db8adca477f5925610f6027e630e78236f0be22e Step #5: Base64: LSAtID8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 603 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3932603093 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564ed5d93d60, 0x564ed5f7c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564ed5f7c720,0x564ed7e062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/db8adca477f5925610f6027e630e78236f0be22e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 653 processed earlier; will process 10323 files now Step #5: ==21742== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564ecc8d62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ed2f11728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ed2ef446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ed2ef438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564ecc8dc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564ecc83d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564ecc837c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564ecc8ce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564ecf8fd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564ecf8fd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564ecf8fd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564ecf8fd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564ecf8fd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564ecf8fd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564ecf8fd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564ecf8fd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564ecf8fd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564ecf8fd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564ed1b0245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564ece85e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564ece8695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564ece614d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564ece614d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ece615808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564ece614944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564ece614944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564ece614944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ed2ef694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ed2eff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ed2ee7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ed2f11fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fef3495a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564ecc83643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x30,0x31,0x31,0x2c, Step #5: 6011, Step #5: artifact_prefix='./'; Test unit written to ./oom-b873142e9c1967b3090b43eaea4b6cd6a50d9341 Step #5: Base64: NjAxMSw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 604 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3933053618 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557e6bba2d60, 0x557e6bd8b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557e6bd8b720,0x557e6dc152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b873142e9c1967b3090b43eaea4b6cd6a50d9341' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 654 processed earlier; will process 10322 files now Step #5: #1 pulse cov: 3493 ft: 3494 exec/s: 0 rss: 157Mb Step #5: ==21778== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e626e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557e68d20728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557e68d0346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557e68d0338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e626eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e6264c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e62646c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e626dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557e6570c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557e6570c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557e6570c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557e6570c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557e6570c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557e6570c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557e6570c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557e6570c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557e6570c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557e6570c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557e6791145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557e6466d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557e646785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557e64423d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557e64423d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557e64424808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557e64423944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557e64423944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557e64423944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557e68d0594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557e68d0e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557e68cf6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557e68d20fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0025bcb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e6264543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xbb,0x7c,0xdf,0xbd, Step #5: \337\273|\337\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-328ccb52df985885aa8a6ab2f6c44c47fce77cf5 Step #5: Base64: 37t8370= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 605 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3933548583 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a1052efd60, 0x55a1054d871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a1054d8720,0x55a1073622c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/328ccb52df985885aa8a6ab2f6c44c47fce77cf5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 656 processed earlier; will process 10320 files now Step #5: ==21814== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0fbe322d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a10246d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a10245046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a10245038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0fbe38652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0fbd9942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0fbd93c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0fbe2a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0fee598c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0fee598c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0fee598c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0fee598c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0fee598c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0fee598c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0fee598c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0fee598c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0fee598c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0fee598c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a10105e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0fddba578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0fddc55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0fdb70d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0fdb70d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0fdb71808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0fdb70944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0fdb70944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0fdb70944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a10245294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a10245b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a102443529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a10246dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fea2e7a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0fbd9243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0, Step #5: \000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-a10909c2cdcaf5adb7e6b092a4faba558b62bd96 Step #5: Base64: AAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 606 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3933988975 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56233f34ed60, 0x56233f53771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56233f537720,0x5623413c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a10909c2cdcaf5adb7e6b092a4faba558b62bd96' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 657 processed earlier; will process 10319 files now Step #5: ==21850== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562335e912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56233c4cc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56233c4af46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56233c4af38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562335e97652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562335df842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562335df2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562335e89595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562338eb88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562338eb88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562338eb88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562338eb88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562338eb88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562338eb88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562338eb88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562338eb88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562338eb88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562338eb88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56233b0bd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562337e19578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562337e245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562337bcfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562337bcfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562337bd0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562337bcf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562337bcf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562337bcf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56233c4b194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56233c4ba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56233c4a2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56233c4ccfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97c985f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562335df143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x74,0x70,0x3a,0x34, Step #5: ftp:4 Step #5: artifact_prefix='./'; Test unit written to ./oom-2c19e97a881d4aa5245060b6dd51fe611cee70a4 Step #5: Base64: ZnRwOjQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 607 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3934433940 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55991e6a2d60, 0x55991e88b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55991e88b720,0x5599207152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2c19e97a881d4aa5245060b6dd51fe611cee70a4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 658 processed earlier; will process 10318 files now Step #5: ==21886== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599151e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55991b820728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55991b80346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55991b80338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5599151eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55991514c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559915146c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5599151dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55991820c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55991820c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55991820c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55991820c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55991820c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55991820c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55991820c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55991820c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55991820c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55991820c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55991a41145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55991716d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599171785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559916f23d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559916f23d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559916f24808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559916f23944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559916f23944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559916f23944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55991b80594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55991b80e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55991b7f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55991b820fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91125fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55991514543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0xe,0x0,0x4c,0x0, Step #5: A\016\000L\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-9ac6bcf30d2340caaeaa45cde50b5e34c7542963 Step #5: Base64: QQ4ATAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 608 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3934881877 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56496d4a1d60, 0x56496d68a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56496d68a720,0x56496f5142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ac6bcf30d2340caaeaa45cde50b5e34c7542963' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 659 processed earlier; will process 10317 files now Step #5: #1 pulse cov: 3384 ft: 3385 exec/s: 0 rss: 157Mb Step #5: #2 pulse cov: 3570 ft: 3729 exec/s: 0 rss: 158Mb Step #5: ==21922== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564963fe42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56496a61f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56496a60246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56496a60238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564963fea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564963f4b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564963f45c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564963fdc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56496700b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56496700b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56496700b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56496700b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56496700b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56496700b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56496700b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56496700b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56496700b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56496700b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56496921045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564965f6c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564965f775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564965d22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564965d22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564965d23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564965d22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564965d22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564965d22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56496a60494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56496a60d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56496a5f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56496a61ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b2853c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564963f4443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x4c,0xe6,0x92,0xa9, Step #5: \\L\346\222\251 Step #5: artifact_prefix='./'; Test unit written to ./oom-1b204d02dff078f7cef33927f1e5ed91324d0d3a Step #5: Base64: XEzmkqk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 609 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3935402687 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5617a2f32d60, 0x5617a311b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5617a311b720,0x5617a4fa52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1b204d02dff078f7cef33927f1e5ed91324d0d3a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 662 processed earlier; will process 10314 files now Step #5: #1 pulse cov: 3418 ft: 3419 exec/s: 0 rss: 157Mb Step #5: ==21958== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561799a752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5617a00b0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5617a009346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5617a009338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561799a7b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5617999dc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5617999d6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561799a6d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56179ca9c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56179ca9c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56179ca9c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56179ca9c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56179ca9c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56179ca9c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56179ca9c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56179ca9c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56179ca9c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56179ca9c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56179eca145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56179b9fd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56179ba085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56179b7b3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56179b7b3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56179b7b4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56179b7b3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56179b7b3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56179b7b3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5617a009594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5617a009e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5617a0086529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5617a00b0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9dcc60c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5617999d543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x54,0x79,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-7fe997baa13f6c19483e9d366a747fa0f2ff5994 Step #5: Base64: PHNUeT4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 610 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3935873347 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56546d363d60, 0x56546d54c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56546d54c720,0x56546f3d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7fe997baa13f6c19483e9d366a747fa0f2ff5994' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 664 processed earlier; will process 10312 files now Step #5: ==21994== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565463ea62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56546a4e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56546a4c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56546a4c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565463eac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565463e0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565463e07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565463e9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x565466ecd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x565466ecd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x565466ecd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x565466ecd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x565466ecd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x565466ecd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x565466ecd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x565466ecd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x565466ecd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x565466ecd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5654690d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565465e2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565465e395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565465be4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565465be4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565465be5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565465be4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565465be4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565465be4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56546a4c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56546a4cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56546a4b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56546a4e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3bb5d87082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565463e0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0xd,0x25,0xd,0x25, Step #5: %\015%\015% Step #5: artifact_prefix='./'; Test unit written to ./oom-75a16952452a841e4062a065c6517794445dde55 Step #5: Base64: JQ0lDSU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 611 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3936321035 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56122dd7dd60, 0x56122df6671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56122df66720,0x56122fdf02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/75a16952452a841e4062a065c6517794445dde55' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 665 processed earlier; will process 10311 files now Step #5: ==22030== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612248c02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56122aefb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56122aede46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56122aede38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612248c6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56122482742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561224821c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612248b8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612278e78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612278e78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612278e78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612278e78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612278e78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612278e78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612278e78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612278e78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612278e78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612278e78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561229aec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561226848578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612268535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612265fed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612265fed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612265ff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612265fe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612265fe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612265fe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56122aee094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56122aee97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56122aed1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56122aefbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd5a160c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56122482043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x29,0x7e,0xd8,0xad, Step #5: 0)~\330\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-63495433bb434121bddf9df7134b203e0227a315 Step #5: Base64: MCl+2K0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 612 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3936771895 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558dd8cc2d60, 0x558dd8eab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558dd8eab720,0x558ddad352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/63495433bb434121bddf9df7134b203e0227a315' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 666 processed earlier; will process 10310 files now Step #5: #1 pulse cov: 3446 ft: 3447 exec/s: 0 rss: 157Mb Step #5: ==22066== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558dcf8052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558dd5e40728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558dd5e2346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558dd5e2338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558dcf80b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558dcf76c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558dcf766c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558dcf7fd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558dd282c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558dd282c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558dd282c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558dd282c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558dd282c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558dd282c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558dd282c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558dd282c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558dd282c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558dd282c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558dd4a3145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558dd178d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558dd17985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558dd1543d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558dd1543d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558dd1544808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558dd1543944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558dd1543944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558dd1543944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558dd5e2594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558dd5e2e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558dd5e16529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558dd5e40fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3c5d99b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558dcf76543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0xe1,0xa0,0x8f,0xfe, Step #5: 1\341\240\217\376 Step #5: artifact_prefix='./'; Test unit written to ./oom-4140e50dc8bc54a7d0100bd300bb091f9918eb7a Step #5: Base64: MeGgj/4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 613 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3937266473 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56224e49dd60, 0x56224e68671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56224e686720,0x5622505102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4140e50dc8bc54a7d0100bd300bb091f9918eb7a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 668 processed earlier; will process 10308 files now Step #5: #1 pulse cov: 3491 ft: 3492 exec/s: 0 rss: 155Mb Step #5: ==22102== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562244fe02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56224b61b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56224b5fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56224b5fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562244fe6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562244f4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562244f41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562244fd8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5622480078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5622480078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5622480078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5622480078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5622480078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5622480078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5622480078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5622480078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5622480078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5622480078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56224a20c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562246f68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562246f735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562246d1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562246d1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562246d1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562246d1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562246d1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562246d1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56224b60094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56224b6097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56224b5f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56224b61bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba79703082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562244f4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0xef,0xa0,0xa0,0x0, Step #5: s\357\240\240\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-cd92039b61ac8ccfe16efd42acb1f38b9129ed6c Step #5: Base64: c++goAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 614 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3937754501 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5574ed1a3d60, 0x5574ed38c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5574ed38c720,0x5574ef2162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cd92039b61ac8ccfe16efd42acb1f38b9129ed6c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 670 processed earlier; will process 10306 files now Step #5: ==22138== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5574e3ce62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5574ea321728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5574ea30446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5574ea30438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5574e3cec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5574e3c4d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5574e3c47c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5574e3cde595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5574e6d0d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5574e6d0d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5574e6d0d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5574e6d0d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5574e6d0d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5574e6d0d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5574e6d0d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5574e6d0d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5574e6d0d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5574e6d0d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5574e8f1245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5574e5c6e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5574e5c795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5574e5a24d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5574e5a24d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5574e5a25808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5574e5a24944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5574e5a24944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5574e5a24944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5574ea30694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5574ea30f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5574ea2f7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5574ea321fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc54a622082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5574e3c4643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x16,0x6,0x7e,0x0,0x1, Step #5: \026\006~\000\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-71c269d2a72bcd0e203c1a7715f7b4a3fc1eedc8 Step #5: Base64: FgZ+AAE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 615 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3938192018 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5562769e7d60, 0x556276bd071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556276bd0720,0x556278a5a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71c269d2a72bcd0e203c1a7715f7b4a3fc1eedc8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 671 processed earlier; will process 10305 files now Step #5: ==22174== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55626d52a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556273b65728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556273b4846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556273b4838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55626d530652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55626d49142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55626d48bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55626d522595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5562705518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5562705518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5562705518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5562705518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5562705518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5562705518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5562705518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5562705518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5562705518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5562705518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55627275645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55626f4b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55626f4bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55626f268d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55626f268d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55626f269808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55626f268944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55626f268944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55626f268944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556273b4a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556273b537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556273b3b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556273b65fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f027233d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55626d48a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xcf,0xbb,0xbf,0x2f, Step #5: \000\317\273\277/ Step #5: artifact_prefix='./'; Test unit written to ./oom-8972ed5e0101d5ed398cf104f4c6a8ddafa9afb3 Step #5: Base64: AM+7vy8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 616 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3938636221 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556279a1dd60, 0x556279c0671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556279c06720,0x55627ba902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8972ed5e0101d5ed398cf104f4c6a8ddafa9afb3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 672 processed earlier; will process 10304 files now Step #5: ==22210== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5562705602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556276b9b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556276b7e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556276b7e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556270566652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5562704c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5562704c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556270558595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5562735878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5562735878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5562735878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5562735878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5562735878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5562735878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5562735878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5562735878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5562735878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5562735878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55627578c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5562724e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5562724f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55627229ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55627229ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55627229f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55627229e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55627229e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55627229e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556276b8094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556276b897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556276b71529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556276b9bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fecb7f9e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5562704c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0x27,0x42,0x27,0x27, Step #5: ,'B'' Step #5: artifact_prefix='./'; Test unit written to ./oom-e9299b6f6d94ffe36a654d757695ac95f7911763 Step #5: Base64: LCdCJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 617 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3939081917 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56401301cd60, 0x56401320571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564013205720,0x56401508f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e9299b6f6d94ffe36a654d757695ac95f7911763' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 673 processed earlier; will process 10303 files now Step #5: ==22246== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564009b5f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56401019a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56401017d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56401017d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564009b65652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564009ac642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564009ac0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564009b57595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56400cb868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56400cb868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56400cb868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56400cb868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56400cb868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56400cb868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56400cb868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56400cb868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56400cb868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56400cb868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56400ed8b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56400bae7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56400baf25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56400b89dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56400b89dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56400b89e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56400b89d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56400b89d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56400b89d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56401017f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5640101887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564010170529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56401019afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb99d81082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564009abf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0xa,0x20,0x20, Step #5: $$\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-3fc6bcbe96306541ee2fd679f3a773c1064d6879 Step #5: Base64: JCQKICA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 618 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3939527578 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a4d83c0d60, 0x55a4d85a971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a4d85a9720,0x55a4da4332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3fc6bcbe96306541ee2fd679f3a773c1064d6879' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 674 processed earlier; will process 10302 files now Step #5: ==22282== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4cef032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a4d553e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a4d552146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a4d552138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4cef09652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a4cee6a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a4cee64c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a4ceefb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4d1f2a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4d1f2a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4d1f2a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4d1f2a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4d1f2a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4d1f2a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4d1f2a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4d1f2a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4d1f2a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4d1f2a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a4d412f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a4d0e8b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4d0e965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4d0c41d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4d0c41d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4d0c42808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4d0c41944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4d0c41944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4d0c41944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a4d552394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a4d552c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a4d5514529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a4d553efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc8ded84082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a4cee6343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xf4,0x8e,0xbc,0xbe, Step #5: =\364\216\274\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-a2e2c490728e3a7f72a9175064eab6a2ea231ac2 Step #5: Base64: PfSOvL4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 619 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3939971637 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d515f1d60, 0x558d517da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d517da720,0x558d536642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2e2c490728e3a7f72a9175064eab6a2ea231ac2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 675 processed earlier; will process 10301 files now Step #5: ==22318== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d481342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d4e76f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d4e75246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d4e75238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d4813a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d4809b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d48095c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d4812c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d4b15b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d4b15b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d4b15b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d4b15b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d4b15b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d4b15b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d4b15b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d4b15b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d4b15b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d4b15b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d4d36045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d4a0bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d4a0c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d49e72d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d49e72d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d49e73808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d49e72944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d49e72944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d49e72944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d4e75494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d4e75d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d4e745529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d4e76ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f93007eb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d4809443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xa,0xa,0x24,0x60, Step #5: `\012\012$` Step #5: artifact_prefix='./'; Test unit written to ./oom-fc614685756cd139897bf673da80446c9574edf2 Step #5: Base64: YAoKJGA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 620 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3940537092 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56351ef0cd60, 0x56351f0f571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56351f0f5720,0x563520f7f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc614685756cd139897bf673da80446c9574edf2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 676 processed earlier; will process 10300 files now Step #5: ==22354== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563515a4f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56351c08a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56351c06d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56351c06d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563515a55652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5635159b642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5635159b0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563515a47595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563518a768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563518a768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563518a768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563518a768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563518a768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563518a768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563518a768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563518a768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563518a768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563518a768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56351ac7b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5635179d7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5635179e25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56351778dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56351778dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56351778e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56351778d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56351778d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56351778d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56351c06f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56351c0787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56351c060529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56351c08afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc9c4e11082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5635159af43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0xe2,0xb5,0x90, Step #5: Step #5: Step #5: #0 0x56098051f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560986b5a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560986b3d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560986b3d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560980525652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56098048642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560980480c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560980517595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609835468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609835468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609835468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609835468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609835468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609835468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609835468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609835468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609835468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609835468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56098574b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609824a7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609824b25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56098225dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56098225dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56098225e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56098225d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56098225d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56098225d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560986b3f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560986b487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560986b30529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560986b5afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0ec2627082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56098047f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x7b,0xe1,0x9f,0x8c, Step #5: r{\341\237\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-64333a0135803b1d8e7e96cdb762ab9a505253de Step #5: Base64: cnvhn4w= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 622 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3941427608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558503268d60, 0x55850345171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558503451720,0x5585052db2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64333a0135803b1d8e7e96cdb762ab9a505253de' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 678 processed earlier; will process 10298 files now Step #5: ==22426== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584f9dab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585003e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585003c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585003c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5584f9db1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5584f9d1242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584f9d0cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5584f9da3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584fcdd28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584fcdd28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584fcdd28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584fcdd28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584fcdd28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584fcdd28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584fcdd28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584fcdd28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584fcdd28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584fcdd28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5584fefd745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5584fbd33578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584fbd3e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584fbae9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584fbae9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584fbaea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584fbae9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584fbae9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584fbae9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585003cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585003d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585003bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585003e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa2baeef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584f9d0b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0xa,0x5c,0xa,0x25, Step #5: e\012\\\012% Step #5: artifact_prefix='./'; Test unit written to ./oom-ae56a812b07fc5b5a52f769ed107eb18b117f190 Step #5: Base64: ZQpcCiU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 623 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3941874077 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a6f2c4d60, 0x555a6f4ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a6f4ad720,0x555a713372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae56a812b07fc5b5a52f769ed107eb18b117f190' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 679 processed earlier; will process 10297 files now Step #5: ==22462== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a65e072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a6c442728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a6c42546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a6c42538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a65e0d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a65d6e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a65d68c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a65dff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a68e2e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a68e2e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a68e2e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a68e2e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a68e2e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a68e2e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a68e2e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a68e2e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a68e2e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a68e2e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a6b03345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a67d8f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a67d9a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a67b45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a67b45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a67b46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a67b45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a67b45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a67b45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a6c42794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a6c4307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a6c418529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a6c442fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1370be6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a65d6743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0x65,0x77,0x2e,0x36, Step #5: new.6 Step #5: artifact_prefix='./'; Test unit written to ./oom-a928f196df166fd6fa5dcc60f21e6dd9e48ca3f5 Step #5: Base64: bmV3LjY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 624 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3942325431 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d613141d60, 0x55d61332a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d61332a720,0x55d6151b42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a928f196df166fd6fa5dcc60f21e6dd9e48ca3f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 680 processed earlier; will process 10296 files now Step #5: ==22498== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d609c842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d6102bf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d6102a246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d6102a238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d609c8a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d609beb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d609be5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d609c7c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d60ccab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d60ccab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d60ccab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d60ccab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d60ccab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d60ccab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d60ccab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d60ccab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d60ccab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d60ccab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d60eeb045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d60bc0c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d60bc175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d60b9c2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d60b9c2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d60b9c3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d60b9c2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d60b9c2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d60b9c2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d6102a494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d6102ad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d610295529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d6102bffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3581612082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d609be443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xbb,0x7c,0xde,0xba, Step #5: \336\273|\336\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-7d55fb9521c00694304068abdbc24080b183aa4b Step #5: Base64: 3rt83ro= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 625 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3942772534 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564aef56cd60, 0x564aef75571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564aef755720,0x564af15df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d55fb9521c00694304068abdbc24080b183aa4b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 681 processed earlier; will process 10295 files now Step #5: ==22534== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564ae60af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564aec6ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564aec6cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564aec6cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564ae60b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564ae601642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564ae6010c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564ae60a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564ae90d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564ae90d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564ae90d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564ae90d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564ae90d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564ae90d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564ae90d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564ae90d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564ae90d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564ae90d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564aeb2db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564ae8037578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564ae80425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564ae7dedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564ae7dedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ae7dee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564ae7ded944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564ae7ded944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564ae7ded944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564aec6cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564aec6d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564aec6c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564aec6eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efdfb3ca082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564ae600f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x57,0x6e,0x61,0x6d,0x65, Step #5: Wname Step #5: artifact_prefix='./'; Test unit written to ./oom-e03516898d243eacf3902e363cf6fc9f079aa951 Step #5: Base64: V25hbWU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 626 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3943221558 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a67f875d60, 0x55a67fa5e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a67fa5e720,0x55a6818e82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e03516898d243eacf3902e363cf6fc9f079aa951' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 682 processed earlier; will process 10294 files now Step #5: ==22570== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a6763b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a67c9f3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a67c9d646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a67c9d638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a6763be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a67631f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a676319c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a6763b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a6793df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a6793df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a6793df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a6793df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a6793df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a6793df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a6793df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a6793df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a6793df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a6793df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a67b5e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a678340578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a67834b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a6780f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a6780f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a6780f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a6780f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a6780f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a6780f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a67c9d894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a67c9e17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a67c9c9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a67c9f3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b9399c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a67631843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xf3,0xa2,0x9f,0xbf, Step #5: <\363\242\237\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-a8272df3f68d251a192a0c97131b063669eef8a1 Step #5: Base64: PPOin78= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 627 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3943664088 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db9d920d60, 0x55db9db0971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db9db09720,0x55db9f9932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a8272df3f68d251a192a0c97131b063669eef8a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 683 processed earlier; will process 10293 files now Step #5: ==22606== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55db944632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db9aa9e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db9aa8146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db9aa8138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55db94469652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55db943ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55db943c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55db9445b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55db9748a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55db9748a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55db9748a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55db9748a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55db9748a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55db9748a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55db9748a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55db9748a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55db9748a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55db9748a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db9968f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55db963eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55db963f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55db961a1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55db961a1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55db961a2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55db961a1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55db961a1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55db961a1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db9aa8394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db9aa8c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db9aa74529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db9aa9efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff20c49f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55db943c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2a,0xdc,0x80,0x2a,0xdb, Step #5: *\334\200*\333 Step #5: artifact_prefix='./'; Test unit written to ./oom-a555705305fed661fbcfb0ab7e5ac861418927cd Step #5: Base64: KtyAKts= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 628 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3944108850 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a3c9f82d60, 0x55a3ca16b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a3ca16b720,0x55a3cbff52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a555705305fed661fbcfb0ab7e5ac861418927cd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 684 processed earlier; will process 10292 files now Step #5: ==22642== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3c0ac52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a3c7100728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a3c70e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a3c70e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3c0acb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a3c0a2c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a3c0a26c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3c0abd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3c3aec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3c3aec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3c3aec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3c3aec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3c3aec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3c3aec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3c3aec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3c3aec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3c3aec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3c3aec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a3c5cf145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a3c2a4d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3c2a585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3c2803d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3c2803d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3c2804808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3c2803944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3c2803944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3c2803944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a3c70e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a3c70ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a3c70d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a3c7100fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd20e02082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a3c0a2543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5,0x7c,0xe3,0xbf,0x9b, Step #5: \005|\343\277\233 Step #5: artifact_prefix='./'; Test unit written to ./oom-93cf66745a0bc339aa4ee5fe467d8fada9e8616e Step #5: Base64: BXzjv5s= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 629 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3944550831 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5569d2e17d60, 0x5569d300071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5569d3000720,0x5569d4e8a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93cf66745a0bc339aa4ee5fe467d8fada9e8616e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 685 processed earlier; will process 10291 files now Step #5: #1 pulse cov: 6485 ft: 6486 exec/s: 0 rss: 168Mb Step #5: ==22678== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5569c995a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5569cff95728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5569cff7846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5569cff7838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5569c9960652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5569c98c142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5569c98bbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5569c9952595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569cc9818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569cc9818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569cc9818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569cc9818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569cc9818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569cc9818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569cc9818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569cc9818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569cc9818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569cc9818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569ceb8645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5569cb8e2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5569cb8ed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5569cb698d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5569cb698d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5569cb699808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5569cb698944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5569cb698944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5569cb698944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5569cff7a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569cff837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5569cff6b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5569cff95fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fca09237082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5569c98ba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x72,0x72,0xcc,0x81, Step #5: srr\314\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-6cbed7b573fd3003fe9c97945d636c7d74dc23fb Step #5: Base64: c3JyzIE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 630 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3945040202 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea0e3e4d60, 0x55ea0e5cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea0e5cd720,0x55ea104572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6cbed7b573fd3003fe9c97945d636c7d74dc23fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 687 processed earlier; will process 10289 files now Step #5: ==22714== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea04f272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea0b562728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea0b54546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea0b54538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea04f2d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea04e8e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea04e88c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea04f1f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea07f4e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea07f4e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea07f4e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea07f4e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea07f4e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea07f4e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea07f4e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea07f4e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea07f4e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea07f4e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea0a15345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea06eaf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea06eba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea06c65d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea06c65d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea06c66808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea06c65944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea06c65944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea06c65944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea0b54794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea0b5507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea0b538529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea0b562fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0119061082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea04e8743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x45,0x47,0x49,0x4e, Step #5: BEGIN Step #5: artifact_prefix='./'; Test unit written to ./oom-3598517c826f1480a241800ce73f781ae2b1cd6a Step #5: Base64: QkVHSU4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 631 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3945484955 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561a5bedcd60, 0x561a5c0c571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561a5c0c5720,0x561a5df4f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3598517c826f1480a241800ce73f781ae2b1cd6a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 688 processed earlier; will process 10288 files now Step #5: ==22750== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561a52a1f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561a5905a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561a5903d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561a5903d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561a52a25652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561a5298642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561a52980c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561a52a17595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561a55a468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561a55a468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561a55a468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561a55a468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561a55a468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561a55a468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561a55a468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561a55a468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561a55a468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561a55a468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561a57c4b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561a549a7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561a549b25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561a5475dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561a5475dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561a5475e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561a5475d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561a5475d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561a5475d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561a5903f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561a590487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561a59030529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561a5905afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f187c8af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561a5297f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0xe1,0xaf,0x90, Step #5: Step #5: Step #5: #0 0x556d0251e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d08b59728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d08b3c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d08b3c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d02524652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d0248542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d0247fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d02516595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d055458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d055458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d055458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d055458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d055458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d055458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d055458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d055458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d055458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d055458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d0774a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d044a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d044b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d0425cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d0425cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d0425d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d0425c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d0425c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d0425c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d08b3e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d08b477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d08b2f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d08b59fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f788bf24082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d0247e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x76,0x65,0x63,0x24, Step #5: $vec$ Step #5: artifact_prefix='./'; Test unit written to ./oom-72fe98c45669e5617f6dd4ee33a20274316de213 Step #5: Base64: JHZlYyQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 633 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3946380748 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555c1c62bd60, 0x555c1c81471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555c1c814720,0x555c1e69e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/72fe98c45669e5617f6dd4ee33a20274316de213' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 690 processed earlier; will process 10286 files now Step #5: ==22822== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555c1316e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555c197a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555c1978c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555c1978c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555c13174652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555c130d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555c130cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555c13166595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555c161958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555c161958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555c161958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555c161958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555c161958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555c161958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555c161958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555c161958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555c161958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555c161958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555c1839a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555c150f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555c151015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555c14eacd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555c14eacd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555c14ead808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555c14eac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555c14eac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555c14eac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555c1978e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555c197977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555c1977f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555c197a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1b14905082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555c130ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x20,0x3f,0x20,0x21, Step #5: ? ? ! Step #5: artifact_prefix='./'; Test unit written to ./oom-1fdbadfb34c063d6422c04a841ca490663f44f4e Step #5: Base64: PyA/ICE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 634 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3946822290 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558bad5acd60, 0x558bad79571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558bad795720,0x558baf61f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1fdbadfb34c063d6422c04a841ca490663f44f4e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 691 processed earlier; will process 10285 files now Step #5: ==22858== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558ba40ef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558baa72a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558baa70d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558baa70d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ba40f5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ba405642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ba4050c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ba40e7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ba71168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ba71168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ba71168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ba71168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ba71168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ba71168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ba71168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ba71168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ba71168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ba71168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558ba931b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558ba6077578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558ba60825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558ba5e2dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558ba5e2dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558ba5e2e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558ba5e2d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558ba5e2d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558ba5e2d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558baa70f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558baa7187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558baa700529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558baa72afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc48cdf3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ba404f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0xe2,0x81,0x80,0xbd, Step #5: T\342\201\200\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-06af46137a9152c88775964351395d621e5b2589 Step #5: Base64: VOKBgL0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 635 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3947269036 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5567e11b4d60, 0x5567e139d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5567e139d720,0x5567e32272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/06af46137a9152c88775964351395d621e5b2589' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 692 processed earlier; will process 10284 files now Step #5: ==22894== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5567d7cf72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5567de332728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5567de31546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5567de31538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5567d7cfd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5567d7c5e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5567d7c58c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5567d7cef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567dad1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567dad1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567dad1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567dad1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567dad1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567dad1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567dad1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567dad1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567dad1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567dad1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5567dcf2345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5567d9c7f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5567d9c8a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5567d9a35d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5567d9a35d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5567d9a36808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5567d9a35944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5567d9a35944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5567d9a35944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5567de31794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5567de3207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5567de308529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5567de332fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9918806082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5567d7c5743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x47,0x5,0x0,0x0,0x0, Step #5: G\005\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-80fbd13347fa5de5f41329e1a11663b4c7557a9a Step #5: Base64: RwUAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 636 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3947718204 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562333107d60, 0x5623332f071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5623332f0720,0x56233517a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80fbd13347fa5de5f41329e1a11663b4c7557a9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 693 processed earlier; will process 10283 files now Step #5: ==22930== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562329c4a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562330285728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56233026846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56233026838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562329c50652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562329bb142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562329babc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562329c42595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56232cc718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56232cc718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56232cc718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56232cc718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56232cc718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56232cc718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56232cc718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56232cc718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56232cc718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56232cc718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56232ee7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56232bbd2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56232bbdd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56232b988d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56232b988d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56232b989808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56232b988944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56232b988944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56232b988944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56233026a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623302737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56233025b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562330285fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f605d42d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562329baa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x20,0x2d,0x31,0xa, Step #5: H -1\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-42b70611c6ddfae44c2d181526e41a61b4b1ef0a Step #5: Base64: SCAtMQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 637 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3948165264 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0782abd60, 0x55c07849471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c078494720,0x55c07a31e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/42b70611c6ddfae44c2d181526e41a61b4b1ef0a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 694 processed earlier; will process 10282 files now Step #5: ==22966== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c06edee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c075429728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c07540c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c07540c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c06edf4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c06ed5542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c06ed4fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c06ede6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c071e158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c071e158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c071e158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c071e158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c071e158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c071e158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c071e158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c071e158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c071e158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c071e158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c07401a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c070d76578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c070d815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c070b2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c070b2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c070b2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c070b2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c070b2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c070b2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c07540e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0754177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0753ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c075429fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9613530082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c06ed4e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x10,0x0,0x24,0x6e, Step #5: $\020\000$n Step #5: artifact_prefix='./'; Test unit written to ./oom-1958bc6929ce015aa8681ea4b658f99e4b00e02f Step #5: Base64: JBAAJG4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 638 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3948616426 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec63240d60, 0x55ec6342971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec63429720,0x55ec652b32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1958bc6929ce015aa8681ea4b658f99e4b00e02f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 695 processed earlier; will process 10281 files now Step #5: ==23002== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec59d832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec603be728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec603a146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec603a138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec59d89652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec59cea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec59ce4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec59d7b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec5cdaa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec5cdaa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec5cdaa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec5cdaa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec5cdaa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec5cdaa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec5cdaa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec5cdaa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec5cdaa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec5cdaa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec5efaf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec5bd0b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec5bd165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec5bac1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec5bac1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec5bac2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec5bac1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec5bac1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec5bac1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec603a394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec603ac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec60394529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec603befa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbaa1d03082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec59ce343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0xd,0xe2,0x80,0x89, Step #5: ~\015\342\200\211 Step #5: artifact_prefix='./'; Test unit written to ./oom-90eea61aa88040207815d72a3b080d04dc5c34dd Step #5: Base64: fg3igIk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 639 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3949056909 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a18d74ad60, 0x55a18d93371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a18d933720,0x55a18f7bd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/90eea61aa88040207815d72a3b080d04dc5c34dd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 696 processed earlier; will process 10280 files now Step #5: ==23038== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a18428d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a18a8c8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a18a8ab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a18a8ab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a184293652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1841f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1841eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a184285595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1872b48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1872b48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1872b48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1872b48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1872b48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1872b48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1872b48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1872b48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1872b48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1872b48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a1894b945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a186215578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a1862205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a185fcbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a185fcbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a185fcc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a185fcb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a185fcb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a185fcb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a18a8ad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a18a8b67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a18a89e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a18a8c8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f136f5d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1841ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x50,0x2d,0x2e,0x2e, Step #5: dP-.. Step #5: artifact_prefix='./'; Test unit written to ./oom-44a8795d24754f8d6612be83778e2d1c3e8031f1 Step #5: Base64: ZFAtLi4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 640 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3949507150 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55971a1a7d60, 0x55971a39071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55971a390720,0x55971c21a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/44a8795d24754f8d6612be83778e2d1c3e8031f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 697 processed earlier; will process 10279 files now Step #5: ==23074== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559710cea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559717325728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55971730846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55971730838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559710cf0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559710c5142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559710c4bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559710ce2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559713d118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559713d118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559713d118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559713d118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559713d118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559713d118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559713d118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559713d118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559713d118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559713d118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559715f1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559712c72578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559712c7d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559712a28d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559712a28d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559712a29808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559712a28944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559712a28944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559712a28944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55971730a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597173137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597172fb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559717325fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efcdf133082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559710c4a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x23,0x31,0x37,0x25, Step #5: % Step #5: artifact_prefix='./'; Test unit written to ./oom-a2f2c68780ee64caaf62f2b15c87c8caee8d793d Step #5: Base64: JiMxNyU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 641 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3949954031 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587f2a52d60, 0x5587f2c3b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5587f2c3b720,0x5587f4ac52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2f2c68780ee64caaf62f2b15c87c8caee8d793d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 698 processed earlier; will process 10278 files now Step #5: ==23110== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5587e95952d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5587efbd0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5587efbb346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5587efbb338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5587e959b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5587e94fc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5587e94f6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5587e958d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5587ec5bc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5587ec5bc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5587ec5bc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5587ec5bc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5587ec5bc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5587ec5bc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5587ec5bc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5587ec5bc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5587ec5bc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5587ec5bc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5587ee7c145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5587eb51d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587eb5285a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5587eb2d3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5587eb2d3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5587eb2d4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5587eb2d3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5587eb2d3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5587eb2d3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5587efbb594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5587efbbe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5587efba6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5587efbd0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4da5548082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5587e94f543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x7a,0xb,0x41,0xa, Step #5: \012z\013A\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-a9e86d5000eac49914001a9ab60a58e6f71512b7 Step #5: Base64: CnoLQQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 642 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3950391494 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5618a7463d60, 0x5618a764c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5618a764c720,0x5618a94d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9e86d5000eac49914001a9ab60a58e6f71512b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 699 processed earlier; will process 10277 files now Step #5: ==23146== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56189dfa62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5618a45e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5618a45c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5618a45c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56189dfac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56189df0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56189df07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56189df9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5618a0fcd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5618a0fcd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5618a0fcd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5618a0fcd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5618a0fcd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5618a0fcd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5618a0fcd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5618a0fcd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5618a0fcd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5618a0fcd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5618a31d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56189ff2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56189ff395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56189fce4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56189fce4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56189fce5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56189fce4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56189fce4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56189fce4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5618a45c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5618a45cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5618a45b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5618a45e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe38c8da082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56189df0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0xe1,0x9f,0x96,0x27, Step #5: ?\341\237\226' Step #5: artifact_prefix='./'; Test unit written to ./oom-64c9e7d5a7d142cd6c0ded1ca1c4421f56aaa2cf Step #5: Base64: P+Gflic= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 643 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3950836196 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b93ae48d60, 0x55b93b03171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b93b031720,0x55b93cebb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64c9e7d5a7d142cd6c0ded1ca1c4421f56aaa2cf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 700 processed earlier; will process 10276 files now Step #5: ==23182== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b93198b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b937fc6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b937fa946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b937fa938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b931991652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b9318f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b9318ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b931983595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9349b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9349b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9349b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9349b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9349b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9349b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9349b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9349b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9349b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9349b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b936bb745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b933913578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b93391e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b9336c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b9336c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b9336ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b9336c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b9336c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b9336c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b937fab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b937fb47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b937f9c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b937fc6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8cec908082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b9318eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xa4,0x3,0xfb,0x37, Step #5: \326\244\003\3737 Step #5: artifact_prefix='./'; Test unit written to ./oom-e7c90ba495751eeaa0c4bf7174257c92c8483caf Step #5: Base64: 1qQD+zc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 644 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3951284607 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556c5b1fcd60, 0x556c5b3e571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556c5b3e5720,0x556c5d26f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e7c90ba495751eeaa0c4bf7174257c92c8483caf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 701 processed earlier; will process 10275 files now Step #5: ==23218== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556c51d3f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556c5837a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556c5835d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556c5835d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556c51d45652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556c51ca642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556c51ca0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556c51d37595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556c54d668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556c54d668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556c54d668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556c54d668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556c54d668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556c54d668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556c54d668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556c54d668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556c54d668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556c54d668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556c56f6b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556c53cc7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556c53cd25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556c53a7dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556c53a7dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556c53a7e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556c53a7d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556c53a7d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556c53a7d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556c5835f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556c583687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556c58350529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556c5837afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ec6998082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556c51c9f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x45,0x44,0xd3,0x88, Step #5: wED\323\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-633e3393b84061e060b79d081f74f3226c4664bb Step #5: Base64: d0VE04g= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 645 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3951730445 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563232b1ed60, 0x563232d0771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563232d07720,0x563234b912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/633e3393b84061e060b79d081f74f3226c4664bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 702 processed earlier; will process 10274 files now Step #5: #1 pulse cov: 11333 ft: 11334 exec/s: 0 rss: 177Mb Step #5: ==23254== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5632296612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56322fc9c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56322fc7f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56322fc7f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563229667652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5632295c842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5632295c2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563229659595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56322c6888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56322c6888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56322c6888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56322c6888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56322c6888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56322c6888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56322c6888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56322c6888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56322c6888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56322c6888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56322e88d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56322b5e9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56322b5f45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56322b39fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56322b39fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56322b3a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56322b39f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56322b39f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56322b39f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56322fc8194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56322fc8a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56322fc72529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56322fc9cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb6c5071082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5632295c143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0xa,0xa,0x2b,0xa, Step #5: c\012\012+\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-deeb56282a4c8946d35f94b1773a4c5e2aace4c9 Step #5: Base64: YwoKKwo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 646 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3952245679 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c12a5fdd60, 0x55c12a7e671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c12a7e6720,0x55c12c6702c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/deeb56282a4c8946d35f94b1773a4c5e2aace4c9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 704 processed earlier; will process 10272 files now Step #5: ==23290== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c1211402d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c12777b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c12775e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c12775e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c121146652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c1210a742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c1210a1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c121138595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1241678c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1241678c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1241678c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1241678c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1241678c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1241678c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1241678c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1241678c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1241678c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1241678c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c12636c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c1230c8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c1230d35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c122e7ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c122e7ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c122e7f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c122e7e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c122e7e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c122e7e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c12776094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c1277697b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c127751529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c12777bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7effac7ed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c1210a043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x5f,0x5f,0x6e,0x4d, Step #5: D__nM Step #5: artifact_prefix='./'; Test unit written to ./oom-e30d6d44a84965a3792805b5c983cdac649a25b4 Step #5: Base64: RF9fbk0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 647 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3952697950 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e2d2d29d60, 0x55e2d2f1271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e2d2f12720,0x55e2d4d9c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e30d6d44a84965a3792805b5c983cdac649a25b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 705 processed earlier; will process 10271 files now Step #5: #1 pulse cov: 3743 ft: 3744 exec/s: 0 rss: 158Mb Step #5: ==23326== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e2c986c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e2cfea7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e2cfe8a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e2cfe8a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e2c9872652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e2c97d342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e2c97cdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e2c9864595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e2cc8938c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e2cc8938c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e2cc8938c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e2cc8938c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e2cc8938c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e2cc8938c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e2cc8938c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e2cc8938c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e2cc8938c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e2cc8938c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e2cea9845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e2cb7f4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e2cb7ff5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e2cb5aad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e2cb5aad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e2cb5ab808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e2cb5aa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e2cb5aa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e2cb5aa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e2cfe8c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e2cfe957b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e2cfe7d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e2cfea7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbfb1b78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e2c97cc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x46,0x57,0x39,0x35, Step #5: SFW95 Step #5: artifact_prefix='./'; Test unit written to ./oom-992d45950d1d0740b19b370e06b5f565b9099ca1 Step #5: Base64: U0ZXOTU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 648 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3953189502 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b50cc7d60, 0x557b50eb071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b50eb0720,0x557b52d3a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/992d45950d1d0740b19b370e06b5f565b9099ca1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 707 processed earlier; will process 10269 files now Step #5: ==23362== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b4780a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b4de45728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b4de2846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b4de2838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b47810652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b4777142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b4776bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b47802595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b4a8318c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b4a8318c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b4a8318c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b4a8318c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b4a8318c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b4a8318c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b4a8318c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b4a8318c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b4a8318c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b4a8318c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557b4ca3645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b49792578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b4979d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b49548d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b49548d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b49549808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b49548944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b49548944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b49548944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b4de2a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b4de337b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b4de1b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b4de45fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f75e3a96082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b4776a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0xcd,0x93, Step #5: Step #5: Step #5: #0 0x55b6c1f362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b6c8571728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b6c855446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b6c855438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b6c1f3c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b6c1e9d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b6c1e97c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b6c1f2e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b6c4f5d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b6c4f5d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b6c4f5d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b6c4f5d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b6c4f5d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b6c4f5d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b6c4f5d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b6c4f5d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b6c4f5d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b6c4f5d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b6c716245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b6c3ebe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b6c3ec95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b6c3c74d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b6c3c74d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b6c3c75808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b6c3c74944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b6c3c74944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b6c3c74944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b6c855694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b6c855f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b6c8547529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b6c8571fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f267715d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b6c1e9643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc,0xc,0xc,0xc,0xc, Step #5: \014\014\014\014\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-ae6141e79b1ae1f340beec127b619e3da0595d5c Step #5: Base64: DAwMDAw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 650 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3954066566 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c07f3ebd60, 0x55c07f5d471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c07f5d4720,0x55c08145e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae6141e79b1ae1f340beec127b619e3da0595d5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 709 processed earlier; will process 10267 files now Step #5: ==23434== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c075f2e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c07c569728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c07c54c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c07c54c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c075f34652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c075e9542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c075e8fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c075f26595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c078f558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c078f558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c078f558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c078f558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c078f558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c078f558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c078f558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c078f558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c078f558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c078f558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c07b15a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c077eb6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c077ec15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c077c6cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c077c6cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c077c6d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c077c6c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c077c6c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c077c6c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c07c54e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c07c5577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c07c53f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c07c569fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f663a3d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c075e8e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x67,0x6c,0x79,0xa, Step #5: \012gly\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-21933d8c786ff69ee9d426beadd393bff233716e Step #5: Base64: CmdseQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 651 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3954516484 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb513e5d60, 0x55bb515ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb515ce720,0x55bb534582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/21933d8c786ff69ee9d426beadd393bff233716e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 710 processed earlier; will process 10266 files now Step #5: ==23470== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bb47f282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bb4e563728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bb4e54646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bb4e54638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb47f2e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb47e8f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb47e89c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb47f20595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bb4af4f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bb4af4f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bb4af4f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bb4af4f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bb4af4f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bb4af4f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bb4af4f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bb4af4f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bb4af4f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bb4af4f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bb4d15445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb49eb0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb49ebb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb49c66d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb49c66d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb49c67808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb49c66944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb49c66944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb49c66944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bb4e54894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bb4e5517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bb4e539529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bb4e563fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3e6bf08082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb47e8843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x9,0x2b,0x48,0x48,0x48, Step #5: \011+HHH Step #5: artifact_prefix='./'; Test unit written to ./oom-b78436073b9643604a38c251aba626fe1cabb4ed Step #5: Base64: CStISEg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 652 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3954972989 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555bdf90cd60, 0x555bdfaf571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555bdfaf5720,0x555be197f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b78436073b9643604a38c251aba626fe1cabb4ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 711 processed earlier; will process 10265 files now Step #5: ==23506== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555bd644f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555bdca8a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555bdca6d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555bdca6d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555bd6455652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555bd63b642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555bd63b0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555bd6447595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555bd94768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555bd94768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555bd94768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555bd94768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555bd94768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555bd94768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555bd94768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555bd94768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555bd94768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555bd94768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555bdb67b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555bd83d7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555bd83e25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555bd818dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555bd818dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555bd818e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555bd818d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555bd818d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555bd818d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555bdca6f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555bdca787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555bdca60529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555bdca8afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c34420082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555bd63af43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x6e,0x3a,0x6b,0x75, Step #5: dn:ku Step #5: artifact_prefix='./'; Test unit written to ./oom-6b05d2a8b3e77d8f3cd9b08970997cda5bd6356f Step #5: Base64: ZG46a3U= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 653 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3955421113 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558332307d60, 0x5583324f071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5583324f0720,0x55833437a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b05d2a8b3e77d8f3cd9b08970997cda5bd6356f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 712 processed earlier; will process 10264 files now Step #5: #1 pulse cov: 3575 ft: 3576 exec/s: 0 rss: 156Mb Step #5: ==23542== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558328e4a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55832f485728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55832f46846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55832f46838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558328e50652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558328db142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558328dabc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558328e42595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55832be718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55832be718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55832be718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55832be718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55832be718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55832be718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55832be718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55832be718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55832be718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55832be718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55832e07645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55832add2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55832addd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55832ab88d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55832ab88d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55832ab89808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55832ab88944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55832ab88944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55832ab88944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55832f46a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55832f4737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55832f45b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55832f485fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f261412c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558328daa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc9,0xa1,0x7c,0xcd,0x84, Step #5: \311\241|\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-2140d73831f19fd9a83e1d2700fda13e2ceb49b5 Step #5: Base64: yaF8zYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 654 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3955905627 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55af9a5e6d60, 0x55af9a7cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55af9a7cf720,0x55af9c6592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2140d73831f19fd9a83e1d2700fda13e2ceb49b5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 714 processed earlier; will process 10262 files now Step #5: ==23578== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55af911292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55af97764728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55af9774746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55af9774738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55af9112f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55af9109042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55af9108ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55af91121595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55af941508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55af941508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55af941508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55af941508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55af941508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55af941508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55af941508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55af941508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55af941508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55af941508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55af9635545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55af930b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55af930bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55af92e67d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55af92e67d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55af92e68808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55af92e67944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55af92e67944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55af92e67944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55af9774994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55af977527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55af9773a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55af97764fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0309484082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55af9108943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x6e,0x66,0x69,0x70, Step #5: Infip Step #5: artifact_prefix='./'; Test unit written to ./oom-3fe9f65f1abac5c0355dbe60c9dff89da2c5b7c9 Step #5: Base64: SW5maXA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 655 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3956355795 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555d26e3ed60, 0x555d2702771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555d27027720,0x555d28eb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3fe9f65f1abac5c0355dbe60c9dff89da2c5b7c9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 715 processed earlier; will process 10261 files now Step #5: ==23614== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555d1d9812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555d23fbc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555d23f9f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555d23f9f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555d1d987652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555d1d8e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555d1d8e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555d1d979595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555d209a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555d209a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555d209a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555d209a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555d209a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555d209a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555d209a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555d209a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555d209a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555d209a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555d22bad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555d1f909578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555d1f9145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555d1f6bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555d1f6bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555d1f6c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555d1f6bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555d1f6bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555d1f6bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555d23fa194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555d23faa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555d23f92529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555d23fbcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f84ef5bc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555d1d8e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0xaa,0xa1,0x1,0x24, Step #5: \333\252\241\001$ Step #5: artifact_prefix='./'; Test unit written to ./oom-9587aae387eca6d370b0c905a7169593afd52ff7 Step #5: Base64: 26qhASQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 656 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3956797864 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5630761a1d60, 0x56307638a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56307638a720,0x5630782142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9587aae387eca6d370b0c905a7169593afd52ff7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 716 processed earlier; will process 10260 files now Step #5: #1 pulse cov: 3578 ft: 3579 exec/s: 0 rss: 156Mb Step #5: ==23650== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56306cce42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56307331f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56307330246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56307330238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56306ccea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56306cc4b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56306cc45c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56306ccdc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56306fd0b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56306fd0b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56306fd0b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56306fd0b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56306fd0b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56306fd0b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56306fd0b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56306fd0b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56306fd0b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56306fd0b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563071f1045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56306ec6c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56306ec775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56306ea22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56306ea22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56306ea23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56306ea22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56306ea22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56306ea22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56307330494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56307330d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5630732f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56307331ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f958d2d6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56306cc4443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x38,0x9,0x5e,0x3a, Step #5: \0008\011^: Step #5: artifact_prefix='./'; Test unit written to ./oom-599958b9d55a1ff660751901d4c948ca43a80790 Step #5: Base64: ADgJXjo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 657 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3957285411 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f726338d60, 0x55f72652171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f726521720,0x55f7283ab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/599958b9d55a1ff660751901d4c948ca43a80790' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 718 processed earlier; will process 10258 files now Step #5: ==23686== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f71ce7b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7234b6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f72349946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f72349938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f71ce81652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f71cde242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f71cddcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f71ce73595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f71fea28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f71fea28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f71fea28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f71fea28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f71fea28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f71fea28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f71fea28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f71fea28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f71fea28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f71fea28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7220a745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f71ee03578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f71ee0e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f71ebb9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f71ebb9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f71ebba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f71ebb9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f71ebb9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f71ebb9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f72349b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7234a47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f72348c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7234b6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0241ab3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f71cddb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0xdf,0xad,0x2d,0x40, Step #5: ,\337\255-@ Step #5: artifact_prefix='./'; Test unit written to ./oom-fa114a70cf5c6785d3549442d146ce0642710e1d Step #5: Base64: LN+tLUA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 658 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3957732295 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ed65596d60, 0x55ed6577f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ed6577f720,0x55ed676092c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fa114a70cf5c6785d3549442d146ce0642710e1d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 719 processed earlier; will process 10257 files now Step #5: ==23722== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ed5c0d92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ed62714728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ed626f746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ed626f738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ed5c0df652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ed5c04042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ed5c03ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ed5c0d1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ed5f1008c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ed5f1008c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ed5f1008c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ed5f1008c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ed5f1008c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ed5f1008c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ed5f1008c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ed5f1008c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ed5f1008c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ed5f1008c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ed6130545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ed5e061578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ed5e06c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ed5de17d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ed5de17d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ed5de18808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ed5de17944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ed5de17944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ed5de17944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ed626f994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ed627027b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ed626ea529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ed62714fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb41464082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ed5c03943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x62,0x6a,0x75,0x2c,0x73, Step #5: bju,s Step #5: artifact_prefix='./'; Test unit written to ./oom-c07235896f988841275e73ff850a0ceb00e91695 Step #5: Base64: Ymp1LHM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 659 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3958173211 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5596ceefbd60, 0x5596cf0e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5596cf0e4720,0x5596d0f6e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c07235896f988841275e73ff850a0ceb00e91695' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 720 processed earlier; will process 10256 files now Step #5: ==23758== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5596c5a3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5596cc079728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5596cc05c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5596cc05c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5596c5a44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5596c59a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5596c599fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5596c5a36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5596c8a658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5596c8a658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5596c8a658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5596c8a658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5596c8a658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5596c8a658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5596c8a658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5596c8a658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5596c8a658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5596c8a658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5596cac6a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5596c79c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5596c79d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5596c777cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5596c777cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5596c777d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5596c777c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5596c777c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5596c777c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5596cc05e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5596cc0677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5596cc04f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5596cc079fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbfe6fc6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5596c599e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x3a,0x40,0x0,0x1, Step #5: S:@\000\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-cc9dbc2c89587137e5871f37e2d0601cba684b51 Step #5: Base64: UzpAAAE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 660 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3958618402 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c033d39d60, 0x55c033f2271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c033f22720,0x55c035dac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc9dbc2c89587137e5871f37e2d0601cba684b51' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 721 processed earlier; will process 10255 files now Step #5: ==23794== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c02a87c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c030eb7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c030e9a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c030e9a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c02a882652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c02a7e342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c02a7ddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c02a874595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c02d8a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c02d8a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c02d8a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c02d8a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c02d8a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c02d8a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c02d8a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c02d8a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c02d8a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c02d8a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c02faa845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c02c804578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c02c80f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c02c5bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c02c5bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c02c5bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c02c5ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c02c5ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c02c5ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c030e9c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c030ea57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c030e8d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c030eb7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1dbbd15082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c02a7dc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x2d,0x2d,0x24, Step #5: ~$--$ Step #5: artifact_prefix='./'; Test unit written to ./oom-e08f6ffc86b5c4ce448c6fde4ed15ea0707ee74c Step #5: Base64: fiQtLSQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 661 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3959064873 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cafcde5d60, 0x55cafcfce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cafcfce720,0x55cafee582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e08f6ffc86b5c4ce448c6fde4ed15ea0707ee74c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 722 processed earlier; will process 10254 files now Step #5: ==23830== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55caf39282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55caf9f63728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55caf9f4646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55caf9f4638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55caf392e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55caf388f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55caf3889c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55caf3920595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55caf694f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55caf694f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55caf694f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55caf694f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55caf694f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55caf694f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55caf694f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55caf694f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55caf694f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55caf694f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55caf8b5445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55caf58b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55caf58bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55caf5666d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55caf5666d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55caf5667808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55caf5666944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55caf5666944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55caf5666944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55caf9f4894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55caf9f517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55caf9f39529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55caf9f63fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1d9e5b1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55caf388843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0xd,0xd,0xd,0xd, Step #5: \001\015\015\015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-de2e62447c04f60c4348bad30d1c4148d580ddbb Step #5: Base64: AQ0NDQ0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 662 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3959508708 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f4f99e6d60, 0x55f4f9bcf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f4f9bcf720,0x55f4fba592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/de2e62447c04f60c4348bad30d1c4148d580ddbb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 723 processed earlier; will process 10253 files now Step #5: ==23866== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f4f05292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f4f6b64728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f4f6b4746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f4f6b4738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f4f052f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f4f049042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f4f048ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f4f0521595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f4f35508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f4f35508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f4f35508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f4f35508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f4f35508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f4f35508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f4f35508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f4f35508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f4f35508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f4f35508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f4f575545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f4f24b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f4f24bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f4f2267d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f4f2267d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f4f2268808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f4f2267944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f4f2267944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f4f2267944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f4f6b4994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4f6b527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f4f6b3a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f4f6b64fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f404591b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f4f048943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x67,0x3b,0x22,0x32, Step #5: %g;\"2 Step #5: artifact_prefix='./'; Test unit written to ./oom-74824e2eb28fe8b6ce06a8bf9a7494a081b06123 Step #5: Base64: JWc7IjI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 663 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3959961280 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab408a4d60, 0x55ab40a8d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab40a8d720,0x55ab429172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/74824e2eb28fe8b6ce06a8bf9a7494a081b06123' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 724 processed earlier; will process 10252 files now Step #5: ==23902== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ab373e72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab3da22728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab3da0546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab3da0538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ab373ed652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ab3734e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ab37348c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ab373df595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab3a40e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab3a40e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab3a40e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab3a40e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab3a40e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab3a40e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab3a40e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab3a40e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab3a40e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab3a40e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab3c61345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab3936f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab3937a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab39125d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab39125d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab39126808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab39125944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab39125944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab39125944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab3da0794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab3da107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab3d9f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab3da22fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe43876b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ab3734743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdd,0xbf,0x42,0x27,0x27, Step #5: \335\277B'' Step #5: artifact_prefix='./'; Test unit written to ./oom-3cce79d6e891cbf0bd6a9d76f7723959a751b445 Step #5: Base64: 3b9CJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 664 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3960418240 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562317756d60, 0x56231793f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56231793f720,0x5623197c92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3cce79d6e891cbf0bd6a9d76f7723959a751b445' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 725 processed earlier; will process 10251 files now Step #5: ==23938== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56230e2992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5623148d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5623148b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5623148b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56230e29f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56230e20042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56230e1fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56230e291595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623112c08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623112c08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623112c08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623112c08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623112c08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623112c08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623112c08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623112c08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623112c08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623112c08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5623134c545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562310221578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56231022c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56230ffd7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56230ffd7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56230ffd8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56230ffd7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56230ffd7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56230ffd7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5623148b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623148c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5623148aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5623148d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd89400c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56230e1f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xf4,0x8c,0x80,0x82, Step #5: \"\364\214\200\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-c133deb3725c6cd5ad61a38e6c8470248be97c41 Step #5: Base64: IvSMgII= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 665 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3960876886 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e7ce574d60, 0x55e7ce75d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e7ce75d720,0x55e7d05e72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c133deb3725c6cd5ad61a38e6c8470248be97c41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 726 processed earlier; will process 10250 files now Step #5: ==23974== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e7c50b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e7cb6f2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e7cb6d546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e7cb6d538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e7c50bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e7c501e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e7c5018c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e7c50af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e7c80de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e7c80de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e7c80de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e7c80de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e7c80de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e7c80de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e7c80de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e7c80de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e7c80de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e7c80de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e7ca2e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e7c703f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e7c704a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e7c6df5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e7c6df5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e7c6df6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e7c6df5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e7c6df5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e7c6df5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e7cb6d794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e7cb6e07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e7cb6c8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e7cb6f2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f34147c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e7c501743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x2b,0x22, Step #5: \"\\u+\" Step #5: artifact_prefix='./'; Test unit written to ./oom-82a3514ca031e020f2f663857c04e6fee082fc78 Step #5: Base64: Ilx1KyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 666 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3961325426 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560df1dc8d60, 0x560df1fb171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560df1fb1720,0x560df3e3b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/82a3514ca031e020f2f663857c04e6fee082fc78' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 727 processed earlier; will process 10249 files now Step #5: ==24010== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560de890b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560deef46728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560deef2946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560deef2938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560de8911652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560de887242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560de886cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560de8903595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560deb9328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560deb9328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560deb9328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560deb9328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560deb9328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560deb9328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560deb9328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560deb9328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560deb9328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560deb9328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560dedb3745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560dea893578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560dea89e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560dea649d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560dea649d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560dea64a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560dea649944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560dea649944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560dea649944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560deef2b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560deef347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560deef1c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560deef46fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f005053b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560de886b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x45,0x33,0x30,0x38, Step #5: 6E308 Step #5: artifact_prefix='./'; Test unit written to ./oom-3a5396a209b280a0db811d26ab4dbfc289514274 Step #5: Base64: NkUzMDg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 667 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3961772129 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eaf64fed60, 0x55eaf66e771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eaf66e7720,0x55eaf85712c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a5396a209b280a0db811d26ab4dbfc289514274' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 728 processed earlier; will process 10248 files now Step #5: ==24046== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eaed0412d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eaf367c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eaf365f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eaf365f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eaed047652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eaecfa842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eaecfa2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eaed039595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eaf00688c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eaf00688c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eaf00688c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eaf00688c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eaf00688c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eaf00688c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eaf00688c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eaf00688c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eaf00688c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eaf00688c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eaf226d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eaeefc9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eaeefd45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eaeed7fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eaeed7fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eaeed80808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eaeed7f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eaeed7f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eaeed7f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eaf366194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eaf366a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eaf3652529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eaf367cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3cc2d2b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eaecfa143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc9,0xa1,0xcd,0x84,0x32, Step #5: \311\241\315\2042 Step #5: artifact_prefix='./'; Test unit written to ./oom-a9be045812d27c835988170e0fa4f5f9350a7783 Step #5: Base64: yaHNhDI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 668 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3962231469 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562b49946d60, 0x562b49b2f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562b49b2f720,0x562b4b9b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9be045812d27c835988170e0fa4f5f9350a7783' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 729 processed earlier; will process 10247 files now Step #5: #1 pulse cov: 10360 ft: 10361 exec/s: 0 rss: 176Mb Step #5: ==24082== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562b404892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562b46ac4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562b46aa746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562b46aa738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562b4048f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562b403f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562b403eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562b40481595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562b434b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562b434b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562b434b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562b434b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562b434b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562b434b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562b434b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562b434b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562b434b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562b434b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562b456b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562b42411578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562b4241c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562b421c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562b421c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562b421c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562b421c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562b421c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562b421c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562b46aa994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562b46ab27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562b46a9a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562b46ac4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f345a48a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562b403e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x3b,0x32,0x3a,0x3d, Step #5: :;2:= Step #5: artifact_prefix='./'; Test unit written to ./oom-42c4ecef550fd95c40cb6f9a543b3df2bc1b7906 Step #5: Base64: OjsyOj0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 669 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3962750728 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562a320b5d60, 0x562a3229e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562a3229e720,0x562a341282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/42c4ecef550fd95c40cb6f9a543b3df2bc1b7906' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 731 processed earlier; will process 10245 files now Step #5: ==24118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562a28bf82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562a2f233728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562a2f21646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562a2f21638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562a28bfe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562a28b5f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562a28b59c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562a28bf0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562a2bc1f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562a2bc1f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562a2bc1f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562a2bc1f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562a2bc1f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562a2bc1f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562a2bc1f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562a2bc1f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562a2bc1f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562a2bc1f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562a2de2445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562a2ab80578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562a2ab8b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562a2a936d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562a2a936d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562a2a937808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562a2a936944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562a2a936944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562a2a936944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562a2f21894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562a2f2217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562a2f209529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562a2f233fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f80c8665082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562a28b5843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0x20,0x20,0x20, Step #5: -\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-7f842834c2479f9afdf5054e8cb32f57bd225d3a Step #5: Base64: LQogICA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 670 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3963195440 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a3cc22cd60, 0x55a3cc41571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a3cc415720,0x55a3ce29f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f842834c2479f9afdf5054e8cb32f57bd225d3a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 732 processed earlier; will process 10244 files now Step #5: ==24154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3c2d6f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a3c93aa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a3c938d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a3c938d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3c2d75652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a3c2cd642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a3c2cd0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3c2d67595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3c5d968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3c5d968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3c5d968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3c5d968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3c5d968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3c5d968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3c5d968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3c5d968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3c5d968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3c5d968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a3c7f9b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a3c4cf7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3c4d025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3c4aadd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3c4aadd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3c4aae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3c4aad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3c4aad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3c4aad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a3c938f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a3c93987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a3c9380529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a3c93aafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1bb2d3d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a3c2ccf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x27,0x3a,0x5c,0x3d, Step #5: \000':\\= Step #5: artifact_prefix='./'; Test unit written to ./oom-aa2585d72fb2805edefb603c02579f46717a1951 Step #5: Base64: ACc6XD0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 671 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3963640443 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556595280d60, 0x55659546971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556595469720,0x5565972f32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aa2585d72fb2805edefb603c02579f46717a1951' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 733 processed earlier; will process 10243 files now Step #5: ==24190== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55658bdc32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5565923fe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5565923e146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5565923e138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55658bdc9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55658bd2a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55658bd24c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55658bdbb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55658edea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55658edea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55658edea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55658edea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55658edea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55658edea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55658edea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55658edea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55658edea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55658edea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556590fef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55658dd4b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55658dd565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55658db01d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55658db01d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55658db02808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55658db01944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55658db01944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55658db01944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5565923e394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5565923ec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5565923d4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5565923fefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2c89b1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55658bd2343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x73, Step #5: DanMs Step #5: artifact_prefix='./'; Test unit written to ./oom-f3deeaf93ddbbc2c0231eda3b83ed837c995a346 Step #5: Base64: RGFuTXM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 672 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3964083129 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559f10539d60, 0x559f1072271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559f10722720,0x559f125ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f3deeaf93ddbbc2c0231eda3b83ed837c995a346' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 734 processed earlier; will process 10242 files now Step #5: ==24226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559f0707c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559f0d6b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559f0d69a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559f0d69a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559f07082652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559f06fe342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559f06fddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559f07074595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559f0a0a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559f0a0a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559f0a0a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559f0a0a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559f0a0a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559f0a0a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559f0a0a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559f0a0a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559f0a0a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559f0a0a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559f0c2a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559f09004578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559f0900f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559f08dbad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559f08dbad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559f08dbb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559f08dba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559f08dba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559f08dba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559f0d69c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559f0d6a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559f0d68d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559f0d6b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f312f65f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559f06fdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4,0x22,0x22,0xde,0x80, Step #5: \004\"\"\336\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-45af5c8d625e14bdf8f08b177f4f942d86db755d Step #5: Base64: BCIi3oA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 673 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3964534126 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55edd691fd60, 0x55edd6b0871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55edd6b08720,0x55edd89922c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/45af5c8d625e14bdf8f08b177f4f942d86db755d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 735 processed earlier; will process 10241 files now Step #5: ==24262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55edcd4622d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55edd3a9d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55edd3a8046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55edd3a8038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55edcd468652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55edcd3c942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55edcd3c3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55edcd45a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55edd04898c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55edd04898c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55edd04898c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55edd04898c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55edd04898c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55edd04898c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55edd04898c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55edd04898c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55edd04898c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55edd04898c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55edd268e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55edcf3ea578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55edcf3f55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55edcf1a0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55edcf1a0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55edcf1a1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55edcf1a0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55edcf1a0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55edcf1a0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55edd3a8294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55edd3a8b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55edd3a73529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55edd3a9dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3d3e7da082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55edcd3c243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x4e,0x44,0x45,0x58, Step #5: INDEX Step #5: artifact_prefix='./'; Test unit written to ./oom-2704c1d8c3fc215c38ee176f6cc30e434a22b7d7 Step #5: Base64: SU5ERVg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 674 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3964982281 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559315612d60, 0x5593157fb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593157fb720,0x5593176852c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2704c1d8c3fc215c38ee176f6cc30e434a22b7d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 736 processed earlier; will process 10240 files now Step #5: #1 pulse cov: 3568 ft: 3569 exec/s: 0 rss: 158Mb Step #5: ==24298== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55930c1552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559312790728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55931277346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55931277338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55930c15b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55930c0bc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55930c0b6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55930c14d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55930f17c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55930f17c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55930f17c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55930f17c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55930f17c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55930f17c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55930f17c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55930f17c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55930f17c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55930f17c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55931138145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55930e0dd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55930e0e85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55930de93d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55930de93d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55930de94808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55930de93944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55930de93944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55930de93944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55931277594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55931277e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559312766529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559312790fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc6627ab082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55930c0b543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1a,0x0,0x0,0x0,0x4, Step #5: \032\000\000\000\004 Step #5: artifact_prefix='./'; Test unit written to ./oom-5e569faf5f3958c9fa30d907523f49b0d1fe1181 Step #5: Base64: GgAAAAQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 675 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3965469619 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585b3847d60, 0x5585b3a3071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585b3a30720,0x5585b58ba2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5e569faf5f3958c9fa30d907523f49b0d1fe1181' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 738 processed earlier; will process 10238 files now Step #5: ==24334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585aa38a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585b09c5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585b09a846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585b09a838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585aa390652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585aa2f142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585aa2ebc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585aa382595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585ad3b18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585ad3b18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585ad3b18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585ad3b18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585ad3b18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585ad3b18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585ad3b18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585ad3b18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585ad3b18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585ad3b18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585af5b645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585ac312578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585ac31d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5585ac0c8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5585ac0c8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5585ac0c9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5585ac0c8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5585ac0c8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5585ac0c8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585b09aa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585b09b37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585b099b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585b09c5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f43e7c55082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585aa2ea43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x90,0xa2,0x81,0x98, Step #5: \360\220\242\201\230 Step #5: artifact_prefix='./'; Test unit written to ./oom-6d21ff6e2eb8d46dcea6e6010f5cf6bd96436968 Step #5: Base64: 8JCigZg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 676 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3965909509 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f2c556dd60, 0x55f2c575671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f2c5756720,0x55f2c75e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6d21ff6e2eb8d46dcea6e6010f5cf6bd96436968' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 739 processed earlier; will process 10237 files now Step #5: #1 pulse cov: 3735 ft: 3736 exec/s: 0 rss: 157Mb Step #5: ==24370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f2bc0b02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f2c26eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f2c26ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f2c26ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f2bc0b6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f2bc01742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f2bc011c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f2bc0a8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f2bf0d78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f2bf0d78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f2bf0d78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f2bf0d78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f2bf0d78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f2bf0d78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f2bf0d78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f2bf0d78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f2bf0d78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f2bf0d78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f2c12dc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f2be038578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f2be0435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f2bddeed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f2bddeed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f2bddef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f2bddee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f2bddee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f2bddee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f2c26d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f2c26d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f2c26c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f2c26ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0f3ea3c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f2bc01043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x2d,0x74,0x41,0x59, Step #5: i-tAY Step #5: artifact_prefix='./'; Test unit written to ./oom-0cf02f32a1e24e5407e8651c3dc73aa4f6957a8d Step #5: Base64: aS10QVk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 677 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3966393173 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5623d972bd60, 0x5623d991471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5623d9914720,0x5623db79e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0cf02f32a1e24e5407e8651c3dc73aa4f6957a8d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 741 processed earlier; will process 10235 files now Step #5: ==24406== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5623d026e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5623d68a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5623d688c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5623d688c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5623d0274652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5623d01d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5623d01cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5623d0266595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623d32958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623d32958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623d32958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623d32958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623d32958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623d32958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623d32958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623d32958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623d32958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623d32958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5623d549a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5623d21f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5623d22015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5623d1facd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5623d1facd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5623d1fad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5623d1fac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5623d1fac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5623d1fac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5623d688e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623d68977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5623d687f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5623d68a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4d12871082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5623d01ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x66,0xa,0x39,0x35, Step #5: Pf\01295 Step #5: artifact_prefix='./'; Test unit written to ./oom-1ff284cac72b23d803b7a1bcb91452c0910fd379 Step #5: Base64: UGYKOTU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 678 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3966840080 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bc46406d60, 0x55bc465ef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bc465ef720,0x55bc484792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1ff284cac72b23d803b7a1bcb91452c0910fd379' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 742 processed earlier; will process 10234 files now Step #5: ==24442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bc3cf492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bc43584728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bc4356746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bc4356738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bc3cf4f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bc3ceb042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bc3ceaac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bc3cf41595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bc3ff708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bc3ff708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bc3ff708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bc3ff708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bc3ff708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bc3ff708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bc3ff708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bc3ff708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bc3ff708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bc3ff708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bc4217545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bc3eed1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bc3eedc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bc3ec87d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bc3ec87d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bc3ec88808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bc3ec87944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bc3ec87944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bc3ec87944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bc4356994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bc435727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bc4355a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bc43584fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe2e0938082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bc3cea943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xea,0xb6,0xbf,0x5d, Step #5: [\352\266\277] Step #5: artifact_prefix='./'; Test unit written to ./oom-2f6ed2caa6135e7295ceb6bead6ade726f9f0fcd Step #5: Base64: W+q2v10= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 679 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3967283620 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c8641ded60, 0x55c8643c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c8643c7720,0x55c8662512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f6ed2caa6135e7295ceb6bead6ade726f9f0fcd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 743 processed earlier; will process 10233 files now Step #5: ==24478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c85ad212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c86135c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c86133f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c86133f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c85ad27652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c85ac8842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c85ac82c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c85ad19595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c85dd488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c85dd488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c85dd488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c85dd488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c85dd488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c85dd488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c85dd488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c85dd488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c85dd488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c85dd488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c85ff4d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c85cca9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c85ccb45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c85ca5fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c85ca5fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c85ca60808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c85ca5f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c85ca5f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c85ca5f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c86134194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c86134a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c861332529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c86135cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d2f96b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c85ac8143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x67, Step #5: Step #5: Step #5: #0 0x55898c9552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558992f90728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558992f7346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558992f7338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55898c95b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55898c8bc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55898c8b6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55898c94d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55898f97c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55898f97c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55898f97c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55898f97c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55898f97c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55898f97c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55898f97c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55898f97c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55898f97c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55898f97c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558991b8145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55898e8dd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55898e8e85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55898e693d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55898e693d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55898e694808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55898e693944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55898e693944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55898e693944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558992f7594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558992f7e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558992f66529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558992f90fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fef66aaf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55898c8b543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x7b,0x5b,0x5e,0x5d, Step #5: :{[^] Step #5: artifact_prefix='./'; Test unit written to ./oom-02e632fc153075df169d48558826dc840e9f8f55 Step #5: Base64: OntbXl0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 681 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3968177204 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557009df1d60, 0x557009fda71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557009fda720,0x55700be642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/02e632fc153075df169d48558826dc840e9f8f55' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 745 processed earlier; will process 10231 files now Step #5: #1 pulse cov: 3450 ft: 3451 exec/s: 0 rss: 156Mb Step #5: #2 pulse cov: 6830 ft: 7143 exec/s: 0 rss: 171Mb Step #5: ==24550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5570009342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557006f6f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557006f5246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557006f5238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55700093a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55700089b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557000895c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55700092c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55700395b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55700395b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55700395b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55700395b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55700395b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55700395b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55700395b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55700395b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55700395b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55700395b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557005b6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5570028bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570028c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557002672d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557002672d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557002673808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557002672944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557002672944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557002672944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557006f5494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557006f5d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557006f45529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557006f6ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c0c23b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55700089443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4,0x55,0x1,0x54,0x3d, Step #5: \004U\001T= Step #5: artifact_prefix='./'; Test unit written to ./oom-3bb66e0b2d29f4e72fe2e7107822fff315163520 Step #5: Base64: BFUBVD0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 682 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3968709460 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562aa955dd60, 0x562aa974671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562aa9746720,0x562aab5d02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3bb66e0b2d29f4e72fe2e7107822fff315163520' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 748 processed earlier; will process 10228 files now Step #5: ==24586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562aa00a02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562aa66db728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562aa66be46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562aa66be38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562aa00a6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562aa000742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562aa0001c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562aa0098595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562aa30c78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562aa30c78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562aa30c78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562aa30c78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562aa30c78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562aa30c78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562aa30c78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562aa30c78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562aa30c78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562aa30c78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562aa52cc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562aa2028578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562aa20335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562aa1dded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562aa1dded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562aa1ddf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562aa1dde944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562aa1dde944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562aa1dde944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562aa66c094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562aa66c97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562aa66b1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562aa66dbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee16aef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562aa000043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x0,0x10,0xd2,0x88, Step #5: =\000\020\322\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-21a6ae434571722baf659971819fa4b552d2864b Step #5: Base64: PQAQ0og= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 683 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3969158058 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f937c3ed60, 0x55f937e2771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f937e27720,0x55f939cb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/21a6ae434571722baf659971819fa4b552d2864b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 749 processed earlier; will process 10227 files now Step #5: #1 pulse cov: 3540 ft: 3541 exec/s: 0 rss: 160Mb Step #5: ==24622== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f92e7812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f934dbc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f934d9f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f934d9f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f92e787652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f92e6e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f92e6e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f92e779595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9317a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9317a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9317a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9317a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9317a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9317a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9317a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9317a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9317a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9317a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9339ad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f930709578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9307145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9304bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9304bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f9304c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9304bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9304bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9304bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f934da194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f934daa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f934d92529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f934dbcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe88262a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f92e6e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xd9,0x98,0x6b,0x5d, Step #5: [\331\230k] Step #5: artifact_prefix='./'; Test unit written to ./oom-ef8984de14eb751a151171177399388b59bef3e8 Step #5: Base64: W9mYa10= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 684 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3969642930 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c44d4a2d60, 0x55c44d68b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c44d68b720,0x55c44f5152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ef8984de14eb751a151171177399388b59bef3e8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 751 processed earlier; will process 10225 files now Step #5: ==24658== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c443fe52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c44a620728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c44a60346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c44a60338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c443feb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c443f4c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c443f46c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c443fdd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c44700c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c44700c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c44700c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c44700c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c44700c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c44700c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c44700c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c44700c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c44700c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c44700c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c44921145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c445f6d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c445f785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c445d23d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c445d23d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c445d24808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c445d23944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c445d23944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c445d23944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c44a60594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c44a60e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c44a5f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c44a620fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f96cff42082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c443f4543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0xc,0x5a,0x5e,0x37, Step #5: X\014Z^7 Step #5: artifact_prefix='./'; Test unit written to ./oom-0722ffebac374c74a8e8fcece92071babeb8d648 Step #5: Base64: WAxaXjc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 685 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3970086934 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f9559ed60, 0x561f9578771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f95787720,0x561f976112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0722ffebac374c74a8e8fcece92071babeb8d648' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 752 processed earlier; will process 10224 files now Step #5: ==24694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f8c0e12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f9271c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f926ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f926ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f8c0e7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f8c04842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f8c042c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f8c0d9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f8f1088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f8f1088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f8f1088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f8f1088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f8f1088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f8f1088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f8f1088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f8f1088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f8f1088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f8f1088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f9130d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f8e069578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f8e0745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f8de1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f8de1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f8de20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f8de1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f8de1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f8de1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f9270194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f9270a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f926f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f9271cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4a1ea25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f8c04143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x31,0x30,0x36,0x33, Step #5: 31063 Step #5: artifact_prefix='./'; Test unit written to ./oom-ee2bb631c340b11b7a4a3389a1fec7375c75e46c Step #5: Base64: MzEwNjM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 686 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3970531605 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560417d94d60, 0x560417f7d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560417f7d720,0x560419e072c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee2bb631c340b11b7a4a3389a1fec7375c75e46c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 753 processed earlier; will process 10223 files now Step #5: ==24730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56040e8d72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560414f12728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560414ef546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560414ef538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56040e8dd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56040e83e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56040e838c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56040e8cf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604118fe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604118fe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604118fe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604118fe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604118fe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604118fe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604118fe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604118fe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604118fe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604118fe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560413b0345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56041085f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56041086a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560410615d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560410615d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560410616808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560410615944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560410615944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560410615944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560414ef794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560414f007b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560414ee8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560414f12fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa61b35d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56040e83743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f,0xa,0x2f,0x2f, Step #5: //\012// Step #5: artifact_prefix='./'; Test unit written to ./oom-bfeeb71b271df1009e6fed82e43be1a30ecac053 Step #5: Base64: Ly8KLy8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 687 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3970965052 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555cbe68fd60, 0x555cbe87871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555cbe878720,0x555cc07022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bfeeb71b271df1009e6fed82e43be1a30ecac053' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 754 processed earlier; will process 10222 files now Step #5: ==24766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555cb51d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555cbb80d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555cbb7f046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555cbb7f038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555cb51d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555cb513942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555cb5133c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555cb51ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555cb81f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555cb81f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555cb81f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555cb81f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555cb81f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555cb81f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555cb81f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555cb81f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555cb81f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555cb81f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555cba3fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555cb715a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555cb71655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555cb6f10d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555cb6f10d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555cb6f11808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555cb6f10944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555cb6f10944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555cb6f10944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555cbb7f294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555cbb7fb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555cbb7e3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555cbb80dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa29cb8a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555cb513243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x15,0x3f,0xe1,0x9f,0x96, Step #5: \025?\341\237\226 Step #5: artifact_prefix='./'; Test unit written to ./oom-35f691db77a11829fc64bf2d3d652f65ffd7ba5a Step #5: Base64: FT/hn5Y= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 688 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3971417150 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a5fec4d60, 0x556a600ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a600ad720,0x556a61f372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/35f691db77a11829fc64bf2d3d652f65ffd7ba5a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 755 processed earlier; will process 10221 files now Step #5: ==24802== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a56a072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a5d042728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a5d02546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a5d02538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a56a0d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a5696e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a56968c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a569ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a59a2e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a59a2e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a59a2e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a59a2e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a59a2e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a59a2e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a59a2e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a59a2e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a59a2e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a59a2e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a5bc3345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a5898f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a5899a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a58745d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a58745d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a58746808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a58745944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a58745944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a58745944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a5d02794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a5d0307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a5d018529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a5d042fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08339da082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a5696743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xda,0xb8,0x7b,0x36,0x7d, Step #5: \332\270{6} Step #5: artifact_prefix='./'; Test unit written to ./oom-beb9083d3bd23e166f226e85125e58827bac652e Step #5: Base64: 2rh7Nn0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 689 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3971860936 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559276a39d60, 0x559276c2271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559276c22720,0x559278aac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/beb9083d3bd23e166f226e85125e58827bac652e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 756 processed earlier; will process 10220 files now Step #5: ==24838== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55926d57c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559273bb7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559273b9a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559273b9a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55926d582652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55926d4e342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55926d4ddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55926d574595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5592705a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5592705a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5592705a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5592705a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5592705a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5592705a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5592705a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5592705a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5592705a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5592705a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5592727a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55926f504578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55926f50f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55926f2bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55926f2bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55926f2bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55926f2ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55926f2ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55926f2ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559273b9c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559273ba57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559273b8d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559273bb7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5d5ce1a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55926d4dc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x7c,0xe7,0xbd,0xbd, Step #5: .|\347\275\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-f78bb231416ccd3ac5c9d09d14401ee22f7a7021 Step #5: Base64: Lnznvb0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 690 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3972317925 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560c33b0d60, 0x5560c359971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560c3599720,0x5560c54232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f78bb231416ccd3ac5c9d09d14401ee22f7a7021' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 757 processed earlier; will process 10219 files now Step #5: #1 pulse cov: 3561 ft: 3562 exec/s: 0 rss: 158Mb Step #5: ==24874== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560b9ef32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560c052e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560c051146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560c051138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560b9ef9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560b9e5a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560b9e54c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560b9eeb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560bcf1a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560bcf1a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560bcf1a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560bcf1a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560bcf1a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560bcf1a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560bcf1a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560bcf1a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560bcf1a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560bcf1a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560bf11f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560bbe7b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560bbe865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560bbc31d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560bbc31d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560bbc32808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560bbc31944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560bbc31944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560bbc31944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560c051394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560c051c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560c0504529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560c052efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa38501d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560b9e5343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x27,0x20,0x31,0x24, Step #5: $' 1$ Step #5: artifact_prefix='./'; Test unit written to ./oom-fdb030eb91392e5319ac6da539595549a3808fa1 Step #5: Base64: JCcgMSQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 691 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3972811923 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562b8bcafd60, 0x562b8be9871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562b8be98720,0x562b8dd222c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fdb030eb91392e5319ac6da539595549a3808fa1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 759 processed earlier; will process 10217 files now Step #5: ==24910== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562b827f22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562b88e2d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562b88e1046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562b88e1038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562b827f8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562b8275942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562b82753c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562b827ea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562b858198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562b858198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562b858198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562b858198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562b858198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562b858198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562b858198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562b858198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562b858198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562b858198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562b87a1e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562b8477a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562b847855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562b84530d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562b84530d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562b84531808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562b84530944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562b84530944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562b84530944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562b88e1294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562b88e1b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562b88e03529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562b88e2dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3c8759c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562b8275243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x66,0x66,0x3a,0x3a, Step #5: fff:: Step #5: artifact_prefix='./'; Test unit written to ./oom-15200c8b71cd93667b0c28d56fec7615837bb2a5 Step #5: Base64: ZmZmOjo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 692 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3973263499 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b671ebcd60, 0x55b6720a571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b6720a5720,0x55b673f2f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/15200c8b71cd93667b0c28d56fec7615837bb2a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 760 processed earlier; will process 10216 files now Step #5: #1 pulse cov: 3461 ft: 3462 exec/s: 0 rss: 159Mb Step #5: ==24946== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b6689ff2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b66f03a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b66f01d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b66f01d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b668a05652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b66896642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b668960c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b6689f7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b66ba268c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b66ba268c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b66ba268c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b66ba268c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b66ba268c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b66ba268c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b66ba268c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b66ba268c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b66ba268c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b66ba268c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b66dc2b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b66a987578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b66a9925a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b66a73dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b66a73dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b66a73e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b66a73d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b66a73d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b66a73d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b66f01f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b66f0287b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b66f010529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b66f03afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd32f962082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b66895f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0xe9,0xbe,0xb6,0x5d, Step #5: [^\351\276\266] Step #5: artifact_prefix='./'; Test unit written to ./oom-1fbaaac64e87015f7e2f7a64df3152e3588d2789 Step #5: Base64: W17pvrZd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 693 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3973752082 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b30be3fd60, 0x55b30c02871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b30c028720,0x55b30deb22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1fbaaac64e87015f7e2f7a64df3152e3588d2789' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 762 processed earlier; will process 10214 files now Step #5: ==24982== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b3029822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b308fbd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b308fa046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b308fa038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b302988652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b3028e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b3028e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b30297a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b3059a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b3059a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b3059a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b3059a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b3059a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b3059a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b3059a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b3059a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b3059a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b3059a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b307bae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b30490a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b3049155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b3046c0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b3046c0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b3046c1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b3046c0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b3046c0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b3046c0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b308fa294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b308fab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b308f93529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b308fbdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7480bcf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b3028e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x42,0x27,0x27,0x2b,0x2d, Step #5: -B''+- Step #5: artifact_prefix='./'; Test unit written to ./oom-03a274d2734999acf001412787b7798114aea702 Step #5: Base64: LUInJyst Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 694 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3974199209 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad75e1ad60, 0x55ad7600371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad76003720,0x55ad77e8d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/03a274d2734999acf001412787b7798114aea702' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 763 processed earlier; will process 10213 files now Step #5: ==25018== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad6c95d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad72f98728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad72f7b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad72f7b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad6c963652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad6c8c442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad6c8bec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad6c955595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad6f9848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad6f9848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad6f9848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad6f9848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad6f9848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad6f9848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad6f9848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad6f9848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad6f9848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad6f9848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad71b8945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad6e8e5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad6e8f05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad6e69bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad6e69bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad6e69c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad6e69b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad6e69b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad6e69b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad72f7d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad72f867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad72f6e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad72f98fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3cbcaaa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad6c8bd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0xa,0x2b,0xa,0x65,0xa, Step #5: :\012+\012e\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-8d11e3240d82b49c38307d5fe8a3133de83fd312 Step #5: Base64: OgorCmUK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 695 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3974648262 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56201cdcbd60, 0x56201cfb471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56201cfb4720,0x56201ee3e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d11e3240d82b49c38307d5fe8a3133de83fd312' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 764 processed earlier; will process 10212 files now Step #5: ==25054== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56201390e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562019f49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562019f2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562019f2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562013914652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56201387542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56201386fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562013906595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5620169358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5620169358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5620169358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5620169358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5620169358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5620169358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5620169358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5620169358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5620169358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5620169358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562018b3a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562015896578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5620158a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56201564cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56201564cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56201564d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56201564c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56201564c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56201564c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562019f2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562019f377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562019f1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562019f49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3054c7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56201386e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x2e,0x7c,0x2e,0x2e,0x1f, Step #5: ..|..\037 Step #5: artifact_prefix='./'; Test unit written to ./oom-c50b208b8ff04b0e83a06dd4ee2655d90d867d81 Step #5: Base64: Li58Li4f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 696 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3975089342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56528768fd60, 0x56528787871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565287878720,0x5652897022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c50b208b8ff04b0e83a06dd4ee2655d90d867d81' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 765 processed earlier; will process 10211 files now Step #5: ==25090== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56527e1d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56528480d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5652847f046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5652847f038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56527e1d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56527e13942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56527e133c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56527e1ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652811f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652811f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652811f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652811f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652811f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652811f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652811f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652811f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652811f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652811f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5652833fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56528015a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652801655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56527ff10d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56527ff10d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56527ff11808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56527ff10944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56527ff10944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56527ff10944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5652847f294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652847fb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5652847e3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56528480dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8fb6345082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56527e13243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x0,0x24,0x0,0x24,0x3d, Step #5: %\000$\000$= Step #5: artifact_prefix='./'; Test unit written to ./oom-b66171dbbe7569cfd672c239874fa7b2d90ab40b Step #5: Base64: JQAkACQ9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 697 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3975546480 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5594656cbd60, 0x5594658b471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5594658b4720,0x55946773e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b66171dbbe7569cfd672c239874fa7b2d90ab40b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 766 processed earlier; will process 10210 files now Step #5: ==25126== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55945c20e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559462849728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55946282c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55946282c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55945c214652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55945c17542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55945c16fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55945c206595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55945f2358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55945f2358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55945f2358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55945f2358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55945f2358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55945f2358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55945f2358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55945f2358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55945f2358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55945f2358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55946143a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55945e196578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55945e1a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55945df4cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55945df4cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55945df4d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55945df4c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55945df4c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55945df4c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55946282e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5594628377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55946281f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559462849fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f71af16b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55945c16e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xb8,0xab, Step #5: ws:\357\270\253 Step #5: artifact_prefix='./'; Test unit written to ./oom-58dfde0c1d08d85fcab1466af66358849ae3e1d8 Step #5: Base64: d3M677ir Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 698 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3975988300 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602a6fcbd60, 0x5602a71b471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602a71b4720,0x5602a903e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58dfde0c1d08d85fcab1466af66358849ae3e1d8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 767 processed earlier; will process 10209 files now Step #5: #1 pulse cov: 3513 ft: 3514 exec/s: 0 rss: 156Mb Step #5: #2 pulse cov: 3817 ft: 3986 exec/s: 0 rss: 158Mb Step #5: ==25162== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56029db0e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5602a4149728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5602a412c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5602a412c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56029db14652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56029da7542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56029da6fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56029db06595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5602a0b358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5602a0b358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5602a0b358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5602a0b358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5602a0b358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5602a0b358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5602a0b358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5602a0b358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5602a0b358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5602a0b358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602a2d3a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56029fa96578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56029faa15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56029f84cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56029f84cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56029f84d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56029f84c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56029f84c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56029f84c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5602a412e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602a41377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5602a411f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5602a4149fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a9e658082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56029da6e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0xda,0xb4,0x57,0xda,0xb4, Step #5: /\332\264W\332\264 Step #5: artifact_prefix='./'; Test unit written to ./oom-cb5dfd064308833584dd8e33c8031aa168125aa0 Step #5: Base64: L9q0V9q0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 699 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3976553820 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5559c2d57d60, 0x5559c2f4071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5559c2f40720,0x5559c4dca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cb5dfd064308833584dd8e33c8031aa168125aa0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 771 processed earlier; will process 10205 files now Step #5: ==25198== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5559b989a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5559bfed5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5559bfeb846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5559bfeb838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5559b98a0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5559b980142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5559b97fbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5559b9892595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5559bc8c18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5559bc8c18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5559bc8c18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5559bc8c18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5559bc8c18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5559bc8c18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5559bc8c18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5559bc8c18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5559bc8c18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5559bc8c18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5559beac645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5559bb822578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5559bb82d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5559bb5d8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5559bb5d8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5559bb5d9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5559bb5d8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5559bb5d8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5559bb5d8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5559bfeba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559bfec37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5559bfeab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5559bfed5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc56e3f0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5559b97fa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0xb8,0x19,0xa,0xdc,0xb8, Step #5: \334\270\031\012\334\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-7840a49740a43e8aa33039ae2566136eb375c748 Step #5: Base64: 3LgZCty4 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 700 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3976997925 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ace6b9d60, 0x560ace8a271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ace8a2720,0x560ad072c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7840a49740a43e8aa33039ae2566136eb375c748' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 772 processed earlier; will process 10204 files now Step #5: ==25234== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ac51fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560acb837728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560acb81a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560acb81a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ac5202652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ac516342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ac515dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ac51f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ac82238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ac82238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ac82238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ac82238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ac82238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ac82238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ac82238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ac82238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ac82238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ac82238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560aca42845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ac7184578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ac718f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ac6f3ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ac6f3ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ac6f3b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ac6f3a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ac6f3a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ac6f3a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560acb81c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560acb8257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560acb80d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560acb837fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2652a8a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ac515c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34,0x38,0x2d,0x35,0x30,0x30, Step #5: 48-500 Step #5: artifact_prefix='./'; Test unit written to ./oom-8aeb9b6298998effdf750558327f29dec91fb7e4 Step #5: Base64: NDgtNTAw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 701 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3977445527 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561746f43d60, 0x56174712c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56174712c720,0x561748fb62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8aeb9b6298998effdf750558327f29dec91fb7e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 773 processed earlier; will process 10203 files now Step #5: ==25270== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56173da862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5617440c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5617440a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5617440a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56173da8c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56173d9ed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56173d9e7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56173da7e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561740aad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561740aad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561740aad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561740aad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561740aad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561740aad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561740aad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561740aad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561740aad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561740aad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561742cb245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56173fa0e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56173fa195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56173f7c4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56173f7c4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56173f7c5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56173f7c4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56173f7c4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56173f7c4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5617440a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5617440af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561744097529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5617440c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f65eb4f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56173d9e643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x32,0x0,0x0,0x0,0x0, Step #5: \0012\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-3a516e0104c615bca50fe3caf759707ca226914c Step #5: Base64: ATIAAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 702 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3977890232 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55abf06ffd60, 0x55abf08e871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55abf08e8720,0x55abf27722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a516e0104c615bca50fe3caf759707ca226914c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 774 processed earlier; will process 10202 files now Step #5: #1 pulse cov: 3553 ft: 3554 exec/s: 0 rss: 157Mb Step #5: ==25306== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55abe72422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55abed87d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55abed86046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55abed86038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55abe7248652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55abe71a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55abe71a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55abe723a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55abea2698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55abea2698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55abea2698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55abea2698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55abea2698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55abea2698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55abea2698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55abea2698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55abea2698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55abea2698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55abec46e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55abe91ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55abe91d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55abe8f80d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55abe8f80d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55abe8f81808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55abe8f80944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55abe8f80944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55abe8f80944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55abed86294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55abed86b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55abed853529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55abed87dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4a1aec4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55abe71a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x74,0x3e,0x3c,0x2f,0x74, Step #5: Step #5: Step #5: #0 0x555bf665f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555bfcc9a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555bfcc7d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555bfcc7d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555bf6665652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555bf65c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555bf65c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555bf6657595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555bf96868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555bf96868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555bf96868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555bf96868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555bf96868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555bf96868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555bf96868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555bf96868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555bf96868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555bf96868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555bfb88b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555bf85e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555bf85f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555bf839dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555bf839dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555bf839e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555bf839d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555bf839d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555bf839d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555bfcc7f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555bfcc887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555bfcc70529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555bfcc9afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc10b9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555bf65bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x2e,0xcd,0x8f,0x22,0x34, Step #5: 1.\315\217\"4 Step #5: artifact_prefix='./'; Test unit written to ./oom-6959fa9b374ff2a94f4899c27f5f31be85ed7bd0 Step #5: Base64: MS7NjyI0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 704 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3978829151 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8ba112d60, 0x55e8ba2fb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8ba2fb720,0x55e8bc1852c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6959fa9b374ff2a94f4899c27f5f31be85ed7bd0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 777 processed earlier; will process 10199 files now Step #5: ==25378== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8b0c552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8b7290728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8b727346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8b727338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8b0c5b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8b0bbc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8b0bb6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8b0c4d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8b3c7c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8b3c7c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8b3c7c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8b3c7c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8b3c7c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8b3c7c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8b3c7c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8b3c7c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8b3c7c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8b3c7c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8b5e8145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8b2bdd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8b2be85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8b2993d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8b2993d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8b2994808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8b2993944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8b2993944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8b2993944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8b727594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8b727e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8b7266529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8b7290fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb76134f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8b0bb543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x49,0x4c,0x45,0x20,0x4c, Step #5: FILE L Step #5: artifact_prefix='./'; Test unit written to ./oom-e6df15100d07020fe3bfa1328ae3f97d033dd672 Step #5: Base64: RklMRSBM Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 705 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3979277535 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559a95ba0d60, 0x559a95d8971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559a95d89720,0x559a97c132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e6df15100d07020fe3bfa1328ae3f97d033dd672' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 778 processed earlier; will process 10198 files now Step #5: ==25414== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559a8c6e32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559a92d1e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559a92d0146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559a92d0138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559a8c6e9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559a8c64a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559a8c644c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559a8c6db595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559a8f70a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559a8f70a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559a8f70a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559a8f70a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559a8f70a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559a8f70a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559a8f70a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559a8f70a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559a8f70a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559a8f70a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559a9190f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559a8e66b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559a8e6765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559a8e421d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559a8e421d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559a8e422808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559a8e421944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559a8e421944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559a8e421944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559a92d0394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559a92d0c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559a92cf4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559a92d1efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a2a58a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559a8c64343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0x85,0xc2,0x85,0xc2,0x85, Step #5: \302\205\302\205\302\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-52bdff75b1a9a74f8131d474d05884febf93223e Step #5: Base64: woXChcKF Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 706 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3979718543 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587d7f2ed60, 0x5587d811771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5587d8117720,0x5587d9fa12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/52bdff75b1a9a74f8131d474d05884febf93223e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 779 processed earlier; will process 10197 files now Step #5: ==25450== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5587cea712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5587d50ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5587d508f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5587d508f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5587cea77652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5587ce9d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5587ce9d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5587cea69595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5587d1a988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5587d1a988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5587d1a988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5587d1a988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5587d1a988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5587d1a988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5587d1a988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5587d1a988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5587d1a988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5587d1a988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5587d3c9d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5587d09f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587d0a045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5587d07afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5587d07afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5587d07b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5587d07af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5587d07af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5587d07af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5587d509194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5587d509a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5587d5082529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5587d50acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feba30b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5587ce9d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0xb,0xb,0xb,0xb,0xb, Step #5: \013\013\013\013\013\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-deb92bbb535f00cc7976cbc7532288d9993a6c25 Step #5: Base64: CwsLCwsL Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 707 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3980149891 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558410443d60, 0x55841062c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55841062c720,0x5584124b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/deb92bbb535f00cc7976cbc7532288d9993a6c25' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 780 processed earlier; will process 10196 files now Step #5: ==25486== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558406f862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55840d5c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55840d5a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55840d5a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558406f8c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558406eed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558406ee7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558406f7e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558409fad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558409fad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558409fad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558409fad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558409fad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558409fad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558409fad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558409fad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558409fad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558409fad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55840c1b245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558408f0e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558408f195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558408cc4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558408cc4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558408cc5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558408cc4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558408cc4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558408cc4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55840d5a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55840d5af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55840d597529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55840d5c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9d6e488082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558406ee643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x0,0x2b,0xcf,0xa3,0x2, Step #5: =\000+\317\243\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-d9db1a119a422ed45df13bdd54c18257d731bf43 Step #5: Base64: PQArz6MC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 708 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3980594944 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e311d26d60, 0x55e311f0f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e311f0f720,0x55e313d992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d9db1a119a422ed45df13bdd54c18257d731bf43' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 781 processed earlier; will process 10195 files now Step #5: #1 pulse cov: 10298 ft: 10299 exec/s: 0 rss: 175Mb Step #5: ==25522== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e3088692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e30eea4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e30ee8746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e30ee8738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e30886f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e3087d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e3087cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e308861595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e30b8908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e30b8908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e30b8908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e30b8908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e30b8908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e30b8908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e30b8908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e30b8908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e30b8908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e30b8908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e30da9545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e30a7f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e30a7fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e30a5a7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e30a5a7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e30a5a8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e30a5a7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e30a5a7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e30a5a7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e30ee8994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e30ee927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e30ee7a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e30eea4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f178f8a3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e3087c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0xe1,0x9f,0xb6,0x7e,0x6f, Step #5: ?\341\237\266~o Step #5: artifact_prefix='./'; Test unit written to ./oom-7d2945249fdceffcbadcb6a19f7e931aa2e226b3 Step #5: Base64: P+Gftn5v Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 709 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3981107756 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5604086c1d60, 0x5604088aa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5604088aa720,0x56040a7342c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d2945249fdceffcbadcb6a19f7e931aa2e226b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 783 processed earlier; will process 10193 files now Step #5: ==25558== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5603ff2042d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56040583f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56040582246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56040582238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5603ff20a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5603ff16b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5603ff165c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5603ff1fc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56040222b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56040222b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56040222b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56040222b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56040222b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56040222b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56040222b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56040222b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56040222b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56040222b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56040443045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56040118c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604011975a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560400f42d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560400f42d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560400f43808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560400f42944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560400f42944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560400f42944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56040582494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56040582d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560405815529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56040583ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe64a534082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5603ff16443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x47,0x49,0x46,0x38,0x39,0x9e, Step #5: GIF89\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-f8f7275cca10078e5a6e363b356c91e475eeecb0 Step #5: Base64: R0lGODme Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 710 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3981560681 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55edfb01bd60, 0x55edfb20471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55edfb204720,0x55edfd08e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f8f7275cca10078e5a6e363b356c91e475eeecb0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 784 processed earlier; will process 10192 files now Step #5: ==25594== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55edf1b5e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55edf8199728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55edf817c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55edf817c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55edf1b64652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55edf1ac542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55edf1abfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55edf1b56595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55edf4b858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55edf4b858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55edf4b858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55edf4b858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55edf4b858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55edf4b858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55edf4b858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55edf4b858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55edf4b858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55edf4b858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55edf6d8a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55edf3ae6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55edf3af15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55edf389cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55edf389cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55edf389d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55edf389c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55edf389c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55edf389c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55edf817e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55edf81877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55edf816f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55edf8199fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc03824e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55edf1abe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0xea,0xa2,0xa9,0xff,0x8a, Step #5: \003\352\242\251\377\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-12acf9ca82f54c8df9fe39ce9dbd4e9527a3e0de Step #5: Base64: A+qiqf+K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 711 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3982003832 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c30ef03d60, 0x55c30f0ec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c30f0ec720,0x55c310f762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/12acf9ca82f54c8df9fe39ce9dbd4e9527a3e0de' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 785 processed earlier; will process 10191 files now Step #5: #1 pulse cov: 3450 ft: 3451 exec/s: 0 rss: 157Mb Step #5: ==25630== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c305a462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c30c081728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c30c06446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c30c06438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c305a4c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c3059ad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c3059a7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c305a3e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c308a6d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c308a6d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c308a6d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c308a6d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c308a6d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c308a6d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c308a6d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c308a6d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c308a6d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c308a6d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c30ac7245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c3079ce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c3079d95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c307784d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c307784d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c307785808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c307784944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c307784944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c307784944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c30c06694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c30c06f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c30c057529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c30c081fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f13d8cb0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c3059a643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x23,0x22,0x5c,0x65,0x22, Step #5: f#\"\\e\" Step #5: artifact_prefix='./'; Test unit written to ./oom-58bacc1f43f477941a0caafc45fc5375ddb6751e Step #5: Base64: ZiMiXGUi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 712 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3982501027 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5640e1d01d60, 0x5640e1eea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5640e1eea720,0x5640e3d742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58bacc1f43f477941a0caafc45fc5375ddb6751e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 787 processed earlier; will process 10189 files now Step #5: ==25666== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5640d88442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5640dee7f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5640dee6246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5640dee6238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5640d884a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5640d87ab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640d87a5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5640d883c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5640db86b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5640db86b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5640db86b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5640db86b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5640db86b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5640db86b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5640db86b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5640db86b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5640db86b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5640db86b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5640dda7045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5640da7cc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5640da7d75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5640da582d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5640da582d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5640da583808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5640da582944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5640da582944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5640da582944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5640dee6494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5640dee6d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5640dee55529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5640dee7ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f71262d6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5640d87a443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7a,0x60,0x3b,0x7a,0x60,0x3b, Step #5: z`;z`; Step #5: artifact_prefix='./'; Test unit written to ./oom-d88ff2008fd6fd2218ee781452b1cabc42ba884f Step #5: Base64: emA7emA7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 713 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3983079466 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563d53ee6d60, 0x563d540cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563d540cf720,0x563d55f592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d88ff2008fd6fd2218ee781452b1cabc42ba884f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 788 processed earlier; will process 10188 files now Step #5: #1 pulse cov: 3764 ft: 3765 exec/s: 0 rss: 159Mb Step #5: ==25702== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563d4aa292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563d51064728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563d5104746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563d5104738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563d4aa2f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563d4a99042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563d4a98ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563d4aa21595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563d4da508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563d4da508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563d4da508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563d4da508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563d4da508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563d4da508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563d4da508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563d4da508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563d4da508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563d4da508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563d4fc5545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563d4c9b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563d4c9bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563d4c767d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563d4c767d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563d4c768808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563d4c767944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563d4c767944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563d4c767944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563d5104994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563d510527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563d5103a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563d51064fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f365f9bc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563d4a98943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6c,0x49,0x53,0x74,0x65,0x4e, Step #5: lISteN Step #5: artifact_prefix='./'; Test unit written to ./oom-bb8609232ad0c9c91f0ef86dbfe85d8b4c47125e Step #5: Base64: bElTdGVO Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 714 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3983581633 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e6e028d60, 0x559e6e21171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e6e211720,0x559e7009b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bb8609232ad0c9c91f0ef86dbfe85d8b4c47125e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 790 processed earlier; will process 10186 files now Step #5: ==25738== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e64b6b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e6b1a6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e6b18946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e6b18938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e64b71652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e64ad242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e64accc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e64b63595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e67b928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e67b928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e67b928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e67b928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e67b928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e67b928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e67b928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e67b928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e67b928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e67b928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e69d9745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e66af3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e66afe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e668a9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e668a9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e668aa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e668a9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e668a9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e668a9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e6b18b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e6b1947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e6b17c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e6b1a6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdf788d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e64acb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0xb4,0xf0,0xb4,0x80,0x80, Step #5: \303\264\360\264\200\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-3d16d8d49fdd80ed77f42b59f6574eed467b8f30 Step #5: Base64: w7TwtICA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 715 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3984038275 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560670076d60, 0x56067025f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56067025f720,0x5606720e92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d16d8d49fdd80ed77f42b59f6574eed467b8f30' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 791 processed earlier; will process 10185 files now Step #5: #1 pulse cov: 3502 ft: 3503 exec/s: 0 rss: 160Mb Step #5: ==25774== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560666bb92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56066d1f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56066d1d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56066d1d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560666bbf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560666b2042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560666b1ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560666bb1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560669be08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560669be08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560669be08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560669be08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560669be08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560669be08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560669be08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560669be08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560669be08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560669be08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56066bde545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560668b41578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560668b4c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5606688f7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5606688f7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5606688f8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5606688f7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5606688f7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5606688f7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56066d1d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56066d1e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56066d1ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56066d1f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6c0be5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560666b1943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x22,0xef,0xb8,0xa2, Step #5: \"\\\"\357\270\242 Step #5: artifact_prefix='./'; Test unit written to ./oom-2eaf672c99e535e0e28fee08367acc2a86c683e0 Step #5: Base64: Ilwi77ii Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 716 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3984532505 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5591ec243d60, 0x5591ec42c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5591ec42c720,0x5591ee2b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2eaf672c99e535e0e28fee08367acc2a86c683e0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 793 processed earlier; will process 10183 files now Step #5: ==25810== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5591e2d862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591e93c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5591e93a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5591e93a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5591e2d8c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5591e2ced42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5591e2ce7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5591e2d7e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5591e5dad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5591e5dad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5591e5dad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5591e5dad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5591e5dad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5591e5dad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5591e5dad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5591e5dad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5591e5dad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5591e5dad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5591e7fb245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5591e4d0e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5591e4d195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5591e4ac4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5591e4ac4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5591e4ac5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5591e4ac4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5591e4ac4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5591e4ac4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5591e93a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591e93af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5591e9397529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591e93c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feaa3520082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5591e2ce643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x5b,0x29,0x2d,0x3e,0x5d, Step #5: :[)->] Step #5: artifact_prefix='./'; Test unit written to ./oom-d1da07a8a69debb721f60b4a833e14f84043cc60 Step #5: Base64: OlspLT5d Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 717 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3984991428 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e90044fd60, 0x55e90063871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e900638720,0x55e9024c22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d1da07a8a69debb721f60b4a833e14f84043cc60' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 794 processed earlier; will process 10182 files now Step #5: #1 pulse cov: 3632 ft: 3633 exec/s: 0 rss: 158Mb Step #5: ==25846== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8f6f922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8fd5cd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8fd5b046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8fd5b038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8f6f98652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8f6ef942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8f6ef3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8f6f8a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8f9fb98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8f9fb98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8f9fb98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8f9fb98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8f9fb98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8f9fb98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8f9fb98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8f9fb98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8f9fb98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8f9fb98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8fc1be45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8f8f1a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8f8f255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8f8cd0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8f8cd0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8f8cd1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8f8cd0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8f8cd0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8f8cd0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8fd5b294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8fd5bb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8fd5a3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8fd5cdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb889d1a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8f6ef243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbf,0xbd,0xef,0xbf,0xbd, Step #5: \357\277\275\357\277\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-8750ec9ddfe293cd1dc39b4245c21c270f8f52b7 Step #5: Base64: 77+977+9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 718 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3985478314 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b658a5bd60, 0x55b658c4471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b658c44720,0x55b65aace2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8750ec9ddfe293cd1dc39b4245c21c270f8f52b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 796 processed earlier; will process 10180 files now Step #5: ==25882== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b64f59e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b655bd9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b655bbc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b655bbc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b64f5a4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b64f50542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b64f4ffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b64f596595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b6525c58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b6525c58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b6525c58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b6525c58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b6525c58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b6525c58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b6525c58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b6525c58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b6525c58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b6525c58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b6547ca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b651526578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b6515315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b6512dcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b6512dcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b6512dd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b6512dc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b6512dc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b6512dc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b655bbe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b655bc77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b655baf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b655bd9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f176625f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b64f4fe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x1f,0x43,0x7c,0x2e,0x2e, Step #5: \001\037C|.. Step #5: artifact_prefix='./'; Test unit written to ./oom-ab56bc052a17eb9c32927b8fb10a026e4cdcc7ef Step #5: Base64: AR9DfC4u Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 719 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3985926135 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a7496fd60, 0x556a74b5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a74b58720,0x556a769e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab56bc052a17eb9c32927b8fb10a026e4cdcc7ef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 797 processed earlier; will process 10179 files now Step #5: ==25918== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a6b4b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a71aed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a71ad046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a71ad038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a6b4b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a6b41942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a6b413c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a6b4aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a6e4d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a6e4d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a6e4d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a6e4d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a6e4d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a6e4d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a6e4d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a6e4d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a6e4d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a6e4d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a706de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a6d43a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a6d4455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a6d1f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a6d1f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a6d1f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a6d1f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a6d1f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a6d1f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a71ad294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a71adb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a71ac3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a71aedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6518c19082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a6b41243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x23,0x5b,0x5d,0x2f,0x25, Step #5: /#[]/% Step #5: artifact_prefix='./'; Test unit written to ./oom-7ae752473c6b952c2b9e4f965c2517c25c70b8a6 Step #5: Base64: LyNbXS8l Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 720 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3986371034 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558e18656d60, 0x558e1883f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558e1883f720,0x558e1a6c92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7ae752473c6b952c2b9e4f965c2517c25c70b8a6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 798 processed earlier; will process 10178 files now Step #5: ==25954== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558e0f1992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558e157d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558e157b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558e157b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558e0f19f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558e0f10042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558e0f0fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558e0f191595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558e121c08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558e121c08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558e121c08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558e121c08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558e121c08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558e121c08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558e121c08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558e121c08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558e121c08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558e121c08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558e143c545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558e11121578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558e1112c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558e10ed7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558e10ed7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558e10ed8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558e10ed7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558e10ed7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558e10ed7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558e157b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558e157c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558e157aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558e157d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feff0891082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558e0f0f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9f,0xbf,0xad,0x7c,0x2f, Step #5: \360\237\277\255|/ Step #5: artifact_prefix='./'; Test unit written to ./oom-46f4ee81d45f52177fbc5c68da2364acccd2c7db Step #5: Base64: 8J+/rXwv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 721 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3986819141 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55955c52ad60, 0x55955c71371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55955c713720,0x55955e59d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/46f4ee81d45f52177fbc5c68da2364acccd2c7db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 799 processed earlier; will process 10177 files now Step #5: ==25990== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55955306d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5595596a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55955968b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55955968b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559553073652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559552fd442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559552fcec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559553065595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5595560948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5595560948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5595560948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5595560948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5595560948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5595560948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5595560948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5595560948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5595560948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5595560948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55955829945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559554ff5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5595550005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559554dabd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559554dabd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559554dac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559554dab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559554dab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559554dab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55955968d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5595596967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55955967e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5595596a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2358cad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559552fcd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x79,0x79,0x0,0xa,0x0,0xa, Step #5: yy\000\012\000\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-6802746f5aa30cfd447a183a5104cdb2eb451a62 Step #5: Base64: eXkACgAK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 722 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3987272688 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556f207bbd60, 0x556f209a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556f209a4720,0x556f2282e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6802746f5aa30cfd447a183a5104cdb2eb451a62' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 800 processed earlier; will process 10176 files now Step #5: ==26026== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556f172fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556f1d939728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556f1d91c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556f1d91c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556f17304652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556f1726542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556f1725fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556f172f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556f1a3258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556f1a3258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556f1a3258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556f1a3258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556f1a3258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556f1a3258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556f1a3258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556f1a3258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556f1a3258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556f1a3258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556f1c52a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556f19286578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556f192915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556f1903cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556f1903cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556f1903d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556f1903c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556f1903c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556f1903c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556f1d91e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556f1d9277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556f1d90f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556f1d939fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe98b56082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556f1725e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x7f,0x0,0x0,0x0, Step #5: = \177\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-b6a01743f76ee6d9e035f7ce35d3f3d1f8785a59 Step #5: Base64: PSB/AAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 723 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3987816621 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f32f893d60, 0x55f32fa7c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f32fa7c720,0x55f3319062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6a01743f76ee6d9e035f7ce35d3f3d1f8785a59' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 801 processed earlier; will process 10175 files now Step #5: ==26062== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f3263d62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f32ca11728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f32c9f446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f32c9f438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f3263dc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f32633d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f326337c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f3263ce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f3293fd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f3293fd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f3293fd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f3293fd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f3293fd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f3293fd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f3293fd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f3293fd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f3293fd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f3293fd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f32b60245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f32835e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f3283695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f328114d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f328114d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f328115808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f328114944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f328114944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f328114944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f32c9f694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f32c9ff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f32c9e7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f32ca11fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5c3e4be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f32633643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xb7,0xba,0x24,0x6d,0x24, Step #5: \357\267\272$m$ Step #5: artifact_prefix='./'; Test unit written to ./oom-027e6a70eeb14cd662e018a3d6fd40af9c2e501d Step #5: Base64: 77e6JG0k Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 724 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3988310668 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c03503d60, 0x557c036ec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c036ec720,0x557c055762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/027e6a70eeb14cd662e018a3d6fd40af9c2e501d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 802 processed earlier; will process 10174 files now Step #5: ==26098== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557bfa0462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c00681728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c0066446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c0066438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557bfa04c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557bf9fad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557bf9fa7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557bfa03e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557bfd06d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557bfd06d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557bfd06d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557bfd06d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557bfd06d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557bfd06d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557bfd06d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557bfd06d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557bfd06d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557bfd06d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557bff27245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557bfbfce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557bfbfd95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557bfbd84d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557bfbd84d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557bfbd85808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557bfbd84944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557bfbd84944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557bfbd84944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c0066694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c0066f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c00657529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c00681fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f37442f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557bf9fa643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0xa,0x2d,0xdf,0x84, Step #5: [^\012-\337\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-e0b6026330cb787891cb8b2f5c9266f7923f857d Step #5: Base64: W14KLd+E Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 725 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3988894470 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564b7b6fcd60, 0x564b7b8e571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564b7b8e5720,0x564b7d76f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e0b6026330cb787891cb8b2f5c9266f7923f857d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 803 processed earlier; will process 10173 files now Step #5: #1 pulse cov: 3595 ft: 3596 exec/s: 0 rss: 159Mb Step #5: ==26134== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564b7223f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564b7887a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564b7885d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564b7885d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564b72245652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564b721a642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564b721a0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564b72237595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564b752668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564b752668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564b752668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564b752668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564b752668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564b752668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564b752668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564b752668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564b752668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564b752668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564b7746b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564b741c7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564b741d25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564b73f7dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564b73f7dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564b73f7e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564b73f7d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564b73f7d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564b73f7d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564b7885f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564b788687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564b78850529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564b7887afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f31759e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564b7219f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x41,0x6,0x38,0x7d,0x0, Step #5: \002A\0068}\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-af0c3e26de386736b4908e7631eaa65b3196748b Step #5: Base64: AkEGOH0A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 726 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3989441450 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b89b34d60, 0x560b89d1d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b89d1d720,0x560b8bba72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af0c3e26de386736b4908e7631eaa65b3196748b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 805 processed earlier; will process 10171 files now Step #5: ==26170== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b806772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b86cb2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b86c9546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b86c9538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b8067d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b805de42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b805d8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b8066f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b8369e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b8369e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b8369e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b8369e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b8369e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b8369e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b8369e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b8369e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b8369e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b8369e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b858a345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b825ff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b8260a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b823b5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b823b5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b823b6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b823b5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b823b5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b823b5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b86c9794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b86ca07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b86c88529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b86cb2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f70061082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b805d743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x5,0xb,0xb,0xb,0xb, Step #5: \013\005\013\013\013\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-e2f39b85aa9714129f53886eae839ba72fc92081 Step #5: Base64: CwULCwsL Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 727 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3989896095 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555d105cdd60, 0x555d107b671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555d107b6720,0x555d126402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e2f39b85aa9714129f53886eae839ba72fc92081' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 806 processed earlier; will process 10170 files now Step #5: ==26206== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555d071102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555d0d74b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555d0d72e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555d0d72e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555d07116652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555d0707742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555d07071c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555d07108595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555d0a1378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555d0a1378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555d0a1378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555d0a1378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555d0a1378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555d0a1378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555d0a1378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555d0a1378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555d0a1378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555d0a1378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555d0c33c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555d09098578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555d090a35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555d08e4ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555d08e4ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555d08e4f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555d08e4e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555d08e4e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555d08e4e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555d0d73094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555d0d7397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555d0d721529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555d0d74bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97f2a65082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555d0707043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x60,0x23,0x1,0x0,0x60, Step #5: \000`#\001\000` Step #5: artifact_prefix='./'; Test unit written to ./oom-aadcf38a8686fc472c96dd746664d98a0e1c582b Step #5: Base64: AGAjAQBg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 728 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3990470556 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563ee5e25d60, 0x563ee600e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563ee600e720,0x563ee7e982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aadcf38a8686fc472c96dd746664d98a0e1c582b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 807 processed earlier; will process 10169 files now Step #5: ==26242== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563edc9682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563ee2fa3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563ee2f8646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563ee2f8638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563edc96e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563edc8cf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563edc8c9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563edc960595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563edf98f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563edf98f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563edf98f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563edf98f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563edf98f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563edf98f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563edf98f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563edf98f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563edf98f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563edf98f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563ee1b9445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563ede8f0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563ede8fb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563ede6a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563ede6a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563ede6a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563ede6a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563ede6a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563ede6a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563ee2f8894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563ee2f917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563ee2f79529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563ee2fa3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f95286f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563edc8c843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x46,0x4,0x43,0x24,0x32, Step #5: $F\004C$2 Step #5: artifact_prefix='./'; Test unit written to ./oom-c88a2c93c1e9a1354b60f2ee81b6219af8f7a383 Step #5: Base64: JEYEQyQy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 729 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3990923210 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ddf358ed60, 0x55ddf377771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ddf3777720,0x55ddf56012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c88a2c93c1e9a1354b60f2ee81b6219af8f7a383' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 808 processed earlier; will process 10168 files now Step #5: ==26278== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ddea0d12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ddf070c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ddf06ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ddf06ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ddea0d7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ddea03842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ddea032c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ddea0c9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dded0f88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dded0f88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dded0f88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dded0f88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dded0f88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dded0f88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dded0f88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dded0f88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dded0f88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dded0f88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ddef2fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ddec059578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ddec0645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ddebe0fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ddebe0fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ddebe10808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ddebe0f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ddebe0f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ddebe0f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ddf06f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ddf06fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ddf06e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ddf070cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7ae20c7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ddea03143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x29,0x5b,0xe1,0x9e,0xbc, Step #5: ()[\341\236\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-2e1c78cc443d205e711886211a46481762b0a960 Step #5: Base64: KClb4Z68 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 730 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3991371220 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b0422bfd60, 0x55b0424a871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b0424a8720,0x55b0443322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2e1c78cc443d205e711886211a46481762b0a960' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 809 processed earlier; will process 10167 files now Step #5: ==26314== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b038e022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b03f43d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b03f42046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b03f42038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b038e08652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b038d6942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b038d63c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b038dfa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b03be298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b03be298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b03be298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b03be298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b03be298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b03be298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b03be298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b03be298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b03be298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b03be298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b03e02e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b03ad8a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b03ad955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b03ab40d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b03ab40d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b03ab41808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b03ab40944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b03ab40944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b03ab40944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b03f42294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b03f42b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b03f413529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b03f43dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f138ba0b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b038d6243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x45,0x47,0x49,0x4f,0x8d, Step #5: REGIO\215 Step #5: artifact_prefix='./'; Test unit written to ./oom-66b1553de718f2952fece3cc8b7065784b1e7d56 Step #5: Base64: UkVHSU+N Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 731 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3991818482 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eb84ad5d60, 0x55eb84cbe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eb84cbe720,0x55eb86b482c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/66b1553de718f2952fece3cc8b7065784b1e7d56' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 810 processed earlier; will process 10166 files now Step #5: ==26350== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eb7b6182d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eb81c53728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eb81c3646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eb81c3638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eb7b61e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eb7b57f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eb7b579c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eb7b610595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eb7e63f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eb7e63f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eb7e63f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eb7e63f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eb7e63f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eb7e63f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eb7e63f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eb7e63f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eb7e63f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eb7e63f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eb8084445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eb7d5a0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eb7d5ab5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eb7d356d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eb7d356d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eb7d357808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eb7d356944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eb7d356944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eb7d356944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eb81c3894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eb81c417b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eb81c29529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eb81c53fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f833a55d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eb7b57843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0xac,0xf4,0x8f,0x96,0x96, Step #5: \333\254\364\217\226\226 Step #5: artifact_prefix='./'; Test unit written to ./oom-7dc669f59bdf4acbd103d9b6e80a2d6a79b3b8a3 Step #5: Base64: 26z0j5aW Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 732 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3992268447 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56425e3add60, 0x56425e59671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56425e596720,0x5642604202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7dc669f59bdf4acbd103d9b6e80a2d6a79b3b8a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 811 processed earlier; will process 10165 files now Step #5: #1 pulse cov: 3419 ft: 3420 exec/s: 0 rss: 157Mb Step #5: ==26386== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564254ef02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56425b52b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56425b50e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56425b50e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564254ef6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564254e5742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564254e51c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564254ee8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564257f178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564257f178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564257f178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564257f178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564257f178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564257f178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564257f178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564257f178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564257f178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564257f178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56425a11c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564256e78578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564256e835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564256c2ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564256c2ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564256c2f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564256c2e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564256c2e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564256c2e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56425b51094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56425b5197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56425b501529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56425b52bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8a9b097082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564254e5043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x24,0x24,0x31,0xde, Step #5: $$$$1\336 Step #5: artifact_prefix='./'; Test unit written to ./oom-9afa3a896487080f74d239f2146986e3c6289709 Step #5: Base64: JCQkJDHe Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 733 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3992766573 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557595b5cd60, 0x557595d4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557595d45720,0x557597bcf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9afa3a896487080f74d239f2146986e3c6289709' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 813 processed earlier; will process 10163 files now Step #5: #1 pulse cov: 3460 ft: 3461 exec/s: 0 rss: 157Mb Step #5: ==26422== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55758c69f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557592cda728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557592cbd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557592cbd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55758c6a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55758c60642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55758c600c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55758c697595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55758f6c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55758f6c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55758f6c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55758f6c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55758f6c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55758f6c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55758f6c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55758f6c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55758f6c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55758f6c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5575918cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55758e627578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55758e6325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55758e3ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55758e3ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55758e3de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55758e3dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55758e3dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55758e3dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557592cbf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557592cc87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557592cb0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557592cdafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0636ec7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55758c5ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x0,0x3,0x0,0x3,0x0, Step #5: \003\000\003\000\003\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-da756656b84274eb72d03e97bcc7145930c3b27f Step #5: Base64: AwADAAMA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 734 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3993254926 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a3ba68fd60, 0x55a3ba87871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a3ba878720,0x55a3bc7022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/da756656b84274eb72d03e97bcc7145930c3b27f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 815 processed earlier; will process 10161 files now Step #5: ==26458== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3b11d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a3b780d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a3b77f046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a3b77f038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3b11d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a3b113942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a3b1133c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3b11ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3b41f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3b41f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3b41f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3b41f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3b41f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3b41f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3b41f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3b41f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3b41f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3b41f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a3b63fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a3b315a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3b31655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3b2f10d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3b2f10d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3b2f11808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3b2f10944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3b2f10944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3b2f10944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a3b77f294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a3b77fb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a3b77e3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a3b780dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f564ace2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a3b113243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xe1,0xb1,0xbf,0x2f,0x3e, Step #5: <\341\261\277/> Step #5: artifact_prefix='./'; Test unit written to ./oom-5da5bf6440996260c5bdf16ba4658e9ecf508a67 Step #5: Base64: POGxvy8+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 735 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3993704597 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5630e62c2d60, 0x5630e64ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5630e64ab720,0x5630e83352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5da5bf6440996260c5bdf16ba4658e9ecf508a67' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 816 processed earlier; will process 10160 files now Step #5: ==26494== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5630dce052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5630e3440728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5630e342346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5630e342338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5630dce0b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5630dcd6c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5630dcd66c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5630dcdfd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5630dfe2c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5630dfe2c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5630dfe2c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5630dfe2c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5630dfe2c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5630dfe2c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5630dfe2c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5630dfe2c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5630dfe2c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5630dfe2c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5630e203145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5630ded8d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5630ded985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5630deb43d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5630deb43d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5630deb44808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5630deb43944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5630deb43944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5630deb43944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5630e342594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5630e342e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5630e3416529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5630e3440fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe9c7362082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5630dcd6543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xd,0xf2,0xa0,0x80,0x81, Step #5: \"\015\362\240\200\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-a058d21b37481e21204b9f0690ace6d0d79bb31b Step #5: Base64: Ig3yoICB Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 736 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3994152833 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5649f9df5d60, 0x5649f9fde71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5649f9fde720,0x5649fbe682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a058d21b37481e21204b9f0690ace6d0d79bb31b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 817 processed earlier; will process 10159 files now Step #5: ==26530== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5649f09382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5649f6f73728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5649f6f5646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5649f6f5638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5649f093e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5649f089f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5649f0899c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5649f0930595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5649f395f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5649f395f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5649f395f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5649f395f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5649f395f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5649f395f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5649f395f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5649f395f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5649f395f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5649f395f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5649f5b6445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5649f28c0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5649f28cb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5649f2676d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5649f2676d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5649f2677808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5649f2676944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5649f2676944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5649f2676944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5649f6f5894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5649f6f617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5649f6f49529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5649f6f73fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f287a6ad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5649f089843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x62,0xe2,0xb1,0x90, Step #5: Step #5: Step #5: #0 0x5608d693d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5608dcf78728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5608dcf5b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5608dcf5b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608d6943652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5608d68a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5608d689ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608d6935595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608d99648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608d99648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608d99648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608d99648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608d99648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608d99648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608d99648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608d99648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608d99648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608d99648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608dbb6945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608d88c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608d88d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608d867bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608d867bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608d867c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608d867b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608d867b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608d867b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5608dcf5d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5608dcf667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5608dcf4e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5608dcf78fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd7f6199082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5608d689d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x30,0xa,0x30,0xa,0x2d, Step #5: -0\0120\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-5a28057cf4cfa8e48c1e3f19cdb906310dc17c53 Step #5: Base64: LTAKMAot Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 738 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3995102744 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562956bffd60, 0x562956de871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562956de8720,0x562958c722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5a28057cf4cfa8e48c1e3f19cdb906310dc17c53' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 820 processed earlier; will process 10156 files now Step #5: ==26602== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56294d7422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562953d7d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562953d6046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562953d6038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56294d748652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56294d6a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56294d6a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56294d73a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629507698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629507698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629507698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629507698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629507698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629507698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629507698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629507698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629507698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629507698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56295296e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56294f6ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56294f6d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56294f480d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56294f480d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56294f481808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56294f480944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56294f480944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56294f480944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562953d6294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562953d6b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562953d53529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562953d7dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c01de5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56294d6a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x33,0x32,0x2e,0x36,0x2e, Step #5: e32.6. Step #5: artifact_prefix='./'; Test unit written to ./oom-ad8d0e446222d37853d4352d83faad2b64cef2b9 Step #5: Base64: ZTMyLjYu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 739 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3995550859 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5604fa7aed60, 0x5604fa99771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5604fa997720,0x5604fc8212c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ad8d0e446222d37853d4352d83faad2b64cef2b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 821 processed earlier; will process 10155 files now Step #5: #1 pulse cov: 9015 ft: 9016 exec/s: 0 rss: 176Mb Step #5: ==26638== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5604f12f12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5604f792c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5604f790f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5604f790f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5604f12f7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5604f125842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5604f1252c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5604f12e9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604f43188c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604f43188c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604f43188c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604f43188c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604f43188c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604f43188c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604f43188c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604f43188c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604f43188c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604f43188c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5604f651d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5604f3279578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604f32845a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5604f302fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5604f302fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5604f3030808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5604f302f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5604f302f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5604f302f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5604f791194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5604f791a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5604f7902529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5604f792cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5dcbe0e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5604f125143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe0,0xb8,0xb3, Step #5: ws:\340\270\263 Step #5: artifact_prefix='./'; Test unit written to ./oom-43649f7d26e6d0ce0bd15f2b2f2acee15914ed58 Step #5: Base64: d3M64Liz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 740 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3996058596 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d73a107d60, 0x55d73a2f071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d73a2f0720,0x55d73c17a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/43649f7d26e6d0ce0bd15f2b2f2acee15914ed58' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 823 processed earlier; will process 10153 files now Step #5: ==26674== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d730c4a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d737285728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d73726846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d73726838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d730c50652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d730bb142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d730babc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d730c42595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d733c718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d733c718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d733c718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d733c718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d733c718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d733c718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d733c718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d733c718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d733c718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d733c718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d735e7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d732bd2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d732bdd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d732988d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d732988d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d732989808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d732988944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d732988944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d732988944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d73726a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d7372737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d73725b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d737285fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f419a5f3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d730baa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0xde,0xac,0x3e, Step #5: (?<\336\254> Step #5: artifact_prefix='./'; Test unit written to ./oom-5bbf3cd8771c2447ab0ec792004a3eb2bb380fb2 Step #5: Base64: KD883qw+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 741 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3996510524 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55df08873d60, 0x55df08a5c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55df08a5c720,0x55df0a8e62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5bbf3cd8771c2447ab0ec792004a3eb2bb380fb2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 824 processed earlier; will process 10152 files now Step #5: ==26710== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55deff3b62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55df059f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55df059d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55df059d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55deff3bc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55deff31d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55deff317c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55deff3ae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55df023dd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55df023dd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55df023dd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55df023dd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55df023dd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55df023dd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55df023dd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55df023dd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55df023dd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55df023dd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55df045e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55df0133e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55df013495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55df010f4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55df010f4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55df010f5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55df010f4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55df010f4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55df010f4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55df059d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55df059df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55df059c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55df059f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3136bae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55deff31643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2a,0xcc,0xa3,0x2a,0x2f, Step #5: /*\314\243*/ Step #5: artifact_prefix='./'; Test unit written to ./oom-58b310de9c0313c69c61389abedb09a493193893 Step #5: Base64: LyrMoyov Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 742 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3996945274 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e81ff56d60, 0x55e82013f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e82013f720,0x55e821fc92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58b310de9c0313c69c61389abedb09a493193893' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 825 processed earlier; will process 10151 files now Step #5: ==26746== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e816a992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e81d0d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e81d0b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e81d0b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e816a9f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e816a0042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8169fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e816a91595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e819ac08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e819ac08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e819ac08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e819ac08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e819ac08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e819ac08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e819ac08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e819ac08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e819ac08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e819ac08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e81bcc545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e818a21578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e818a2c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8187d7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8187d7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8187d8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8187d7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8187d7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8187d7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e81d0b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e81d0c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e81d0aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e81d0d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc7cfd82082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8169f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0x2c,0x2d,0x2d,0x41,0x2d, Step #5: ,,--A- Step #5: artifact_prefix='./'; Test unit written to ./oom-0b872a83d30987c19e0fb93de7207cb7585b0ebd Step #5: Base64: LCwtLUEt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 743 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3997410092 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a341a5d60, 0x564a3438e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a3438e720,0x564a362182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0b872a83d30987c19e0fb93de7207cb7585b0ebd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 826 processed earlier; will process 10150 files now Step #5: ==26782== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a2ace82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a31323728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a3130646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a3130638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a2acee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a2ac4f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a2ac49c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a2ace0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a2dd0f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a2dd0f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a2dd0f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a2dd0f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a2dd0f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a2dd0f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a2dd0f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a2dd0f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a2dd0f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a2dd0f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a2ff1445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a2cc70578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a2cc7b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a2ca26d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a2ca26d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a2ca27808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a2ca26944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a2ca26944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a2ca26944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a3130894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a313117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a312f9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a31323fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5557ac1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a2ac4843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd7,0xa9,0x1,0x0,0x6,0x74, Step #5: \327\251\001\000\006t Step #5: artifact_prefix='./'; Test unit written to ./oom-1dc8185903783b4d96cf5722743a00eb62e794a7 Step #5: Base64: 16kBAAZ0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 744 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3997866548 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5643864acd60, 0x56438669571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564386695720,0x56438851f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1dc8185903783b4d96cf5722743a00eb62e794a7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 827 processed earlier; will process 10149 files now Step #5: ==26818== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56437cfef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56438362a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56438360d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56438360d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56437cff5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56437cf5642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56437cf50c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56437cfe7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5643800168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5643800168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5643800168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5643800168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5643800168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5643800168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5643800168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5643800168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5643800168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5643800168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56438221b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56437ef77578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56437ef825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56437ed2dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56437ed2dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56437ed2e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56437ed2d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56437ed2d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56437ed2d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56438360f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5643836187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564383600529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56438362afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3fd13e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56437cf4f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0xa,0x5c,0xa,0x22, Step #5: \"\\\012\\\012\" Step #5: artifact_prefix='./'; Test unit written to ./oom-b864f623316c8aea046ce832b9bbde745611e655 Step #5: Base64: IlwKXAoi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 745 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3998315161 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fdc247bd60, 0x55fdc266471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fdc2664720,0x55fdc44ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b864f623316c8aea046ce832b9bbde745611e655' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 828 processed earlier; will process 10148 files now Step #5: ==26854== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fdb8fbe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fdbf5f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fdbf5dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fdbf5dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fdb8fc4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fdb8f2542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fdb8f1fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fdb8fb6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fdbbfe58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fdbbfe58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fdbbfe58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fdbbfe58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fdbbfe58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fdbbfe58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fdbbfe58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fdbbfe58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fdbbfe58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fdbbfe58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fdbe1ea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fdbaf46578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fdbaf515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fdbacfcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fdbacfcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fdbacfd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fdbacfc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fdbacfc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fdbacfc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fdbf5de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fdbf5e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fdbf5cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fdbf5f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f175529d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fdb8f1e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x1f,0x7f,0x0,0x0,0x0, Step #5: =\037\177\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0473e09c7eba101939ac2b0df69fc1f5b9f792f2 Step #5: Base64: PR9/AAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 746 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3998765802 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563cbb196d60, 0x563cbb37f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563cbb37f720,0x563cbd2092c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0473e09c7eba101939ac2b0df69fc1f5b9f792f2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 829 processed earlier; will process 10147 files now Step #5: ==26890== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563cb1cd92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563cb8314728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563cb82f746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563cb82f738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563cb1cdf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563cb1c4042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563cb1c3ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563cb1cd1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563cb4d008c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563cb4d008c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563cb4d008c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563cb4d008c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563cb4d008c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563cb4d008c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563cb4d008c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563cb4d008c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563cb4d008c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563cb4d008c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563cb6f0545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563cb3c61578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563cb3c6c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563cb3a17d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563cb3a17d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563cb3a18808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563cb3a17944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563cb3a17944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563cb3a17944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563cb82f994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563cb83027b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563cb82ea529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563cb8314fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f67242c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563cb1c3943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0xa,0xe2,0x81,0x9f,0xf2, Step #5: S\012\342\201\237\362 Step #5: artifact_prefix='./'; Test unit written to ./oom-39cd1ee5aaef3ddc523154b8440bca5995def8e0 Step #5: Base64: UwrigZ/y Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 747 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3999217560 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56144e79bd60, 0x56144e98471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56144e984720,0x56145080e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/39cd1ee5aaef3ddc523154b8440bca5995def8e0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 830 processed earlier; will process 10146 files now Step #5: #1 pulse cov: 3556 ft: 3557 exec/s: 0 rss: 158Mb Step #5: ==26926== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614452de2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56144b919728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56144b8fc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56144b8fc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614452e4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56144524542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56144523fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614452d6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5614483058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5614483058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5614483058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5614483058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5614483058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5614483058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5614483058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5614483058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5614483058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5614483058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56144a50a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561447266578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5614472715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56144701cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56144701cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56144701d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56144701c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56144701c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56144701c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56144b8fe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56144b9077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56144b8ef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56144b919fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7862e53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56144523e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x66,0x7d,0xd7,0x91,0x5b, Step #5: if}\327\221[ Step #5: artifact_prefix='./'; Test unit written to ./oom-8201c717c27dd7ae73b2a80c2903eb58dd53ce30 Step #5: Base64: aWZ915Fb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 748 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3999722158 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b8d6c55d60, 0x55b8d6e3e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b8d6e3e720,0x55b8d8cc82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8201c717c27dd7ae73b2a80c2903eb58dd53ce30' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 832 processed earlier; will process 10144 files now Step #5: ==26962== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8cd7982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b8d3dd3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b8d3db646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b8d3db638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8cd79e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8cd6ff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8cd6f9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8cd790595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b8d07bf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b8d07bf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b8d07bf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b8d07bf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b8d07bf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b8d07bf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b8d07bf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b8d07bf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b8d07bf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b8d07bf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b8d29c445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8cf720578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8cf72b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8cf4d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8cf4d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8cf4d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8cf4d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8cf4d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8cf4d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b8d3db894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b8d3dc17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b8d3da9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b8d3dd3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b18e41082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8cd6f843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0x2f,0xd6,0xa0,0x6e, Step #5: \012\012/\326\240n Step #5: artifact_prefix='./'; Test unit written to ./oom-b27b054bd1064db54f54a834676675e02d334f9e Step #5: Base64: Cgov1qBu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 749 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4000170351 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f13c831d60, 0x55f13ca1a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f13ca1a720,0x55f13e8a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b27b054bd1064db54f54a834676675e02d334f9e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 833 processed earlier; will process 10143 files now Step #5: ==26998== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f1333742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f1399af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f13999246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f13999238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f13337a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f1332db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f1332d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f13336c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f13639b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f13639b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f13639b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f13639b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f13639b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f13639b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f13639b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f13639b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f13639b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f13639b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f1385a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f1352fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f1353075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f1350b2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f1350b2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f1350b3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f1350b2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f1350b2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f1350b2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f13999494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f13999d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f139985529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f1399affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f36554b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f1332d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0x9c,0xe3,0x80,0x90, Step #5: \343\200\234\343\200\220 Step #5: artifact_prefix='./'; Test unit written to ./oom-6ed0ce9e7d6fd1feb0df84fde6cebfed3c86cfe5 Step #5: Base64: 44Cc44CQ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 750 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4000623124 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557ba4a7bd60, 0x557ba4c6471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557ba4c64720,0x557ba6aee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ed0ce9e7d6fd1feb0df84fde6cebfed3c86cfe5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 834 processed earlier; will process 10142 files now Step #5: #1 pulse cov: 3722 ft: 3723 exec/s: 0 rss: 161Mb Step #5: ==27034== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b9b5be2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ba1bf9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ba1bdc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ba1bdc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b9b5c4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b9b52542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b9b51fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b9b5b6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b9e5e58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b9e5e58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b9e5e58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b9e5e58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b9e5e58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b9e5e58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b9e5e58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b9e5e58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b9e5e58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b9e5e58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ba07ea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b9d546578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b9d5515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b9d2fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b9d2fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b9d2fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b9d2fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b9d2fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b9d2fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ba1bde94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ba1be77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ba1bcf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ba1bf9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f61bd8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b9b51e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x1d,0x66,0x66,0x66,0x71, Step #5: f\035fffq Step #5: artifact_prefix='./'; Test unit written to ./oom-c913a321a458fe278c9c209eac83ad97e80a5122 Step #5: Base64: Zh1mZmZx Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 751 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4001119215 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5643f8420d60, 0x5643f860971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5643f8609720,0x5643fa4932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c913a321a458fe278c9c209eac83ad97e80a5122' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 836 processed earlier; will process 10140 files now Step #5: ==27070== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5643eef632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5643f559e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5643f558146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5643f558138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5643eef69652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5643eeeca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5643eeec4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5643eef5b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5643f1f8a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5643f1f8a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5643f1f8a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5643f1f8a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5643f1f8a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5643f1f8a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5643f1f8a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5643f1f8a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5643f1f8a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5643f1f8a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5643f418f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5643f0eeb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5643f0ef65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5643f0ca1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5643f0ca1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5643f0ca2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5643f0ca1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5643f0ca1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5643f0ca1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5643f558394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5643f558c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5643f5574529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5643f559efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1c2f789082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5643eeec343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x54,0x54,0x3d,0x22,0x22, Step #5: ATT=\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-738913021986de702baa44c6e8ad7e426bcbf9cf Step #5: Base64: QVRUPSIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 752 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4001579618 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55978a162d60, 0x55978a34b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55978a34b720,0x55978c1d52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/738913021986de702baa44c6e8ad7e426bcbf9cf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 837 processed earlier; will process 10139 files now Step #5: ==27106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559780ca52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5597872e0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5597872c346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5597872c338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559780cab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559780c0c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559780c06c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559780c9d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559783ccc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559783ccc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559783ccc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559783ccc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559783ccc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559783ccc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559783ccc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559783ccc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559783ccc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559783ccc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559785ed145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559782c2d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559782c385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5597829e3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5597829e3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5597829e4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5597829e3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5597829e3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5597829e3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5597872c594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597872ce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597872b6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5597872e0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd07b019082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559780c0543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x60,0xa,0x60,0xbb,0xf5, Step #5: =`\012`\273\365 Step #5: artifact_prefix='./'; Test unit written to ./oom-aba7ee58ac9ae5eaeee6978a3c529bedf492b120 Step #5: Base64: PWAKYLv1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 753 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4002164748 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55716c08ad60, 0x55716c27371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55716c273720,0x55716e0fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aba7ee58ac9ae5eaeee6978a3c529bedf492b120' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 838 processed earlier; will process 10138 files now Step #5: ==27142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557162bcd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557169208728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5571691eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5571691eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557162bd3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557162b3442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557162b2ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557162bc5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557165bf48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557165bf48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557165bf48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557165bf48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557165bf48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557165bf48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557165bf48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557165bf48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557165bf48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557165bf48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557167df945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557164b55578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557164b605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55716490bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55716490bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55716490c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55716490b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55716490b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55716490b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5571691ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571691f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5571691de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557169208fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1efec82082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557162b2d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x4d,0x4d,0x6e,0x73,0x73, Step #5: rMMnss Step #5: artifact_prefix='./'; Test unit written to ./oom-3d6934fc11e15f15b2fdf05965a4979832dfaae1 Step #5: Base64: ck1NbnNz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 754 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4002615497 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5561620d0d60, 0x5561622b971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5561622b9720,0x5561641432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d6934fc11e15f15b2fdf05965a4979832dfaae1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 839 processed earlier; will process 10137 files now Step #5: ==27178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556158c132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55615f24e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55615f23146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55615f23138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556158c19652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556158b7a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556158b74c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556158c0b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55615bc3a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55615bc3a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55615bc3a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55615bc3a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55615bc3a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55615bc3a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55615bc3a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55615bc3a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55615bc3a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55615bc3a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55615de3f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55615ab9b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55615aba65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55615a951d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55615a951d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55615a952808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55615a951944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55615a951944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55615a951944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55615f23394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55615f23c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55615f224529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55615f24efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f44f3c10082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556158b7343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x2,0xc4,0xb7, Step #5: \000\000\000\002\304\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-a08ff11225a28fecf7a5c8d78da92b5e2c5873a2 Step #5: Base64: AAAAAsS3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 755 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4003062693 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56392de84d60, 0x56392e06d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56392e06d720,0x56392fef72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a08ff11225a28fecf7a5c8d78da92b5e2c5873a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 840 processed earlier; will process 10136 files now Step #5: ==27214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5639249c72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56392b002728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56392afe546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56392afe538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5639249cd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56392492e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563924928c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5639249bf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5639279ee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5639279ee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5639279ee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5639279ee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5639279ee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5639279ee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5639279ee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5639279ee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5639279ee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5639279ee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563929bf345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56392694f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56392695a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563926705d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563926705d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563926706808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563926705944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563926705944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563926705944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56392afe794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56392aff07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56392afd8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56392b002fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6ddb460082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56392492743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x84,0xf0,0x91,0x91,0x86, Step #5: \315\204\360\221\221\206 Step #5: artifact_prefix='./'; Test unit written to ./oom-36a1323589f26cd04254dad9ad4fbb4b45166ee3 Step #5: Base64: zYTwkZGG Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 756 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4003514417 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55712a2ced60, 0x55712a4b771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55712a4b7720,0x55712c3412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/36a1323589f26cd04254dad9ad4fbb4b45166ee3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 841 processed earlier; will process 10135 files now Step #5: #1 pulse cov: 3675 ft: 3676 exec/s: 0 rss: 161Mb Step #5: ==27250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557120e112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55712744c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55712742f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55712742f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557120e17652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557120d7842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557120d72c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557120e09595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557123e388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557123e388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557123e388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557123e388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557123e388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557123e388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557123e388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557123e388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557123e388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557123e388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55712603d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557122d99578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557122da45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557122b4fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557122b4fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557122b50808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557122b4f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557122b4f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557122b4f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55712743194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55712743a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557127422529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55712744cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba4f74c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557120d7143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x91,0x91,0x82,0xcd,0x84, Step #5: \360\221\221\202\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-11e95a92145ea400fc8a0eb3b81d7669843a0bce Step #5: Base64: 8JGRgs2E Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 757 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4004003931 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5650a66d3d60, 0x5650a68bc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5650a68bc720,0x5650a87462c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11e95a92145ea400fc8a0eb3b81d7669843a0bce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 843 processed earlier; will process 10133 files now Step #5: ==27286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56509d2162d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5650a3851728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5650a383446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5650a383438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56509d21c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56509d17d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56509d177c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56509d20e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5650a023d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5650a023d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5650a023d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5650a023d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5650a023d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5650a023d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5650a023d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5650a023d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5650a023d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5650a023d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5650a244245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56509f19e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56509f1a95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56509ef54d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56509ef54d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56509ef55808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56509ef54944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56509ef54944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56509ef54944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5650a383694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5650a383f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5650a3827529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5650a3851fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff7480d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56509d17643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0xea,0xbf,0xb6,0x5d, Step #5: [^\352\277\266] Step #5: artifact_prefix='./'; Test unit written to ./oom-7c00c9d5de0502307c7e13fd8cc61e8efd592adb Step #5: Base64: W17qv7Zd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 758 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4004451254 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5576615cbd60, 0x5576617b471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5576617b4720,0x55766363e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7c00c9d5de0502307c7e13fd8cc61e8efd592adb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 844 processed earlier; will process 10132 files now Step #5: ==27322== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55765810e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55765e749728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55765e72c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55765e72c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557658114652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55765807542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55765806fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557658106595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55765b1358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55765b1358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55765b1358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55765b1358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55765b1358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55765b1358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55765b1358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55765b1358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55765b1358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55765b1358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55765d33a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55765a096578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55765a0a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557659e4cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557659e4cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557659e4d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557659e4c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557659e4c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557659e4c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55765e72e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55765e7377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55765e71f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55765e749fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7277ce0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55765806e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xa,0x3d,0xa,0x3d,0xa, Step #5: =\012=\012=\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-a2c344a1bcc29a476ca240ae97e72a052065c753 Step #5: Base64: PQo9Cj0K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 759 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4004890175 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8f3515d60, 0x55e8f36fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8f36fe720,0x55e8f55882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2c344a1bcc29a476ca240ae97e72a052065c753' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 845 processed earlier; will process 10131 files now Step #5: ==27358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8ea0582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8f0693728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8f067646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8f067638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8ea05e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8e9fbf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8e9fb9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8ea050595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8ed07f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8ed07f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8ed07f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8ed07f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8ed07f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8ed07f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8ed07f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8ed07f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8ed07f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8ed07f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8ef28445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8ebfe0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8ebfeb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8ebd96d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8ebd96d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8ebd97808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8ebd96944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8ebd96944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8ebd96944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8f067894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8f06817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8f0669529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8f0693fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fab5625d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8e9fb843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x0,0x7d,0x7d,0x7d,0x7d, Step #5: I\000}}}} Step #5: artifact_prefix='./'; Test unit written to ./oom-b54d877dcff5dcdbaef0e6fa752b22f4c5d45434 Step #5: Base64: SQB9fX19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 760 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4005339996 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f82740ad60, 0x55f8275f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f8275f3720,0x55f82947d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b54d877dcff5dcdbaef0e6fa752b22f4c5d45434' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 846 processed earlier; will process 10130 files now Step #5: ==27394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f81df4d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f824588728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f82456b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f82456b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f81df53652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f81deb442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f81deaec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f81df45595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f820f748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f820f748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f820f748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f820f748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f820f748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f820f748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f820f748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f820f748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f820f748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f820f748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f82317945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f81fed5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f81fee05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f81fc8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f81fc8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f81fc8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f81fc8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f81fc8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f81fc8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f82456d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f8245767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f82455e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f824588fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f574fceb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f81dead43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f,0x30,0xdb,0xa4,0x10,0x42, Step #5: \1770\333\244\020B Step #5: artifact_prefix='./'; Test unit written to ./oom-d343a7563205523bd6efd924b6d897bd9ee07c4e Step #5: Base64: fzDbpBBC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 761 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4005790334 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d41a4e0d60, 0x55d41a6c971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d41a6c9720,0x55d41c5532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d343a7563205523bd6efd924b6d897bd9ee07c4e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 847 processed earlier; will process 10129 files now Step #5: ==27430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4110232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d41765e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d41764146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d41764138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d411029652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d410f8a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d410f84c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d41101b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d41404a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d41404a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d41404a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d41404a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d41404a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d41404a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d41404a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d41404a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d41404a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d41404a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d41624f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d412fab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d412fb65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d412d61d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d412d61d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d412d62808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d412d61944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d412d61944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d412d61944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d41764394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d41764c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d417634529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d41765efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8f17b29082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d410f8343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbd,0xbf,0xef,0xbf,0xbd, Step #5: \357\275\277\357\277\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-5143affd9428c5f25ba72a10d77971d01bb09cf9 Step #5: Base64: 772/77+9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 762 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4006244995 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558338dcad60, 0x558338fb371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558338fb3720,0x55833ae3d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5143affd9428c5f25ba72a10d77971d01bb09cf9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 848 processed earlier; will process 10128 files now Step #5: ==27466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55832f90d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558335f48728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558335f2b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558335f2b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55832f913652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55832f87442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55832f86ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55832f905595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583329348c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583329348c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583329348c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583329348c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583329348c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583329348c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583329348c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583329348c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583329348c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583329348c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558334b3945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558331895578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5583318a05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55833164bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55833164bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55833164c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55833164b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55833164b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55833164b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558335f2d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558335f367b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558335f1e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558335f48fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0607060082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55832f86d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc8,0xac,0xf0,0x9d,0x85,0xaf, Step #5: \310\254\360\235\205\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-11a9bf632d4d5cd3e0156baf93714c4feb3fe55f Step #5: Base64: yKzwnYWv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 763 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4006692825 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f410f88d60, 0x55f41117171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f411171720,0x55f412ffb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11a9bf632d4d5cd3e0156baf93714c4feb3fe55f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 849 processed earlier; will process 10127 files now Step #5: ==27502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f407acb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f40e106728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f40e0e946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f40e0e938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f407ad1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f407a3242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f407a2cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f407ac3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f40aaf28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f40aaf28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f40aaf28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f40aaf28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f40aaf28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f40aaf28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f40aaf28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f40aaf28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f40aaf28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f40aaf28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f40ccf745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f409a53578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f409a5e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f409809d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f409809d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f40980a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f409809944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f409809944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f409809944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f40e0eb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f40e0f47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f40e0dc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f40e106fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd973e4f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f407a2b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xea,0xaa,0xaf,0xe1,0x86,0xaf, Step #5: \352\252\257\341\206\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-2765812a44bbab58e28f23544e5af520d96d3ad7 Step #5: Base64: 6qqv4Yav Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 764 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4007142210 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56523f354d60, 0x56523f53d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56523f53d720,0x5652413c72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2765812a44bbab58e28f23544e5af520d96d3ad7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 850 processed earlier; will process 10126 files now Step #5: ==27538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565235e972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56523c4d2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56523c4b546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56523c4b538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565235e9d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565235dfe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565235df8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565235e8f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x565238ebe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x565238ebe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x565238ebe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x565238ebe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x565238ebe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x565238ebe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x565238ebe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x565238ebe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x565238ebe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x565238ebe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56523b0c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565237e1f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565237e2a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565237bd5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565237bd5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565237bd6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565237bd5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565237bd5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565237bd5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56523c4b794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56523c4c07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56523c4a8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56523c4d2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f653902e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565235df743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0x27,0x27,0x27,0x27,0x27, Step #5: ,''''' Step #5: artifact_prefix='./'; Test unit written to ./oom-96955d57135dbb8488ee700b3f4b3d4e540bf30d Step #5: Base64: LCcnJycn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 765 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4007599649 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5614d9e95d60, 0x5614da07e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5614da07e720,0x5614dbf082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/96955d57135dbb8488ee700b3f4b3d4e540bf30d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 851 processed earlier; will process 10125 files now Step #5: ==27574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614d09d82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5614d7013728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5614d6ff646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5614d6ff638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614d09de652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5614d093f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5614d0939c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614d09d0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5614d39ff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5614d39ff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5614d39ff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5614d39ff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5614d39ff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5614d39ff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5614d39ff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5614d39ff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5614d39ff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5614d39ff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5614d5c0445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5614d2960578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5614d296b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5614d2716d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5614d2716d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5614d2717808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5614d2716944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5614d2716944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5614d2716944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5614d6ff894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5614d70017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5614d6fe9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5614d7013fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5d0c3f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5614d093843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0xb,0x29,0xb,0x2e,0xb, Step #5: )\013)\013.\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-a2b80adb30011b6d874bba3759d207ca30ee031a Step #5: Base64: KQspCy4L Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 766 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4008068440 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c2c2121d60, 0x55c2c230a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c2c230a720,0x55c2c41942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2b80adb30011b6d874bba3759d207ca30ee031a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 852 processed earlier; will process 10124 files now Step #5: ==27610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c2b8c642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c2bf29f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c2bf28246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c2bf28238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c2b8c6a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c2b8bcb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c2b8bc5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c2b8c5c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c2bbc8b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c2bbc8b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c2bbc8b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c2bbc8b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c2bbc8b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c2bbc8b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c2bbc8b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c2bbc8b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c2bbc8b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c2bbc8b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c2bde9045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c2babec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c2babf75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c2ba9a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c2ba9a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c2ba9a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c2ba9a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c2ba9a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c2ba9a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c2bf28494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c2bf28d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c2bf275529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c2bf29ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0bde7a6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c2b8bc443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x3a,0xda,0xb7,0xcc,0xa3, Step #5: S:\332\267\314\243 Step #5: artifact_prefix='./'; Test unit written to ./oom-4c1ae87b458ea9325e328bfb47c74511e5bdadc4 Step #5: Base64: Uzrat8yj Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 767 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4008524880 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556bf60b5d60, 0x556bf629e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556bf629e720,0x556bf81282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4c1ae87b458ea9325e328bfb47c74511e5bdadc4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 853 processed earlier; will process 10123 files now Step #5: ==27646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556becbf82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556bf3233728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556bf321646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556bf321638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556becbfe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556becb5f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556becb59c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556becbf0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556befc1f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556befc1f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556befc1f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556befc1f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556befc1f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556befc1f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556befc1f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556befc1f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556befc1f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556befc1f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556bf1e2445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556beeb80578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556beeb8b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556bee936d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556bee936d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556bee937808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556bee936944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556bee936944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556bee936944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556bf321894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556bf32217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556bf3209529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556bf3233fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff450394082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556becb5843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x61,0x72,0x65,0x61,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-3dcbab061d2ad84afb746b0610322947adcfabe7 Step #5: Base64: PGFyZWE+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 768 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4008964666 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56006fc1bd60, 0x56006fe0471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56006fe04720,0x560071c8e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3dcbab061d2ad84afb746b0610322947adcfabe7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 854 processed earlier; will process 10122 files now Step #5: ==27682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56006675e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56006cd99728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56006cd7c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56006cd7c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560066764652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600666c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600666bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560066756595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600697858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600697858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600697858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600697858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600697858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600697858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600697858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600697858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600697858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600697858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56006b98a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5600686e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600686f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56006849cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56006849cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56006849d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56006849c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56006849c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56006849c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56006cd7e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56006cd877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56006cd6f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56006cd99fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb03164e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600666be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x0,0x2d,0xd9,0xae,0xbc, Step #5: %\000-\331\256\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-7730bef17695345e02fe4353a4d5a33adf20812b Step #5: Base64: JQAt2a68 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 769 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4009413209 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581bf89dd60, 0x5581bfa8671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581bfa86720,0x5581c19102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7730bef17695345e02fe4353a4d5a33adf20812b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 855 processed earlier; will process 10121 files now Step #5: ==27718== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581b63e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581bca1b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581bc9fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581bc9fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581b63e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581b634742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581b6341c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581b63d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581b94078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581b94078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581b94078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581b94078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581b94078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581b94078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581b94078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581b94078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581b94078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581b94078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581bb60c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581b8368578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581b83735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581b811ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581b811ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581b811f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581b811e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581b811e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581b811e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581bca0094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581bca097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581bc9f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581bca1bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2dce5f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581b634043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x54,0x41,0x47,0x20,0x40, Step #5: %TAG @ Step #5: artifact_prefix='./'; Test unit written to ./oom-8e9bbed190ba91f082f519adb3fbba27e66faa8f Step #5: Base64: JVRBRyBA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 770 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4009879190 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56254f466d60, 0x56254f64f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56254f64f720,0x5625514d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8e9bbed190ba91f082f519adb3fbba27e66faa8f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 856 processed earlier; will process 10120 files now Step #5: ==27754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562545fa92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56254c5e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56254c5c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56254c5c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562545faf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562545f1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562545f0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562545fa1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562548fd08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562548fd08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562548fd08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562548fd08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562548fd08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562548fd08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562548fd08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562548fd08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562548fd08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562548fd08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56254b1d545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562547f31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562547f3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562547ce7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562547ce7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562547ce8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562547ce7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562547ce7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562547ce7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56254c5c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56254c5d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56254c5ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56254c5e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff5ec537082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562545f0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xaa,0x85,0xe0,0xaa,0x85, Step #5: \340\252\205\340\252\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-7dbdd1420f26a2f157e87fe739e23e70e445b73f Step #5: Base64: 4KqF4KqF Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 771 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4010328848 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56010756ed60, 0x56010775771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560107757720,0x5601095e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7dbdd1420f26a2f157e87fe739e23e70e445b73f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 857 processed earlier; will process 10119 files now Step #5: ==27790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600fe0b12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5601046ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5601046cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5601046cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5600fe0b7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600fe01842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600fe012c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600fe0a9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601010d88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601010d88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601010d88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601010d88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601010d88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601010d88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601010d88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601010d88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601010d88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601010d88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601032dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560100039578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601000445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600ffdefd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600ffdefd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600ffdf0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600ffdef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600ffdef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600ffdef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5601046d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601046da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5601046c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5601046ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd14a73e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600fe01143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xb8,0x7b,0x32,0x37,0x7d, Step #5: \336\270{27} Step #5: artifact_prefix='./'; Test unit written to ./oom-b689c51298dce4bf8718aa478dbb6cea41b17a10 Step #5: Base64: 3rh7Mjd9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 772 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4010780661 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561516906d60, 0x561516aef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561516aef720,0x5615189792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b689c51298dce4bf8718aa478dbb6cea41b17a10' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 858 processed earlier; will process 10118 files now Step #5: ==27826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56150d4492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561513a84728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561513a6746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561513a6738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56150d44f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56150d3b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56150d3aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56150d441595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615104708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615104708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615104708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615104708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615104708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615104708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615104708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615104708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615104708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615104708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56151267545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56150f3d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56150f3dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56150f187d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56150f187d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56150f188808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56150f187944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56150f187944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56150f187944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561513a6994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561513a727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561513a5a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561513a84fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b8c61e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56150d3a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0x80,0xf4,0x88,0xb2,0xbb, Step #5: \337\200\364\210\262\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-1c4e6820bdbd6aed0b59ada67c86da33fc117965 Step #5: Base64: 34D0iLK7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 773 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4011235264 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5654bb331d60, 0x5654bb51a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5654bb51a720,0x5654bd3a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1c4e6820bdbd6aed0b59ada67c86da33fc117965' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 859 processed earlier; will process 10117 files now Step #5: ==27862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5654b1e742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5654b84af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5654b849246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5654b849238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5654b1e7a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5654b1ddb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5654b1dd5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5654b1e6c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5654b4e9b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5654b4e9b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5654b4e9b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5654b4e9b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5654b4e9b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5654b4e9b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5654b4e9b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5654b4e9b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5654b4e9b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5654b4e9b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5654b70a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5654b3dfc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5654b3e075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5654b3bb2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5654b3bb2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5654b3bb3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5654b3bb2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5654b3bb2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5654b3bb2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5654b849494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5654b849d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5654b8485529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5654b84affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f45b0d72082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5654b1dd443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x4,0xcc,0xa5,0xca,0xb2, Step #5: r\004\314\245\312\262 Step #5: artifact_prefix='./'; Test unit written to ./oom-26fc48572f621bc84672b0ba26d0a22b24a4f9c6 Step #5: Base64: cgTMpcqy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 774 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4011687646 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ac1787fd60, 0x55ac17a6871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ac17a68720,0x55ac198f22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/26fc48572f621bc84672b0ba26d0a22b24a4f9c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 860 processed earlier; will process 10116 files now Step #5: ==27898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ac0e3c22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ac149fd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ac149e046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ac149e038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ac0e3c8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ac0e32942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ac0e323c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ac0e3ba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ac113e98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ac113e98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ac113e98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ac113e98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ac113e98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ac113e98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ac113e98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ac113e98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ac113e98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ac113e98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ac135ee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ac1034a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ac103555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ac10100d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ac10100d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ac10101808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ac10100944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ac10100944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ac10100944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ac149e294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ac149eb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ac149d3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ac149fdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fae35f72082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ac0e32243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xc6,0x86,0xc6,0x87,0x5d, Step #5: [\306\206\306\207] Step #5: artifact_prefix='./'; Test unit written to ./oom-cf21e2aba5085dde2a86fd8b420b36b1def8de2a Step #5: Base64: W8aGxodd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 775 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4012138646 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561da60b2d60, 0x561da629b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561da629b720,0x561da81252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cf21e2aba5085dde2a86fd8b420b36b1def8de2a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 861 processed earlier; will process 10115 files now Step #5: ==27934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561d9cbf52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561da3230728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561da321346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561da321338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561d9cbfb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561d9cb5c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561d9cb56c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561d9cbed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561d9fc1c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561d9fc1c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561d9fc1c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561d9fc1c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561d9fc1c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561d9fc1c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561d9fc1c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561d9fc1c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561d9fc1c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561d9fc1c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561da1e2145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561d9eb7d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561d9eb885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561d9e933d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561d9e933d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561d9e934808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561d9e933944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561d9e933944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561d9e933944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561da321594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561da321e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561da3206529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561da3230fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8e04576082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561d9cb5543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x0,0x2d,0xe1,0xb7,0xbf, Step #5: [\000-\341\267\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-8123f0b7f67b05b09c37b5b8d9674257bc2831b4 Step #5: Base64: WwAt4be/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 776 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4012596651 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5646bc6d1d60, 0x5646bc8ba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5646bc8ba720,0x5646be7442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8123f0b7f67b05b09c37b5b8d9674257bc2831b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 862 processed earlier; will process 10114 files now Step #5: ==27970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5646b32142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5646b984f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5646b983246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5646b983238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5646b321a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5646b317b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5646b3175c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5646b320c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5646b623b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5646b623b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5646b623b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5646b623b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5646b623b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5646b623b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5646b623b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5646b623b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5646b623b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5646b623b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5646b844045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5646b519c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5646b51a75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5646b4f52d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5646b4f52d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5646b4f53808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5646b4f52944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5646b4f52944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5646b4f52944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5646b983494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5646b983d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5646b9825529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5646b984ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fadd2d74082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5646b317443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x50,0x7b,0xef,0x96,0xa0, Step #5: \\P{\357\226\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-a21b3d55714462ef6456cb8c3e3ef4e170205474 Step #5: Base64: XFB775ag Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 777 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4013045912 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5576daa8ed60, 0x5576dac7771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5576dac77720,0x5576dcb012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a21b3d55714462ef6456cb8c3e3ef4e170205474' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 863 processed earlier; will process 10113 files now Step #5: ==28006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5576d15d12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5576d7c0c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5576d7bef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5576d7bef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5576d15d7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5576d153842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5576d1532c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5576d15c9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5576d45f88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5576d45f88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5576d45f88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5576d45f88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5576d45f88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5576d45f88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5576d45f88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5576d45f88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5576d45f88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5576d45f88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5576d67fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5576d3559578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5576d35645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5576d330fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5576d330fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5576d3310808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5576d330f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5576d330f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5576d330f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5576d7bf194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5576d7bfa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5576d7be2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5576d7c0cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0ced441082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5576d153143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x3c,0x5c,0x3c,0x5c,0x3c, Step #5: \\<\\<\\< Step #5: artifact_prefix='./'; Test unit written to ./oom-64d0882e5f557f5c28a1db87fabda3e6a1cfb9b9 Step #5: Base64: XDxcPFw8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 778 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4013498522 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558e5bb76d60, 0x558e5bd5f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558e5bd5f720,0x558e5dbe92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64d0882e5f557f5c28a1db87fabda3e6a1cfb9b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 864 processed earlier; will process 10112 files now Step #5: ==28042== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558e526b92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558e58cf4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558e58cd746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558e58cd738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558e526bf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558e5262042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558e5261ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558e526b1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558e556e08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558e556e08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558e556e08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558e556e08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558e556e08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558e556e08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558e556e08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558e556e08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558e556e08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558e556e08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558e578e545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558e54641578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558e5464c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558e543f7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558e543f7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558e543f8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558e543f7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558e543f7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558e543f7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558e58cd994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558e58ce27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558e58cca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558e58cf4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f18ce0ac082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558e5261943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x66,0xe2,0x81,0xa6,0x5b, Step #5: if\342\201\246[ Step #5: artifact_prefix='./'; Test unit written to ./oom-eab00202beeb9a370c7fb8cfb0bdaaeba5f5de8f Step #5: Base64: aWbigaZb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 779 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4013953637 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5637d3674d60, 0x5637d385d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5637d385d720,0x5637d56e72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eab00202beeb9a370c7fb8cfb0bdaaeba5f5de8f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 865 processed earlier; will process 10111 files now Step #5: #1 pulse cov: 3584 ft: 3585 exec/s: 0 rss: 160Mb Step #5: ==28078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5637ca1b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5637d07f2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5637d07d546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5637d07d538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5637ca1bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5637ca11e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5637ca118c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5637ca1af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5637cd1de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5637cd1de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5637cd1de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5637cd1de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5637cd1de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5637cd1de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5637cd1de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5637cd1de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5637cd1de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5637cd1de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5637cf3e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5637cc13f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5637cc14a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5637cbef5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5637cbef5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5637cbef6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5637cbef5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5637cbef5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5637cbef5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5637d07d794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5637d07e07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5637d07c8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5637d07f2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4455b4f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5637ca11743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc5,0xb6,0xc4,0xb6,0xc4,0xa3, Step #5: \305\266\304\266\304\243 Step #5: artifact_prefix='./'; Test unit written to ./oom-ab945a53bb5f6bc201af2b028aba7a9792ee61d1 Step #5: Base64: xbbEtsSj Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 780 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4014443805 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e078e1ad60, 0x55e07900371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e079003720,0x55e07ae8d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab945a53bb5f6bc201af2b028aba7a9792ee61d1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 867 processed earlier; will process 10109 files now Step #5: ==28114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e06f95d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e075f98728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e075f7b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e075f7b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e06f963652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e06f8c442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e06f8bec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e06f955595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e0729848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e0729848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e0729848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e0729848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e0729848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e0729848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e0729848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e0729848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e0729848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e0729848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e074b8945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e0718e5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e0718f05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e07169bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e07169bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e07169c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e07169b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e07169b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e07169b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e075f7d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e075f867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e075f6e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e075f98fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f5391e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e06f8bd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x30,0x25,0x21,0xe2,0x31, Step #5: #0%!\3421 Step #5: artifact_prefix='./'; Test unit written to ./oom-4316a4b78128cc16d1dde8456a1fc3583d80f908 Step #5: Base64: IzAlIeIx Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 781 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4014898760 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560345dd7d60, 0x560345fc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560345fc0720,0x560347e4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4316a4b78128cc16d1dde8456a1fc3583d80f908' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 868 processed earlier; will process 10108 files now Step #5: #1 pulse cov: 3742 ft: 3743 exec/s: 0 rss: 158Mb Step #5: #2 pulse cov: 10890 ft: 11724 exec/s: 0 rss: 177Mb Step #5: ==28150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56033c91a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560342f55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560342f3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560342f3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56033c920652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56033c88142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56033c87bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56033c912595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56033f9418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56033f9418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56033f9418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56033f9418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56033f9418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56033f9418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56033f9418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56033f9418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56033f9418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56033f9418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560341b4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56033e8a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56033e8ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56033e658d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56033e658d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56033e659808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56033e658944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56033e658944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56033e658944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560342f3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560342f437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560342f2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560342f55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f423f0c2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56033c87a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x65,0x67,0x72,0x61,0x6c, Step #5: tegral Step #5: artifact_prefix='./'; Test unit written to ./oom-99326e372bcd44d8fbb0d14a1319dbcfa837cf1b Step #5: Base64: dGVncmFs Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 782 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4015449191 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b76539d60, 0x558b7672271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b76722720,0x558b785ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/99326e372bcd44d8fbb0d14a1319dbcfa837cf1b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 871 processed earlier; will process 10105 files now Step #5: ==28186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b6d07c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b736b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b7369a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b7369a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b6d082652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b6cfe342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b6cfddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b6d074595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b700a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b700a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b700a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b700a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b700a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b700a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b700a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b700a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b700a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b700a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b722a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b6f004578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b6f00f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b6edbad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b6edbad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b6edbb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b6edba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b6edba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b6edba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b7369c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b736a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b7368d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b736b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6e5997082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b6cfdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c,0x29,0xf0,0x90,0x80,0x82, Step #5: |)\360\220\200\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-d41a628c9704416bd687ae8c96f924dc502426fb Step #5: Base64: fCnwkICC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 783 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4015907605 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b890059d60, 0x55b89024271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b890242720,0x55b8920cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d41a628c9704416bd687ae8c96f924dc502426fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 872 processed earlier; will process 10104 files now Step #5: #1 pulse cov: 3694 ft: 3695 exec/s: 0 rss: 160Mb Step #5: ==28222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b886b9c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b88d1d7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b88d1ba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b88d1ba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b886ba2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b886b0342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b886afdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b886b94595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b889bc38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b889bc38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b889bc38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b889bc38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b889bc38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b889bc38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b889bc38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b889bc38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b889bc38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b889bc38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b88bdc845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b888b24578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b888b2f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8888dad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8888dad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8888db808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8888da944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8888da944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8888da944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b88d1bc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b88d1c57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b88d1ad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b88d1d7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8de257d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b886afc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x8,0xcb,0x88,0xdd,0x84,0x8, Step #5: \010\313\210\335\204\010 Step #5: artifact_prefix='./'; Test unit written to ./oom-fee9fb1d7aab74db9db7407b9e5b7d93649e5c3b Step #5: Base64: CMuI3YQI Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 784 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4016394885 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb27cbbd60, 0x55fb27ea471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb27ea4720,0x55fb29d2e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fee9fb1d7aab74db9db7407b9e5b7d93649e5c3b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 874 processed earlier; will process 10102 files now Step #5: ==28258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb1e7fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb24e39728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb24e1c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb24e1c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb1e804652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb1e76542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb1e75fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb1e7f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb218258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb218258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb218258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb218258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb218258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb218258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb218258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb218258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb218258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb218258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb23a2a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb20786578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb207915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb2053cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb2053cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb2053d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb2053c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb2053c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb2053c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb24e1e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb24e277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb24e0f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb24e39fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6fd7b1c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb1e75e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x46,0x57,0x39,0x35,0x6a, Step #5: sFW95j Step #5: artifact_prefix='./'; Test unit written to ./oom-70136c5ee5947ec1f6be10968cdead9d8cb52cd2 Step #5: Base64: c0ZXOTVq Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 785 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4016840435 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f28d1fd60, 0x561f28f0871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f28f08720,0x561f2ad922c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70136c5ee5947ec1f6be10968cdead9d8cb52cd2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 875 processed earlier; will process 10101 files now Step #5: ==28294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f1f8622d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f25e9d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f25e8046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f25e8038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f1f868652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f1f7c942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f1f7c3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f1f85a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f228898c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f228898c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f228898c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f228898c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f228898c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f228898c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f228898c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f228898c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f228898c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f228898c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f24a8e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f217ea578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f217f55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f215a0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f215a0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f215a1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f215a0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f215a0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f215a0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f25e8294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f25e8b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f25e73529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f25e9dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f072b25e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f1f7c243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x0,0x2d,0xdf,0xbf,0x5d, Step #5: [\000-\337\277] Step #5: artifact_prefix='./'; Test unit written to ./oom-9a5ac96f2135c940a06ed95b653815131f549250 Step #5: Base64: WwAt379d Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 786 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4017288718 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602b3132d60, 0x5602b331b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602b331b720,0x5602b51a52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9a5ac96f2135c940a06ed95b653815131f549250' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 876 processed earlier; will process 10100 files now Step #5: #1 pulse cov: 3569 ft: 3570 exec/s: 0 rss: 160Mb Step #5: ==28330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5602a9c752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5602b02b0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5602b029346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5602b029338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5602a9c7b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5602a9bdc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5602a9bd6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5602a9c6d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5602acc9c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5602acc9c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5602acc9c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5602acc9c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5602acc9c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5602acc9c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5602acc9c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5602acc9c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5602acc9c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5602acc9c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602aeea145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5602abbfd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5602abc085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5602ab9b3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5602ab9b3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5602ab9b4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5602ab9b3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5602ab9b3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5602ab9b3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5602b029594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602b029e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5602b0286529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5602b02b0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d6a575082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5602a9bd543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xc7,0xb2,0xc7,0xb3,0x5d, Step #5: [\307\262\307\263] Step #5: artifact_prefix='./'; Test unit written to ./oom-67cf5d67bf8fbb849fe8fec5fdc53e501d18394a Step #5: Base64: W8eyx7Nd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 787 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4017780892 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c6c185cd60, 0x55c6c1a4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c6c1a45720,0x55c6c38cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/67cf5d67bf8fbb849fe8fec5fdc53e501d18394a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 878 processed earlier; will process 10098 files now Step #5: ==28366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c6b839f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c6be9da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c6be9bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c6be9bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c6b83a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c6b830642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c6b8300c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c6b8397595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c6bb3c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c6bb3c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c6bb3c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c6bb3c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c6bb3c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c6bb3c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c6bb3c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c6bb3c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c6bb3c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c6bb3c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c6bd5cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c6ba327578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c6ba3325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c6ba0ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c6ba0ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c6ba0de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c6ba0dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c6ba0dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c6ba0dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c6be9bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c6be9c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c6be9b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c6be9dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f73338de082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c6b82ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0x85,0xf4,0x8f,0xb2,0xbb, Step #5: \337\205\364\217\262\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-af0ddf06bc427ebc05366bc0fec1ef91a6e29856 Step #5: Base64: 34X0j7K7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 788 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4018240293 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc6693ad60, 0x55fc66b2371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc66b23720,0x55fc689ad2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af0ddf06bc427ebc05366bc0fec1ef91a6e29856' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 879 processed earlier; will process 10097 files now Step #5: ==28402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc5d47d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc63ab8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc63a9b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc63a9b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc5d483652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc5d3e442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc5d3dec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc5d475595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc604a48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc604a48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc604a48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc604a48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc604a48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc604a48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc604a48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc604a48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc604a48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc604a48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc626a945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc5f405578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc5f4105a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc5f1bbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc5f1bbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc5f1bc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc5f1bb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc5f1bb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc5f1bb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc63a9d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc63aa67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc63a8e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc63ab8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f982518e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc5d3dd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x6,0x3f,0x79, Step #5: \000\000\000\006?y Step #5: artifact_prefix='./'; Test unit written to ./oom-a851b91e2c8a2a43360f6ae87aa00e79b6b52f62 Step #5: Base64: AAAABj95 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 789 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4018695684 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55885914dd60, 0x55885933671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558859336720,0x55885b1c02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a851b91e2c8a2a43360f6ae87aa00e79b6b52f62' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 880 processed earlier; will process 10096 files now Step #5: ==28438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55884fc902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5588562cb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5588562ae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5588562ae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55884fc96652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55884fbf742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55884fbf1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55884fc88595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558852cb78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558852cb78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558852cb78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558852cb78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558852cb78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558852cb78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558852cb78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558852cb78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558852cb78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558852cb78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558854ebc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558851c18578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558851c235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5588519ced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5588519ced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5588519cf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5588519ce944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5588519ce944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5588519ce944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5588562b094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5588562b97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5588562a1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5588562cbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5930176082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55884fbf043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x84,0x82,0xe1,0x85,0xac, Step #5: \341\204\202\341\205\254 Step #5: artifact_prefix='./'; Test unit written to ./oom-8bf33a087af56ad39f27c523324343f8bac62d7a Step #5: Base64: 4YSC4YWs Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 790 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4019141653 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e76fb85d60, 0x55e76fd6e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e76fd6e720,0x55e771bf82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8bf33a087af56ad39f27c523324343f8bac62d7a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 881 processed earlier; will process 10095 files now Step #5: #1 pulse cov: 10298 ft: 10299 exec/s: 0 rss: 178Mb Step #5: ==28474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e7666c82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e76cd03728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e76cce646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e76cce638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e7666ce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e76662f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e766629c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e7666c0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e7696ef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e7696ef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e7696ef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e7696ef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e7696ef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e7696ef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e7696ef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e7696ef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e7696ef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e7696ef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e76b8f445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e768650578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e76865b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e768406d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e768406d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e768407808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e768406944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e768406944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e768406944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e76cce894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e76ccf17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e76ccd9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e76cd03fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc52d4a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e76662843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x3c,0x0,0x50,0x0,0x6c, Step #5: \000<\000P\000l Step #5: artifact_prefix='./'; Test unit written to ./oom-e864b4183704f4c12f3f30100aee48f2349aec14 Step #5: Base64: ADwAUABs Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 791 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4019659092 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b1a711d60, 0x557b1a8fa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b1a8fa720,0x557b1c7842c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e864b4183704f4c12f3f30100aee48f2349aec14' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 883 processed earlier; will process 10093 files now Step #5: ==28510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b112542d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b1788f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b1787246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b1787238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b1125a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b111bb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b111b5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b1124c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b1427b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b1427b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b1427b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b1427b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b1427b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b1427b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b1427b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b1427b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b1427b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b1427b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557b1648045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b131dc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b131e75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b12f92d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b12f92d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b12f93808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b12f92944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b12f92944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b12f92944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b1787494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b1787d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b17865529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b1788ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f577dc61082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b111b443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x4d,0x4a,0x0,0x7f, Step #5: DaMJ\000\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-c24517a608c9becc2f61f3f22130cd9a81b9e639 Step #5: Base64: RGFNSgB/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 792 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4020113883 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5572a0f75d60, 0x5572a115e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5572a115e720,0x5572a2fe82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c24517a608c9becc2f61f3f22130cd9a81b9e639' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 884 processed earlier; will process 10092 files now Step #5: ==28546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557297ab82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55729e0f3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55729e0d646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55729e0d638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557297abe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557297a1f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557297a19c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557297ab0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55729aadf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55729aadf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55729aadf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55729aadf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55729aadf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55729aadf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55729aadf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55729aadf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55729aadf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55729aadf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55729cce445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557299a40578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557299a4b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5572997f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5572997f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5572997f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5572997f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5572997f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5572997f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55729e0d894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55729e0e17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55729e0c9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55729e0f3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f62b6a4b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557297a1843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x3f,0x47,0x3a,0x21,0x34, Step #5: F?G:!4 Step #5: artifact_prefix='./'; Test unit written to ./oom-52c2d8cc19dc8e6b9c993ed191357c5ed4873120 Step #5: Base64: Rj9HOiE0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 793 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4020566315 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea56908d60, 0x55ea56af171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea56af1720,0x55ea5897b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/52c2d8cc19dc8e6b9c993ed191357c5ed4873120' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 885 processed earlier; will process 10091 files now Step #5: ==28582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea4d44b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea53a86728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea53a6946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea53a6938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea4d451652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea4d3b242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea4d3acc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea4d443595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea504728c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea504728c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea504728c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea504728c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea504728c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea504728c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea504728c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea504728c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea504728c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea504728c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea5267745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea4f3d3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea4f3de5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea4f189d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea4f189d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea4f18a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea4f189944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea4f189944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea4f189944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea53a6b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea53a747b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea53a5c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea53a86fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd38e92f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea4d3ab43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0x64,0x6e,0x68,0x64,0x6d, Step #5: hdnhdm Step #5: artifact_prefix='./'; Test unit written to ./oom-e66c1eaa622a48f197270d7c8cbda87c36c4786c Step #5: Base64: aGRuaGRt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 794 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4021022170 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559144241d60, 0x55914442a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55914442a720,0x5591462b42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e66c1eaa622a48f197270d7c8cbda87c36c4786c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 886 processed earlier; will process 10090 files now Step #5: #1 pulse cov: 3639 ft: 3640 exec/s: 0 rss: 162Mb Step #5: #2 pulse cov: 11099 ft: 11860 exec/s: 0 rss: 181Mb Step #5: ==28618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55913ad842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591413bf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5591413a246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5591413a238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55913ad8a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55913aceb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55913ace5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55913ad7c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55913ddab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55913ddab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55913ddab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55913ddab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55913ddab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55913ddab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55913ddab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55913ddab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55913ddab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55913ddab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55913ffb045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55913cd0c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55913cd175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55913cac2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55913cac2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55913cac3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55913cac2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55913cac2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55913cac2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5591413a494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591413ad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559141395529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591413bffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f68ef3d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55913ace443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x3a,0xd6,0xba, Step #5: (?i:\326\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-69e46c1ced1fd33551a1f2b8c5a4f0514de6cc3f Step #5: Base64: KD9pOta6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 795 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4021571795 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f7e9e6fd60, 0x55f7ea05871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f7ea058720,0x55f7ebee22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/69e46c1ced1fd33551a1f2b8c5a4f0514de6cc3f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 889 processed earlier; will process 10087 files now Step #5: ==28654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7e09b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7e6fed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7e6fd046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7e6fd038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f7e09b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7e091942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7e0913c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f7e09aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7e39d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7e39d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7e39d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7e39d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7e39d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7e39d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7e39d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7e39d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7e39d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7e39d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7e5bde45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f7e293a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7e29455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7e26f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7e26f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7e26f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7e26f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7e26f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7e26f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7e6fd294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7e6fdb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7e6fc3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7e6fedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba10f90082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7e091243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x23,0x30,0x25,0xdb,0x0, Step #5: \000#0%\333\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-1610a32305496ae0bfb1e2c95c5e870928c0f834 Step #5: Base64: ACMwJdsA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 796 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4022019767 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5566512e2d60, 0x5566514cb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5566514cb720,0x5566533552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1610a32305496ae0bfb1e2c95c5e870928c0f834' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 890 processed earlier; will process 10086 files now Step #5: ==28690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556647e252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55664e460728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55664e44346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55664e44338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556647e2b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556647d8c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556647d86c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556647e1d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55664ae4c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55664ae4c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55664ae4c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55664ae4c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55664ae4c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55664ae4c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55664ae4c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55664ae4c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55664ae4c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55664ae4c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55664d05145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556649dad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556649db85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556649b63d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556649b63d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556649b64808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556649b63944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556649b63944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556649b63944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55664e44594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55664e44e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55664e436529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55664e460fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8df2115082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556647d8543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x66,0x61,0x61,0x61,0x61, Step #5: ifaaaa Step #5: artifact_prefix='./'; Test unit written to ./oom-71b30e66423559ccfbcde22b661ea16c5f39eecf Step #5: Base64: aWZhYWFh Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 797 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4022491135 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561e258acd60, 0x561e25a9571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561e25a95720,0x561e2791f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71b30e66423559ccfbcde22b661ea16c5f39eecf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 891 processed earlier; will process 10085 files now Step #5: ==28726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e1c3ef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561e22a2a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561e22a0d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561e22a0d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e1c3f5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e1c35642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e1c350c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e1c3e7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561e1f4168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561e1f4168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561e1f4168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561e1f4168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561e1f4168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561e1f4168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561e1f4168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561e1f4168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561e1f4168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561e1f4168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561e2161b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561e1e377578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561e1e3825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561e1e12dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561e1e12dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561e1e12e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561e1e12d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561e1e12d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561e1e12d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561e22a0f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561e22a187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561e22a00529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561e22a2afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f967f081082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e1c34f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x6d,0x29,0x24,0x24, Step #5: (?m)$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-c49ff8ec2535a3cd13cedab6d8d272760638d777 Step #5: Base64: KD9tKSQk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 798 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4022946694 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f37cf36d60, 0x55f37d11f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f37d11f720,0x55f37efa92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c49ff8ec2535a3cd13cedab6d8d272760638d777' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 892 processed earlier; will process 10084 files now Step #5: ==28762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f373a792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f37a0b4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f37a09746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f37a09738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f373a7f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f3739e042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f3739dac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f373a71595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f376aa08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f376aa08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f376aa08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f376aa08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f376aa08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f376aa08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f376aa08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f376aa08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f376aa08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f376aa08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f378ca545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f375a01578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f375a0c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f3757b7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f3757b7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f3757b8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f3757b7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f3757b7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f3757b7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f37a09994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f37a0a27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f37a08a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f37a0b4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7fb3aaa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f3739d943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x37,0x0,0xf0,0x90,0x9a,0x84, Step #5: 7\000\360\220\232\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-2faebb81bbb6766a824e1914de0391ec1c379c2e Step #5: Base64: NwDwkJqE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 799 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4023394957 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b47a5cd60, 0x560b47c4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b47c45720,0x560b49acf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2faebb81bbb6766a824e1914de0391ec1c379c2e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 893 processed earlier; will process 10083 files now Step #5: ==28798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b3e59f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b44bda728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b44bbd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b44bbd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b3e5a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b3e50642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b3e500c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b3e597595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b415c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b415c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b415c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b415c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b415c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b415c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b415c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b415c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b415c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b415c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b437cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b40527578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b405325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b402ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b402ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b402de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b402dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b402dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b402dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b44bbf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b44bc87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b44bb0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b44bdafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9725af6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b3e4ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xa,0x4,0xdb,0x80,0x0, Step #5: \000\012\004\333\200\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-fe95eecfb0b7fdfa8f72d8aa1ffe62b8fdea6470 Step #5: Base64: AAoE24AA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 800 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4023847581 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55772d4abd60, 0x55772d69471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55772d694720,0x55772f51e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fe95eecfb0b7fdfa8f72d8aa1ffe62b8fdea6470' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 894 processed earlier; will process 10082 files now Step #5: ==28834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557723fee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55772a629728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55772a60c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55772a60c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557723ff4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557723f5542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557723f4fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557723fe6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5577270158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5577270158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5577270158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5577270158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5577270158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5577270158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5577270158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5577270158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5577270158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5577270158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55772921a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557725f76578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557725f815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557725d2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557725d2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557725d2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557725d2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557725d2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557725d2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55772a60e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55772a6177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55772a5ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55772a629fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa253d6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557723f4e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x68,0xa,0x2d,0xa,0x2d, Step #5: Ph\012-\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-f647870a09b1a434215a334023e489ce844d8207 Step #5: Base64: UGgKLQot Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 801 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4024305426 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dda1233d60, 0x55dda141c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dda141c720,0x55dda32a62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f647870a09b1a434215a334023e489ce844d8207' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 895 processed earlier; will process 10081 files now Step #5: ==28870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dd97d762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dd9e3b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dd9e39446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dd9e39438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dd97d7c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dd97cdd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dd97cd7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dd97d6e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dd9ad9d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dd9ad9d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dd9ad9d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dd9ad9d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dd9ad9d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dd9ad9d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dd9ad9d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dd9ad9d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dd9ad9d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dd9ad9d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dd9cfa245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dd99cfe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dd99d095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dd99ab4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dd99ab4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dd99ab5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dd99ab4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dd99ab4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dd99ab4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dd9e39694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dd9e39f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dd9e387529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dd9e3b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1d6f972082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dd97cd643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xbf,0x9f,0xb5,0x7c,0x2e, Step #5: \360\277\237\265|. Step #5: artifact_prefix='./'; Test unit written to ./oom-1c146102c694aaf679dfbf41a25d0842912dab4d Step #5: Base64: 8L+ftXwu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 802 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4024762741 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562b92cb0d60, 0x562b92e9971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562b92e99720,0x562b94d232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1c146102c694aaf679dfbf41a25d0842912dab4d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 896 processed earlier; will process 10080 files now Step #5: ==28906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562b897f32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562b8fe2e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562b8fe1146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562b8fe1138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562b897f9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562b8975a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562b89754c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562b897eb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562b8c81a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562b8c81a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562b8c81a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562b8c81a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562b8c81a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562b8c81a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562b8c81a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562b8c81a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562b8c81a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562b8c81a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562b8ea1f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562b8b77b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562b8b7865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562b8b531d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562b8b531d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562b8b532808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562b8b531944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562b8b531944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562b8b531944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562b8fe1394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562b8fe1c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562b8fe04529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562b8fe2efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff7e26eb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562b8975343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x14,0x3,0x16,0x0,0x0,0x3, Step #5: \024\003\026\000\000\003 Step #5: artifact_prefix='./'; Test unit written to ./oom-577a40c766aeb0259135f5897874366bcb523ef2 Step #5: Base64: FAMWAAAD Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 803 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4025213016 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5558245e8d60, 0x5558247d171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5558247d1720,0x55582665b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/577a40c766aeb0259135f5897874366bcb523ef2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 897 processed earlier; will process 10079 files now Step #5: ==28942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55581b12b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555821766728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55582174946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55582174938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55581b131652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55581b09242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55581b08cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55581b123595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55581e1528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55581e1528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55581e1528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55581e1528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55581e1528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55581e1528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55581e1528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55581e1528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55581e1528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55581e1528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55582035745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55581d0b3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55581d0be5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55581ce69d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55581ce69d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55581ce6a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55581ce69944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55581ce69944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55581ce69944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55582174b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5558217547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55582173c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555821766fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7305607082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55581b08b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6,0x0,0xd2,0x84,0x3c,0x3c, Step #5: \006\000\322\204<< Step #5: artifact_prefix='./'; Test unit written to ./oom-44f413971140c2b0583b3466dd1ecf2dd55bc94d Step #5: Base64: BgDShDw8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 804 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4025676815 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ebd9a3d60, 0x558ebdb8c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ebdb8c720,0x558ebfa162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/44f413971140c2b0583b3466dd1ecf2dd55bc94d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 898 processed earlier; will process 10078 files now Step #5: ==28978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558eb44e62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ebab21728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ebab0446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ebab0438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558eb44ec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558eb444d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558eb4447c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558eb44de595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558eb750d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558eb750d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558eb750d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558eb750d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558eb750d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558eb750d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558eb750d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558eb750d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558eb750d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558eb750d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558eb971245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558eb646e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558eb64795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558eb6224d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558eb6224d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558eb6225808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558eb6224944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558eb6224944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558eb6224944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ebab0694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ebab0f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ebaaf7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ebab21fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fda18226082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558eb444643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x63,0x24,0x24,0x24,0x25, Step #5: $c$$$% Step #5: artifact_prefix='./'; Test unit written to ./oom-c05901df301d8bf88c3cdb03028d26ffa2fe9d01 Step #5: Base64: JGMkJCQl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 805 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4026138321 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b46e719d60, 0x55b46e90271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b46e902720,0x55b47078c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c05901df301d8bf88c3cdb03028d26ffa2fe9d01' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 899 processed earlier; will process 10077 files now Step #5: ==29014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b46525c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b46b897728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b46b87a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b46b87a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b465262652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b4651c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b4651bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b465254595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b4682838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b4682838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b4682838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b4682838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b4682838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b4682838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b4682838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b4682838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b4682838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b4682838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b46a48845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b4671e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b4671ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b466f9ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b466f9ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b466f9b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b466f9a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b466f9a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b466f9a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b46b87c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b46b8857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b46b86d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b46b897fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8c96cd5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b4651bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x66,0x25,0x66,0x25,0x66, Step #5: %f%f%f Step #5: artifact_prefix='./'; Test unit written to ./oom-a2712e85d74223b8c491a8c885999e2e4e0ffaa5 Step #5: Base64: JWYlZiVm Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 806 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4026603634 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56487ff26d60, 0x56488010f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56488010f720,0x564881f992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2712e85d74223b8c491a8c885999e2e4e0ffaa5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 900 processed earlier; will process 10076 files now Step #5: ==29050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564876a692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56487d0a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56487d08746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56487d08738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564876a6f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5648769d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5648769cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564876a61595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564879a908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564879a908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564879a908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564879a908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564879a908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564879a908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564879a908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564879a908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564879a908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564879a908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56487bc9545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5648789f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5648789fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5648787a7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5648787a7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5648787a8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5648787a7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5648787a7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5648787a7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56487d08994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56487d0927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56487d07a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56487d0a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee8b21c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5648769c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0xa3,0x5c,0xb8,0x0,0x7f, Step #5: \333\243\\\270\000\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-e42d64b6a6a157cec6334c0207d818af9eb8fec2 Step #5: Base64: 26NcuAB/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 807 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4027052581 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f6c6978d60, 0x55f6c6b6171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f6c6b61720,0x55f6c89eb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e42d64b6a6a157cec6334c0207d818af9eb8fec2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 901 processed earlier; will process 10075 files now Step #5: ==29086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f6bd4bb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f6c3af6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f6c3ad946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f6c3ad938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f6bd4c1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f6bd42242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f6bd41cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f6bd4b3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f6c04e28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f6c04e28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f6c04e28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f6c04e28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f6c04e28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f6c04e28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f6c04e28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f6c04e28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f6c04e28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f6c04e28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f6c26e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f6bf443578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f6bf44e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f6bf1f9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f6bf1f9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f6bf1fa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f6bf1f9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f6bf1f9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f6bf1f9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f6c3adb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f6c3ae47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f6c3acc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f6c3af6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f58e36d1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f6bd41b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x40,0x40,0x3,0x60,0x60, Step #5: \003@@\003`` Step #5: artifact_prefix='./'; Test unit written to ./oom-4a4e3d5ceb00dc46725a1cd8ae31ffa6a5246c71 Step #5: Base64: A0BAA2Bg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 808 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4027632146 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605965e6d60, 0x5605967cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605967cf720,0x5605986592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a4e3d5ceb00dc46725a1cd8ae31ffa6a5246c71' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 902 processed earlier; will process 10074 files now Step #5: ==29122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56058d1292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560593764728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56059374746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56059374738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56058d12f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56058d09042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56058d08ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56058d121595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605901508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605901508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605901508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605901508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605901508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605901508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605901508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605901508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605901508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605901508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56059235545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56058f0b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56058f0bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56058ee67d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56058ee67d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56058ee68808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56058ee67944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56058ee67944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56058ee67944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56059374994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605937527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56059373a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560593764fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0f49b5d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56058d08943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0xf4,0x84,0x9f,0xbf,0x27, Step #5: '\364\204\237\277' Step #5: artifact_prefix='./'; Test unit written to ./oom-15e30fba0cced1184a1713de616c75f583562164 Step #5: Base64: J/SEn78n Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 809 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4028082379 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55619ee80d60, 0x55619f06971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55619f069720,0x5561a0ef32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/15e30fba0cced1184a1713de616c75f583562164' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 903 processed earlier; will process 10073 files now Step #5: ==29158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5561959c32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55619bffe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55619bfe146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55619bfe138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5561959c9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55619592a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556195924c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5561959bb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5561989ea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5561989ea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5561989ea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5561989ea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5561989ea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5561989ea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5561989ea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5561989ea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5561989ea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5561989ea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55619abef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55619794b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5561979565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556197701d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556197701d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556197702808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556197701944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556197701944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556197701944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55619bfe394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55619bfec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55619bfd4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55619bffefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd64745a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55619592343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x2d,0xd,0x2d,0xd,0x2b, Step #5: (-\015-\015+ Step #5: artifact_prefix='./'; Test unit written to ./oom-5ca2d685760018674c353a1d1f523ae55a317b43 Step #5: Base64: KC0NLQ0r Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 810 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4028538526 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56119c9dfd60, 0x56119cbc871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56119cbc8720,0x56119ea522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ca2d685760018674c353a1d1f523ae55a317b43' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 904 processed earlier; will process 10072 files now Step #5: ==29194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5611935222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561199b5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561199b4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561199b4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561193528652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56119348942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561193483c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56119351a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5611965498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5611965498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5611965498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5611965498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5611965498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5611965498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5611965498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5611965498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5611965498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5611965498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56119874e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5611954aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5611954b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561195260d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561195260d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561195261808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561195260944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561195260944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561195260944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561199b4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561199b4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561199b33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561199b5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9c99145082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56119348243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x66,0xa,0x0,0xa,0x0, Step #5: Pf\012\000\012\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f1cc76e71b45f07e0666e2d4c51d6c80b58bf443 Step #5: Base64: UGYKAAoA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 811 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4029002358 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5586090dcd60, 0x5586092c571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5586092c5720,0x55860b14f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f1cc76e71b45f07e0666e2d4c51d6c80b58bf443' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 905 processed earlier; will process 10071 files now Step #5: ==29230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585ffc1f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55860625a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55860623d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55860623d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585ffc25652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585ffb8642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585ffb80c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585ffc17595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558602c468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558602c468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558602c468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558602c468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558602c468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558602c468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558602c468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558602c468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558602c468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558602c468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558604e4b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558601ba7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558601bb25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55860195dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55860195dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55860195e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55860195d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55860195d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55860195d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55860623f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5586062487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558606230529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55860625afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e3400a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585ffb7f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd2,0x97,0xf0,0x91,0x80,0x80, Step #5: \322\227\360\221\200\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-28770a9e1173dae2e364166cb5aac4680ca194ae Step #5: Base64: 0pfwkYCA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 812 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4029452278 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555996fb5d60, 0x55599719e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55599719e720,0x5559990282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28770a9e1173dae2e364166cb5aac4680ca194ae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 906 processed earlier; will process 10070 files now Step #5: ==29266== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55598daf82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555994133728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55599411646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55599411638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55598dafe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55598da5f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55598da59c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55598daf0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555990b1f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555990b1f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555990b1f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555990b1f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555990b1f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555990b1f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555990b1f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555990b1f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555990b1f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555990b1f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555992d2445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55598fa80578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55598fa8b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55598f836d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55598f836d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55598f837808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55598f836944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55598f836944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55598f836944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55599411894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559941217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555994109529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555994133fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff3a93de082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55598da5843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x87,0xab,0xe6,0xa4, Step #5: \363\240\207\253\346\244 Step #5: artifact_prefix='./'; Test unit written to ./oom-e25c747a8b87a28e539752a8024888274b4ed08a Step #5: Base64: 86CHq+ak Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 813 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4029900969 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557fabb97d60, 0x557fabd8071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557fabd80720,0x557fadc0a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e25c747a8b87a28e539752a8024888274b4ed08a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 907 processed earlier; will process 10069 files now Step #5: ==29302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557fa26da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557fa8d15728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557fa8cf846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557fa8cf838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557fa26e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557fa264142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557fa263bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557fa26d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557fa57018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557fa57018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557fa57018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557fa57018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557fa57018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557fa57018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557fa57018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557fa57018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557fa57018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557fa57018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557fa790645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557fa4662578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557fa466d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557fa4418d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557fa4418d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557fa4419808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557fa4418944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557fa4418944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557fa4418944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557fa8cfa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557fa8d037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557fa8ceb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557fa8d15fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2fc029e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557fa263a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d,0x61,0x78,0x70,0x4d,0x26, Step #5: maxpM& Step #5: artifact_prefix='./'; Test unit written to ./oom-23904fff86e067bd728b16b259f6377704943b68 Step #5: Base64: bWF4cE0m Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 814 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4030358480 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cd116a1d60, 0x55cd1188a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cd1188a720,0x55cd137142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/23904fff86e067bd728b16b259f6377704943b68' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 908 processed earlier; will process 10068 files now Step #5: ==29338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cd081e42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cd0e81f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cd0e80246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cd0e80238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cd081ea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cd0814b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cd08145c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cd081dc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cd0b20b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cd0b20b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cd0b20b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cd0b20b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cd0b20b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cd0b20b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cd0b20b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cd0b20b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cd0b20b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cd0b20b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cd0d41045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cd0a16c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cd0a1775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cd09f22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cd09f22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cd09f23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cd09f22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cd09f22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cd09f22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cd0e80494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cd0e80d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cd0e7f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cd0e81ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc6c3b7e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cd0814443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6d,0x6c, Step #5: Step #5: Step #5: #0 0x560a0c0fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560a12739728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560a1271c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560a1271c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560a0c104652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560a0c06542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560a0c05fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560a0c0f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560a0f1258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560a0f1258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560a0f1258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560a0f1258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560a0f1258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560a0f1258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560a0f1258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560a0f1258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560a0f1258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560a0f1258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560a1132a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560a0e086578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560a0e0915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560a0de3cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560a0de3cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560a0de3d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560a0de3c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560a0de3c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560a0de3c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560a1271e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560a127277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560a1270f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560a12739fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd95ce20082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560a0c05e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x6f,0x71,0x9,0x2e,0x74, Step #5: \001oq\011.t Step #5: artifact_prefix='./'; Test unit written to ./oom-cb6c473e9f3de366062a062c59c2001bfaf36b70 Step #5: Base64: AW9xCS50 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 816 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4031266979 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561169e18d60, 0x56116a00171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56116a001720,0x56116be8b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cb6c473e9f3de366062a062c59c2001bfaf36b70' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 910 processed earlier; will process 10066 files now Step #5: ==29410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56116095b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561166f96728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561166f7946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561166f7938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561160961652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5611608c242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5611608bcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561160953595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5611639828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5611639828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5611639828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5611639828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5611639828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5611639828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5611639828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5611639828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5611639828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5611639828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561165b8745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5611628e3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5611628ee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561162699d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561162699d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56116269a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561162699944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561162699944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561162699944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561166f7b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561166f847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561166f6c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561166f96fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff42cf31082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5611608bb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd8,0xad,0x29,0x7e,0x3f,0x30, Step #5: \330\255)~?0 Step #5: artifact_prefix='./'; Test unit written to ./oom-5c3e77a4eea06750975834ecbee4fda883ec6bef Step #5: Base64: 2K0pfj8w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 817 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4031717342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560250b75d60, 0x560250d5e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560250d5e720,0x560252be82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c3e77a4eea06750975834ecbee4fda883ec6bef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 911 processed earlier; will process 10065 files now Step #5: ==29446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5602476b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56024dcf3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56024dcd646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56024dcd638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5602476be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56024761f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560247619c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5602476b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56024a6df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56024a6df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56024a6df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56024a6df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56024a6df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56024a6df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56024a6df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56024a6df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56024a6df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56024a6df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56024c8e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560249640578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56024964b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5602493f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5602493f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5602493f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5602493f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5602493f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5602493f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56024dcd894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56024dce17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56024dcc9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56024dcf3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2458e7e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56024761843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x5a,0x5b,0xdf,0xbf,0x5d, Step #5: -Z[\337\277] Step #5: artifact_prefix='./'; Test unit written to ./oom-919517906c6ee9e5bf27d3533fd17048f7e8a82c Step #5: Base64: LVpb379d Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 818 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4032172241 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564da606cd60, 0x564da625571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564da6255720,0x564da80df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/919517906c6ee9e5bf27d3533fd17048f7e8a82c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 912 processed earlier; will process 10064 files now Step #5: ==29482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564d9cbaf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564da31ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564da31cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564da31cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564d9cbb5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564d9cb1642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564d9cb10c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564d9cba7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564d9fbd68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564d9fbd68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564d9fbd68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564d9fbd68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564d9fbd68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564d9fbd68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564d9fbd68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564d9fbd68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564d9fbd68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564d9fbd68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564da1ddb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564d9eb37578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564d9eb425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564d9e8edd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564d9e8edd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564d9e8ee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564d9e8ed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564d9e8ed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564d9e8ed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564da31cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564da31d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564da31c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564da31eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f23074082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564d9cb0f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x0,0x58,0x76,0x0,0x57, Step #5: A\000Xv\000W Step #5: artifact_prefix='./'; Test unit written to ./oom-ceff1cf6683756ad117ae6a6bb05143edf4ec9c2 Step #5: Base64: QQBYdgBX Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 819 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4032619364 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ff77c8d60, 0x560ff79b171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ff79b1720,0x560ff983b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ceff1cf6683756ad117ae6a6bb05143edf4ec9c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 913 processed earlier; will process 10063 files now Step #5: ==29518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560fee30b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ff4946728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ff492946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ff492938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560fee311652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560fee27242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560fee26cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560fee303595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ff13328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ff13328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ff13328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ff13328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ff13328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ff13328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ff13328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ff13328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ff13328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ff13328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ff353745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ff0293578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ff029e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ff0049d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ff0049d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ff004a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ff0049944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ff0049944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ff0049944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ff492b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ff49347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ff491c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ff4946fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2ae576082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560fee26b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x34,0x27,0x34,0x27,0x4a, Step #5: +4'4'J Step #5: artifact_prefix='./'; Test unit written to ./oom-501654b5a146aa21e7a487d918aab6ebdfb583c8 Step #5: Base64: KzQnNCdK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 820 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4033074038 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560da1a5fd60, 0x560da1c4871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560da1c48720,0x560da3ad22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/501654b5a146aa21e7a487d918aab6ebdfb583c8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 914 processed earlier; will process 10062 files now Step #5: ==29554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560d985a22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560d9ebdd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560d9ebc046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560d9ebc038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560d985a8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560d9850942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560d98503c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560d9859a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560d9b5c98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560d9b5c98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560d9b5c98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560d9b5c98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560d9b5c98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560d9b5c98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560d9b5c98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560d9b5c98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560d9b5c98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560d9b5c98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560d9d7ce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560d9a52a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560d9a5355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560d9a2e0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560d9a2e0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560d9a2e1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560d9a2e0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560d9a2e0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560d9a2e0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560d9ebc294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560d9ebcb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560d9ebb3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560d9ebddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ad08f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560d9850243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x32,0x30,0x36,0x36,0x31, Step #5: 320661 Step #5: artifact_prefix='./'; Test unit written to ./oom-83d610cbf331f976d761ba69bbdbe811447de152 Step #5: Base64: MzIwNjYx Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 821 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4033522116 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b1cc904d60, 0x55b1ccaed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b1ccaed720,0x55b1ce9772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/83d610cbf331f976d761ba69bbdbe811447de152' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 915 processed earlier; will process 10061 files now Step #5: ==29590== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b1c34472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b1c9a82728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b1c9a6546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b1c9a6538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b1c344d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b1c33ae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b1c33a8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b1c343f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1c646e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1c646e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1c646e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1c646e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1c646e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1c646e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1c646e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1c646e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1c646e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1c646e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b1c867345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b1c53cf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1c53da5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b1c5185d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b1c5185d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b1c5186808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b1c5185944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b1c5185944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b1c5185944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b1c9a6794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1c9a707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b1c9a58529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b1c9a82fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1872002082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b1c33a743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x5c,0x75,0x7b,0x42,0x7d, Step #5: '\\u{B} Step #5: artifact_prefix='./'; Test unit written to ./oom-0470f601762207782b08ae4f60bf5ee2b2f5828c Step #5: Base64: J1x1e0J9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 822 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4033973827 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5582f8c54d60, 0x5582f8e3d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5582f8e3d720,0x5582facc72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0470f601762207782b08ae4f60bf5ee2b2f5828c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 916 processed earlier; will process 10060 files now Step #5: ==29626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5582ef7972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5582f5dd2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5582f5db546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5582f5db538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5582ef79d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5582ef6fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5582ef6f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5582ef78f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5582f27be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5582f27be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5582f27be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5582f27be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5582f27be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5582f27be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5582f27be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5582f27be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5582f27be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5582f27be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5582f49c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5582f171f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5582f172a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5582f14d5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5582f14d5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5582f14d6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5582f14d5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5582f14d5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5582f14d5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5582f5db794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5582f5dc07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5582f5da8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5582f5dd2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb0e822d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5582ef6f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0x2d,0x2d,0x62, Step #5: -----b Step #5: artifact_prefix='./'; Test unit written to ./oom-8ac8b49601729060ffe0f48d35fc93900f6a37bd Step #5: Base64: LS0tLS1i Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 823 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4034430222 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55556b933d60, 0x55556bb1c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55556bb1c720,0x55556d9a62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ac8b49601729060ffe0f48d35fc93900f6a37bd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 917 processed earlier; will process 10059 files now Step #5: ==29662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5555624762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555568ab1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555568a9446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555568a9438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55556247c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5555623dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5555623d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55556246e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55556549d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55556549d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55556549d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55556549d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55556549d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55556549d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55556549d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55556549d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55556549d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55556549d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5555676a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5555643fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5555644095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5555641b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5555641b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5555641b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5555641b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5555641b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5555641b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555568a9694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555568a9f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555568a87529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555568ab1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc9fea3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5555623d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x2b,0x20,0x27,0x76,0x54, Step #5: + 'vT Step #5: artifact_prefix='./'; Test unit written to ./oom-ad67a45329c2a87e4b3f9cfa55f6df27c4e03498 Step #5: Base64: ICsgJ3ZU Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 824 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4034884950 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ba9849ed60, 0x55ba9868771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ba98687720,0x55ba9a5112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ad67a45329c2a87e4b3f9cfa55f6df27c4e03498' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 918 processed earlier; will process 10058 files now Step #5: ==29698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ba8efe12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ba9561c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ba955ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ba955ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ba8efe7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ba8ef4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ba8ef42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ba8efd9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ba920088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ba920088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ba920088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ba920088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ba920088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ba920088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ba920088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ba920088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ba920088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ba920088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ba9420d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ba90f69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ba90f745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ba90d1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ba90d1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ba90d20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ba90d1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ba90d1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ba90d1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ba9560194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ba9560a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ba955f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ba9561cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f87929a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ba8ef4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x81,0x81,0xe2,0x81,0x81, Step #5: \342\201\201\342\201\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-3d4efd635956b4faf1ebac1775cb44b6cbebecc6 Step #5: Base64: 4oGB4oGB Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 825 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4035336220 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ac2e02ad60, 0x55ac2e21371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ac2e213720,0x55ac3009d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d4efd635956b4faf1ebac1775cb44b6cbebecc6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 919 processed earlier; will process 10057 files now Step #5: #1 pulse cov: 3735 ft: 3736 exec/s: 0 rss: 160Mb Step #5: ==29734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ac24b6d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ac2b1a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ac2b18b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ac2b18b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ac24b73652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ac24ad442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ac24acec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ac24b65595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ac27b948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ac27b948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ac27b948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ac27b948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ac27b948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ac27b948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ac27b948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ac27b948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ac27b948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ac27b948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ac29d9945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ac26af5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ac26b005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ac268abd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ac268abd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ac268ac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ac268ab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ac268ab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ac268ab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ac2b18d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ac2b1967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ac2b17e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ac2b1a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d14d2d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ac24acd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0x80,0xf0,0x90,0x94,0x8a, Step #5: \302\200\360\220\224\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-6880167f338e32e03533f5498bf8a4a745574163 Step #5: Base64: woDwkJSK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 826 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4035826176 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556ec4d44d60, 0x556ec4f2d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556ec4f2d720,0x556ec6db72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6880167f338e32e03533f5498bf8a4a745574163' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 921 processed earlier; will process 10055 files now Step #5: #1 pulse cov: 3447 ft: 3448 exec/s: 0 rss: 160Mb Step #5: ==29770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ebb8872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556ec1ec2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556ec1ea546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556ec1ea538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ebb88d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ebb7ee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ebb7e8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ebb87f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ebe8ae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ebe8ae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ebe8ae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ebe8ae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ebe8ae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ebe8ae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ebe8ae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ebe8ae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ebe8ae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ebe8ae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ec0ab345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ebd80f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ebd81a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ebd5c5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ebd5c5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ebd5c6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ebd5c5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ebd5c5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ebd5c5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556ec1ea794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556ec1eb07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556ec1e98529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556ec1ec2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f79af58b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ebb7e743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x28,0x5b,0x3f,0xdf, Step #5: (?([?\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-dc7d839f3aa7abd851e4beea0b2126fcd49b0512 Step #5: Base64: KD8oWz/f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 827 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4036326879 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558bebe8cd60, 0x558bec07571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558bec075720,0x558bedeff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dc7d839f3aa7abd851e4beea0b2126fcd49b0512' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 923 processed earlier; will process 10053 files now Step #5: ==29806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558be29cf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558be900a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558be8fed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558be8fed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558be29d5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558be293642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558be2930c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558be29c7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558be59f68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558be59f68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558be59f68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558be59f68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558be59f68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558be59f68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558be59f68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558be59f68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558be59f68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558be59f68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558be7bfb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558be4957578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558be49625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558be470dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558be470dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558be470e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558be470d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558be470d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558be470d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558be8fef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558be8ff87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558be8fe0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558be900afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa7abb44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558be292f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x65,0x2d,0x65,0x6e,0x2d, Step #5: -e-en- Step #5: artifact_prefix='./'; Test unit written to ./oom-a8baca399ae3851d28a73d87a838ae5cd9ef15da Step #5: Base64: LWUtZW4t Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 828 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4036783898 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f52bd35d60, 0x55f52bf1e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f52bf1e720,0x55f52dda82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a8baca399ae3851d28a73d87a838ae5cd9ef15da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 924 processed earlier; will process 10052 files now Step #5: ==29842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f5228782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f528eb3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f528e9646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f528e9638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f52287e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f5227df42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f5227d9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f522870595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f52589f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f52589f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f52589f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f52589f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f52589f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f52589f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f52589f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f52589f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f52589f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f52589f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f527aa445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f524800578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f52480b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f5245b6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f5245b6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f5245b7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f5245b6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f5245b6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f5245b6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f528e9894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f528ea17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f528e89529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f528eb3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3fb9d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f5227d843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcc,0x95,0xf0,0x94,0xc2,0x37, Step #5: \314\225\360\224\3027 Step #5: artifact_prefix='./'; Test unit written to ./oom-c64e9dd40818c2f23356641f064c9f9548a44535 Step #5: Base64: zJXwlMI3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 829 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4037246809 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fd6b526d60, 0x55fd6b70f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fd6b70f720,0x55fd6d5992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c64e9dd40818c2f23356641f064c9f9548a44535' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 925 processed earlier; will process 10051 files now Step #5: ==29878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd620692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fd686a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fd6868746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fd6868738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd6206f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd61fd042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd61fcac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd62061595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fd650908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fd650908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fd650908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fd650908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fd650908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fd650908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fd650908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fd650908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fd650908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fd650908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fd6729545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fd63ff1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fd63ffc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fd63da7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fd63da7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fd63da8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fd63da7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fd63da7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fd63da7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fd6868994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fd686927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fd6867a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fd686a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f880ef28082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd61fc943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0xd7,0xa9,0x1,0x37,0x6, Step #5: \001\327\251\0017\006 Step #5: artifact_prefix='./'; Test unit written to ./oom-cb24c9c1d7c36a385d5863493d50fc7c22f87ab0 Step #5: Base64: AdepATcG Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 830 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4037706132 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587e84e8d60, 0x5587e86d171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5587e86d1720,0x5587ea55b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cb24c9c1d7c36a385d5863493d50fc7c22f87ab0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 926 processed earlier; will process 10050 files now Step #5: ==29914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5587df02b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5587e5666728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5587e564946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5587e564938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5587df031652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5587def9242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5587def8cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5587df023595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5587e20528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5587e20528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5587e20528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5587e20528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5587e20528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5587e20528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5587e20528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5587e20528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5587e20528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5587e20528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5587e425745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5587e0fb3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587e0fbe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5587e0d69d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5587e0d69d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5587e0d6a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5587e0d69944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5587e0d69944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5587e0d69944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5587e564b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5587e56547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5587e563c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5587e5666fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe43d8d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5587def8b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x59,0x0,0xe,0x27,0x24, Step #5: $Y\000\016'$ Step #5: artifact_prefix='./'; Test unit written to ./oom-01906c42ca07039b577fc9a8d18684696d4af6f5 Step #5: Base64: JFkADick Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 831 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4038162556 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5622496c2d60, 0x5622498ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5622498ab720,0x56224b7352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/01906c42ca07039b577fc9a8d18684696d4af6f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 927 processed earlier; will process 10049 files now Step #5: ==29950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5622402052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562246840728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56224682346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56224682338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56224020b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56224016c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562240166c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5622401fd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56224322c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56224322c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56224322c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56224322c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56224322c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56224322c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56224322c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56224322c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56224322c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56224322c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56224543145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56224218d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5622421985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562241f43d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562241f43d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562241f44808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562241f43944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562241f43944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562241f43944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56224682594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56224682e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562246816529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562246840fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff9f31ab082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56224016543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x43,0x46,0x32,0x4, Step #5: $$CF2\004 Step #5: artifact_prefix='./'; Test unit written to ./oom-5df77455526612d30bd1687b8931e8a4aae8621f Step #5: Base64: JCRDRjIE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 832 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4038611041 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c5eeccbd60, 0x55c5eeeb471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c5eeeb4720,0x55c5f0d3e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5df77455526612d30bd1687b8931e8a4aae8621f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 928 processed earlier; will process 10048 files now Step #5: #1 pulse cov: 3662 ft: 3663 exec/s: 0 rss: 159Mb Step #5: #2 pulse cov: 3834 ft: 3991 exec/s: 0 rss: 160Mb Step #5: ==29986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5e580e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c5ebe49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c5ebe2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c5ebe2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c5e5814652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c5e577542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c5e576fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c5e5806595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c5e88358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c5e88358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c5e88358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c5e88358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c5e88358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c5e88358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c5e88358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c5e88358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c5e88358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c5e88358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c5eaa3a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c5e7796578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c5e77a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c5e754cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c5e754cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c5e754d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c5e754c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c5e754c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c5e754c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c5ebe2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c5ebe377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c5ebe1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c5ebe49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa32c09b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c5e576e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x27,0x21,0x31,0x24,0x36, Step #5: $'!1$6 Step #5: artifact_prefix='./'; Test unit written to ./oom-477e110f0ab17cc5149520ebb3c78c7481cd9d11 Step #5: Base64: JCchMSQ2 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 833 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4039139395 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5611f61c5d60, 0x5611f63ae71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5611f63ae720,0x5611f82382c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/477e110f0ab17cc5149520ebb3c78c7481cd9d11' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 931 processed earlier; will process 10045 files now Step #5: ==30022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5611ecd082d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5611f3343728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5611f332646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5611f332638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5611ecd0e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5611ecc6f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5611ecc69c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5611ecd00595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5611efd2f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5611efd2f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5611efd2f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5611efd2f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5611efd2f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5611efd2f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5611efd2f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5611efd2f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5611efd2f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5611efd2f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5611f1f3445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5611eec90578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5611eec9b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5611eea46d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5611eea46d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5611eea47808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5611eea46944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5611eea46944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5611eea46944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5611f332894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5611f33317b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5611f3319529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5611f3343fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ee0168082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5611ecc6843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x9,0x0,0x0,0x0,0x0, Step #5: \001\011\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-d851b35d4cdd71c591c7d3bc0ee82afafd5eef8d Step #5: Base64: AQkAAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 834 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4039597973 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559c21234d60, 0x559c2141d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559c2141d720,0x559c232a72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d851b35d4cdd71c591c7d3bc0ee82afafd5eef8d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 932 processed earlier; will process 10044 files now Step #5: ==30058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559c17d772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559c1e3b2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559c1e39546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559c1e39538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559c17d7d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559c17cde42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559c17cd8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559c17d6f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559c1ad9e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559c1ad9e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559c1ad9e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559c1ad9e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559c1ad9e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559c1ad9e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559c1ad9e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559c1ad9e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559c1ad9e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559c1ad9e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559c1cfa345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559c19cff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559c19d0a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559c19ab5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559c19ab5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559c19ab6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559c19ab5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559c19ab5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559c19ab5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559c1e39794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559c1e3a07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559c1e388529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559c1e3b2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb922e54082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559c17cd743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x83,0xbd,0xe1,0x83,0xbd, Step #5: \341\203\275\341\203\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-b541e5deaafd1b68bf33691073bebba97274ead9 Step #5: Base64: 4YO94YO9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 835 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4040045687 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d4c7ca7d60, 0x55d4c7e9071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d4c7e90720,0x55d4c9d1a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b541e5deaafd1b68bf33691073bebba97274ead9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 933 processed earlier; will process 10043 files now Step #5: ==30094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4be7ea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d4c4e25728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d4c4e0846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d4c4e0838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4be7f0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d4be75142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d4be74bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4be7e2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4c18118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4c18118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4c18118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4c18118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4c18118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4c18118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4c18118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4c18118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4c18118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4c18118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d4c3a1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d4c0772578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4c077d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d4c0528d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d4c0528d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d4c0529808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d4c0528944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d4c0528944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d4c0528944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d4c4e0a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d4c4e137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d4c4dfb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d4c4e25fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6c82d5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d4be74a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f,0x68,0x24,0x0,0x8,0x24, Step #5: \177h$\000\010$ Step #5: artifact_prefix='./'; Test unit written to ./oom-ac9d1e5c94596574f3643de6e43b53afcbbc3b47 Step #5: Base64: f2gkAAgk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 836 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4040503927 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e4fd12d60, 0x559e4fefb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e4fefb720,0x559e51d852c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ac9d1e5c94596574f3643de6e43b53afcbbc3b47' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 934 processed earlier; will process 10042 files now Step #5: #1 pulse cov: 3662 ft: 3663 exec/s: 0 rss: 159Mb Step #5: ==30130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e468552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e4ce90728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e4ce7346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e4ce7338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e4685b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e467bc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e467b6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e4684d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e4987c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e4987c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e4987c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e4987c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e4987c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e4987c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e4987c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e4987c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e4987c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e4987c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e4ba8145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e487dd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e487e85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e48593d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e48593d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e48594808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e48593944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e48593944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e48593944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e4ce7594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e4ce7e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e4ce66529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e4ce90fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc0922dc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e467b543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x29,0x7e,0x30,0xd8,0xad, Step #5: 0)~0\330\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-699a9280d3e49d3f9a5bd24fa4238db00571aa92 Step #5: Base64: MCl+MNit Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 837 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4041002109 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec69cd3d60, 0x55ec69ebc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec69ebc720,0x55ec6bd462c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/699a9280d3e49d3f9a5bd24fa4238db00571aa92' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 936 processed earlier; will process 10040 files now Step #5: ==30166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec608162d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec66e51728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec66e3446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec66e3438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec6081c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec6077d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec60777c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec6080e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec6383d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec6383d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec6383d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec6383d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec6383d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec6383d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec6383d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec6383d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec6383d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec6383d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec65a4245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec6279e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec627a95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec62554d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec62554d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec62555808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec62554944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec62554944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec62554944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec66e3694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec66e3f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec66e27529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec66e51fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f487c72d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec6077643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x90,0xa0,0xb5,0xd,0xd,0xd, Step #5: \360\220\240\265\015\015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-f575adadd4a7910e12555912c6209ba3c02a77d2 Step #5: Base64: 8JCgtQ0NDQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 838 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4041454040 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564f2fd8dd60, 0x564f2ff7671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564f2ff76720,0x564f31e002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f575adadd4a7910e12555912c6209ba3c02a77d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 937 processed earlier; will process 10039 files now Step #5: ==30202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564f268d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564f2cf0b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564f2ceee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564f2ceee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564f268d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564f2683742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564f26831c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564f268c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564f298f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564f298f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564f298f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564f298f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564f298f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564f298f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564f298f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564f298f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564f298f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564f298f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564f2bafc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564f28858578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564f288635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564f2860ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564f2860ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564f2860f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564f2860e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564f2860e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564f2860e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564f2cef094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564f2cef97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564f2cee1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564f2cf0bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8bfc731082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564f2683043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-93233da6c2a34e4792b6ceadfca5b7ab0dd90bf1 Step #5: Base64: LSAtIC0gLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 839 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4041917066 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557bdb128d60, 0x557bdb31171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557bdb311720,0x557bdd19b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93233da6c2a34e4792b6ceadfca5b7ab0dd90bf1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 938 processed earlier; will process 10038 files now Step #5: ==30238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557bd1c6b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557bd82a6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557bd828946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557bd828938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557bd1c71652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557bd1bd242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557bd1bccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557bd1c63595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557bd4c928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557bd4c928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557bd4c928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557bd4c928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557bd4c928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557bd4c928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557bd4c928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557bd4c928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557bd4c928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557bd4c928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557bd6e9745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557bd3bf3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557bd3bfe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557bd39a9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557bd39a9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557bd39aa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557bd39a9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557bd39a9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557bd39a9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557bd828b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557bd82947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557bd827c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557bd82a6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f803e257082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557bd1bcb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0,0x24,0x24, Step #5: \000\000\000\000\000$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-3ffbb585d275aaab4a8db85a0b56d45c522d6283 Step #5: Base64: AAAAAAAkJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 840 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4042389033 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585d8e9ad60, 0x5585d908371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585d9083720,0x5585daf0d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3ffbb585d275aaab4a8db85a0b56d45c522d6283' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 939 processed earlier; will process 10037 files now Step #5: ==30274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585cf9dd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585d6018728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585d5ffb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585d5ffb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585cf9e3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585cf94442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585cf93ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585cf9d5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585d2a048c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585d2a048c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585d2a048c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585d2a048c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585d2a048c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585d2a048c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585d2a048c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585d2a048c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585d2a048c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585d2a048c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585d4c0945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585d1965578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585d19705a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5585d171bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5585d171bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5585d171c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5585d171b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5585d171b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5585d171b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585d5ffd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585d60067b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585d5fee529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585d6018fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdf83d2f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585cf93d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0xa,0x2d,0xde,0xb3,0x5d, Step #5: [^\012-\336\263] Step #5: artifact_prefix='./'; Test unit written to ./oom-5cb17249e5fe645a4a309034005464317b6dafc2 Step #5: Base64: W14KLd6zXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 841 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4042849926 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0cc0e7d60, 0x55c0cc2d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c0cc2d0720,0x55c0ce15a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5cb17249e5fe645a4a309034005464317b6dafc2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 940 processed earlier; will process 10036 files now Step #5: #1 pulse cov: 3486 ft: 3487 exec/s: 0 rss: 161Mb Step #5: ==30310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0c2c2a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c0c9265728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c0c924846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c0c924838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c0c2c30652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c0c2b9142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c0c2b8bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c0c2c22595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c0c5c518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c0c5c518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c0c5c518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c0c5c518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c0c5c518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c0c5c518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c0c5c518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c0c5c518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c0c5c518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c0c5c518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c0c7e5645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c0c4bb2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c0c4bbd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c0c4968d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c0c4968d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c0c4969808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c0c4968944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c0c4968944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c0c4968944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c0c924a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0c92537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0c923b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c0c9265fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8da6d6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c0c2b8a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0xf0,0x96,0xa7,0xad, Step #5: \"\\u\360\226\247\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-fd392af99803dd6f8d53b5c4cb0edd8d5a3dbce2 Step #5: Base64: Ilx18JanrQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 842 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4043345552 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560c27c99d60, 0x560c27e8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560c27e82720,0x560c29d0c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fd392af99803dd6f8d53b5c4cb0edd8d5a3dbce2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 942 processed earlier; will process 10034 files now Step #5: ==30346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c1e7dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560c24e17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560c24dfa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560c24dfa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c1e7e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c1e74342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c1e73dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c1e7d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560c218038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560c218038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560c218038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560c218038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560c218038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560c218038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560c218038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560c218038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560c218038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560c218038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560c23a0845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560c20764578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560c2076f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560c2051ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560c2051ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560c2051b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560c2051a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560c2051a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560c2051a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560c24dfc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560c24e057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560c24ded529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560c24e17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0de2642082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c1e73c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x43,0x30,0xef,0xbe,0x95,0x33, Step #5: CC0\357\276\2253 Step #5: artifact_prefix='./'; Test unit written to ./oom-84368d98e5f299aa08db0445317a94b43cd1d44c Step #5: Base64: Q0Mw776VMw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 843 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4043800137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564fcd85ed60, 0x564fcda4771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564fcda47720,0x564fcf8d12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/84368d98e5f299aa08db0445317a94b43cd1d44c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 943 processed earlier; will process 10033 files now Step #5: ==30382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564fc43a12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564fca9dc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564fca9bf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564fca9bf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564fc43a7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564fc430842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564fc4302c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564fc4399595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564fc73c88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564fc73c88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564fc73c88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564fc73c88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564fc73c88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564fc73c88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564fc73c88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564fc73c88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564fc73c88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564fc73c88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564fc95cd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564fc6329578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564fc63345a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564fc60dfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564fc60dfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564fc60e0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564fc60df944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564fc60df944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564fc60df944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564fca9c194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564fca9ca7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564fca9b2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564fca9dcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc0555c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564fc430143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x10,0x5a,0x10,0x5a,0x10,0x29, Step #5: \000\020Z\020Z\020) Step #5: artifact_prefix='./'; Test unit written to ./oom-059f6db6a66963c73b2e1a7344cdeb7df16b3ead Step #5: Base64: ABBaEFoQKQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 844 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4044258047 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563003ba6d60, 0x563003d8f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563003d8f720,0x563005c192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/059f6db6a66963c73b2e1a7344cdeb7df16b3ead' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 944 processed earlier; will process 10032 files now Step #5: ==30418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ffa6e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563000d24728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563000d0746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563000d0738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ffa6ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ffa65042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ffa64ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ffa6e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562ffd7108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562ffd7108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562ffd7108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562ffd7108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562ffd7108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562ffd7108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562ffd7108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562ffd7108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562ffd7108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562ffd7108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562fff91545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ffc671578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ffc67c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ffc427d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ffc427d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ffc428808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ffc427944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ffc427944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ffc427944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563000d0994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563000d127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563000cfa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563000d24fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f45e7ba4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ffa64943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf,0x3c,0x4b,0x3e,0x26, Step #5: \357\273\277& Step #5: artifact_prefix='./'; Test unit written to ./oom-03d533a39443f344efa6cb8e621cef49eb5199b0 Step #5: Base64: 77u/PEs+Jg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 845 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4044714044 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55de8e526d60, 0x55de8e70f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55de8e70f720,0x55de905992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/03d533a39443f344efa6cb8e621cef49eb5199b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 945 processed earlier; will process 10031 files now Step #5: ==30454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55de850692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55de8b6a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55de8b68746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55de8b68738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55de8506f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55de84fd042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55de84fcac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55de85061595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55de880908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55de880908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55de880908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55de880908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55de880908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55de880908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55de880908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55de880908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55de880908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55de880908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55de8a29545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55de86ff1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55de86ffc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55de86da7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55de86da7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55de86da8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55de86da7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55de86da7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55de86da7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55de8b68994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55de8b6927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55de8b67a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55de8b6a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f68a581b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55de84fc943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xba,0xbd,0x7c,0xef,0xbf,0xa5, Step #5: \357\272\275|\357\277\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-f2118727055f7cf3c22b20761932c67283c85b31 Step #5: Base64: 77q9fO+/pQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 846 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4045165073 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557baf66ad60, 0x557baf85371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557baf853720,0x557bb16dd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f2118727055f7cf3c22b20761932c67283c85b31' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 946 processed earlier; will process 10030 files now Step #5: ==30490== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557ba61ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557bac7e8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557bac7cb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557bac7cb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557ba61b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557ba611442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557ba610ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557ba61a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557ba91d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557ba91d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557ba91d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557ba91d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557ba91d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557ba91d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557ba91d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557ba91d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557ba91d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557ba91d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557bab3d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557ba8135578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557ba81405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557ba7eebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557ba7eebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557ba7eec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557ba7eeb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557ba7eeb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557ba7eeb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557bac7cd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557bac7d67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557bac7be529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557bac7e8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f17043e1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557ba610d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x66,0x66,0x6c,0x6f,0x78,0x70, Step #5: sffloxp Step #5: artifact_prefix='./'; Test unit written to ./oom-70a48f394174a1ac52e57b43e4ad4ea10f6d5e9a Step #5: Base64: c2ZmbG94cA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 847 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4045610690 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55968dea6d60, 0x55968e08f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55968e08f720,0x55968ff192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70a48f394174a1ac52e57b43e4ad4ea10f6d5e9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 947 processed earlier; will process 10029 files now Step #5: ==30526== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5596849e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55968b024728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55968b00746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55968b00738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5596849ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55968495042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55968494ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5596849e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559687a108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559687a108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559687a108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559687a108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559687a108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559687a108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559687a108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559687a108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559687a108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559687a108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559689c1545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559686971578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55968697c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559686727d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559686727d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559686728808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559686727944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559686727944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559686727944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55968b00994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55968b0127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55968affa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55968b024fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f32ea32c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55968494943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x61,0xc2,0xb7,0xc2,0xb7, Step #5: Step #5: Step #5: #0 0x56360a1432d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56361077e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56361076146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56361076138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56360a149652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56360a0aa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56360a0a4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56360a13b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56360d16a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56360d16a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56360d16a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56360d16a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56360d16a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56360d16a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56360d16a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56360d16a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56360d16a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56360d16a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56360f36f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56360c0cb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56360c0d65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56360be81d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56360be81d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56360be82808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56360be81944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56360be81944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56360be81944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56361076394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56361076c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563610754529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56361077efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f34b883b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56360a0a343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0xef,0xbe,0xa0,0x3e, Step #5: (?<\357\276\240> Step #5: artifact_prefix='./'; Test unit written to ./oom-4683056f448fa766f577f90425f79fb84b0b0cda Step #5: Base64: KD88776gPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 849 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4046553597 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c8f5da7d60, 0x55c8f5f9071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c8f5f90720,0x55c8f7e1a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4683056f448fa766f577f90425f79fb84b0b0cda' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 950 processed earlier; will process 10026 files now Step #5: ==30598== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c8ec8ea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c8f2f25728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c8f2f0846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c8f2f0838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c8ec8f0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c8ec85142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c8ec84bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c8ec8e2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c8ef9118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c8ef9118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c8ef9118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c8ef9118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c8ef9118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c8ef9118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c8ef9118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c8ef9118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c8ef9118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c8ef9118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c8f1b1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c8ee872578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c8ee87d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c8ee628d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c8ee628d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c8ee629808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c8ee628944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c8ee628944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c8ee628944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c8f2f0a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c8f2f137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c8f2efb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c8f2f25fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa3c1a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c8ec84a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xc9,0x9c,0xe2,0xa1,0x8a,0x5d, Step #5: [\311\234\342\241\212] Step #5: artifact_prefix='./'; Test unit written to ./oom-fb8d313f973ed072be9c5f4107eb38118b661799 Step #5: Base64: W8mc4qGKXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 850 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4047004212 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55641984ad60, 0x556419a3371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556419a33720,0x55641b8bd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb8d313f973ed072be9c5f4107eb38118b661799' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 951 processed earlier; will process 10025 files now Step #5: #1 pulse cov: 3629 ft: 3630 exec/s: 0 rss: 162Mb Step #5: ==30634== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55641038d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564169c8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564169ab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564169ab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556410393652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564102f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564102eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556410385595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564133b48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564133b48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564133b48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564133b48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564133b48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564133b48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564133b48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564133b48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564133b48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564133b48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564155b945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556412315578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564123205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564120cbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564120cbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564120cc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564120cb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564120cb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564120cb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564169ad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564169b67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55641699e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564169c8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f46ff233082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564102ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0xa,0x2d,0x2d,0x2d, Step #5: ---\012--- Step #5: artifact_prefix='./'; Test unit written to ./oom-2abb1b9f1ba9375e7ecfce11de5fd95dcf59b291 Step #5: Base64: LS0tCi0tLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 851 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4047493593 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5635ef82bd60, 0x5635efa1471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5635efa14720,0x5635f189e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2abb1b9f1ba9375e7ecfce11de5fd95dcf59b291' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 953 processed earlier; will process 10023 files now Step #5: ==30670== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5635e636e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5635ec9a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5635ec98c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5635ec98c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5635e6374652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5635e62d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5635e62cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5635e6366595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5635e93958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5635e93958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5635e93958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5635e93958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5635e93958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5635e93958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5635e93958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5635e93958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5635e93958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5635e93958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5635eb59a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5635e82f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5635e83015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5635e80acd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5635e80acd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5635e80ad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5635e80ac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5635e80ac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5635e80ac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5635ec98e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5635ec9977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5635ec97f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5635ec9a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fafbdf30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5635e62ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x2d,0x2c,0x2d,0x41,0x2d,0x2d, Step #5: A-,-A-- Step #5: artifact_prefix='./'; Test unit written to ./oom-dc104c94f8ef5d9d15abcc9f09216ea1e2730808 Step #5: Base64: QS0sLUEtLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 852 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4047942523 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e260e86d60, 0x55e26106f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e26106f720,0x55e262ef92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dc104c94f8ef5d9d15abcc9f09216ea1e2730808' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 954 processed earlier; will process 10022 files now Step #5: ==30706== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e2579c92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e25e004728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e25dfe746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e25dfe738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e2579cf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e25793042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e25792ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e2579c1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e25a9f08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e25a9f08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e25a9f08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e25a9f08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e25a9f08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e25a9f08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e25a9f08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e25a9f08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e25a9f08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e25a9f08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e25cbf545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e259951578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e25995c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e259707d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e259707d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e259708808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e259707944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e259707944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e259707944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e25dfe994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e25dff27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e25dfda529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e25e004fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6e536b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e25792943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x3,0xe1,0xac,0x80, Step #5: \000\000\000\003\341\254\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-612471f47a07437e85bd0f5fad29eadca7abc90c Step #5: Base64: AAAAA+GsgA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 853 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4048391749 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560901d5d60, 0x5560903be71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560903be720,0x5560922482c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/612471f47a07437e85bd0f5fad29eadca7abc90c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 955 processed earlier; will process 10021 files now Step #5: ==30742== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556086d182d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55608d353728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55608d33646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55608d33638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556086d1e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556086c7f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556086c79c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556086d10595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556089d3f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556089d3f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556089d3f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556089d3f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556089d3f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556089d3f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556089d3f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556089d3f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556089d3f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556089d3f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55608bf4445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556088ca0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556088cab5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556088a56d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556088a56d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556088a57808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556088a56944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556088a56944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556088a56944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55608d33894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55608d3417b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55608d329529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55608d353fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa8fa138082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556086c7843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x3a,0x33,0xd,0x35,0x2c,0x4c, Step #5: 0:3\0155,L Step #5: artifact_prefix='./'; Test unit written to ./oom-bf8b8a4c6d6ce48b629b05917b414ac283a3f080 Step #5: Base64: MDozDTUsTA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 854 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4048854032 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dd317dcd60, 0x55dd319c571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dd319c5720,0x55dd3384f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bf8b8a4c6d6ce48b629b05917b414ac283a3f080' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 956 processed earlier; will process 10020 files now Step #5: ==30778== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dd2831f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dd2e95a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dd2e93d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dd2e93d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dd28325652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dd2828642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dd28280c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dd28317595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dd2b3468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dd2b3468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dd2b3468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dd2b3468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dd2b3468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dd2b3468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dd2b3468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dd2b3468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dd2b3468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dd2b3468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dd2d54b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dd2a2a7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dd2a2b25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dd2a05dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dd2a05dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dd2a05e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dd2a05d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dd2a05d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dd2a05d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dd2e93f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dd2e9487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dd2e930529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dd2e95afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f899fcbd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dd2827f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x55,0x3a,0x3a,0x69,0x6f,0x6e,0x3a, Step #5: U::ion: Step #5: artifact_prefix='./'; Test unit written to ./oom-62b9b1f1dee41108d1ce13f859c61a925ac827e9 Step #5: Base64: VTo6aW9uOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 855 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4049312604 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d5f1729d60, 0x55d5f191271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d5f1912720,0x55d5f379c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/62b9b1f1dee41108d1ce13f859c61a925ac827e9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 957 processed earlier; will process 10019 files now Step #5: #1 pulse cov: 3681 ft: 3682 exec/s: 0 rss: 161Mb Step #5: ==30814== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d5e826c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d5ee8a7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d5ee88a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d5ee88a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d5e8272652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d5e81d342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d5e81cdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d5e8264595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d5eb2938c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d5eb2938c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d5eb2938c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d5eb2938c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d5eb2938c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d5eb2938c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d5eb2938c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d5eb2938c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d5eb2938c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d5eb2938c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d5ed49845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d5ea1f4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d5ea1ff5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d5e9faad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d5e9faad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d5e9fab808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d5e9faa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d5e9faa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d5e9faa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d5ee88c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d5ee8957b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d5ee87d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d5ee8a7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a77e24082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d5e81cc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xee,0xbb,0xb3,0x7c,0xee,0xbb,0xb2, Step #5: \356\273\263|\356\273\262 Step #5: artifact_prefix='./'; Test unit written to ./oom-991550f17c73ffa39f1026bc42e1ef7dff86510c Step #5: Base64: 7ruzfO67sg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 856 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4049805944 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564bcd68bd60, 0x564bcd87471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564bcd874720,0x564bcf6fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/991550f17c73ffa39f1026bc42e1ef7dff86510c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 959 processed earlier; will process 10017 files now Step #5: ==30850== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564bc41ce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564bca809728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564bca7ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564bca7ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564bc41d4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564bc413542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564bc412fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564bc41c6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564bc71f58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564bc71f58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564bc71f58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564bc71f58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564bc71f58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564bc71f58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564bc71f58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564bc71f58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564bc71f58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564bc71f58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564bc93fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564bc6156578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564bc61615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564bc5f0cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564bc5f0cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564bc5f0d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564bc5f0c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564bc5f0c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564bc5f0c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564bca7ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564bca7f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564bca7df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564bca809fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f79bfb7c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564bc412e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45,0x27,0x5c,0xe0,0xbe,0x86,0x27, Step #5: E'\\\340\276\206' Step #5: artifact_prefix='./'; Test unit written to ./oom-ee96bd80ad7e6ade8b691e3c6975d2aa2c03e0fc Step #5: Base64: RSdc4L6GJw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 857 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4050253094 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d5fc2c9d60, 0x55d5fc4b271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d5fc4b2720,0x55d5fe33c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee96bd80ad7e6ade8b691e3c6975d2aa2c03e0fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 960 processed earlier; will process 10016 files now Step #5: ==30886== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d5f2e0c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d5f9447728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d5f942a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d5f942a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d5f2e12652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d5f2d7342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d5f2d6dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d5f2e04595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d5f5e338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d5f5e338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d5f5e338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d5f5e338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d5f5e338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d5f5e338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d5f5e338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d5f5e338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d5f5e338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d5f5e338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d5f803845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d5f4d94578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d5f4d9f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d5f4b4ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d5f4b4ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d5f4b4b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d5f4b4a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d5f4b4a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d5f4b4a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d5f942c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d5f94357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d5f941d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d5f9447fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28aa95f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d5f2d6c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x38,0x31,0x39,0x30,0x2c,0x30, Step #5: -8190,0 Step #5: artifact_prefix='./'; Test unit written to ./oom-49afd0ce4231cb994d6af1aff1f849146b3d3179 Step #5: Base64: LTgxOTAsMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 858 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4050701488 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ebfa2f6d60, 0x55ebfa4df71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ebfa4df720,0x55ebfc3692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/49afd0ce4231cb994d6af1aff1f849146b3d3179' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 961 processed earlier; will process 10015 files now Step #5: ==30922== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ebf0e392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ebf7474728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ebf745746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ebf745738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ebf0e3f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ebf0da042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ebf0d9ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ebf0e31595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ebf3e608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ebf3e608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ebf3e608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ebf3e608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ebf3e608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ebf3e608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ebf3e608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ebf3e608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ebf3e608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ebf3e608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ebf606545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ebf2dc1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ebf2dcc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ebf2b77d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ebf2b77d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ebf2b78808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ebf2b77944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ebf2b77944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ebf2b77944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ebf745994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ebf74627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ebf744a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ebf7474fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e1ee59082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ebf0d9943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x52,0x2d,0x2d,0x2d,0x30,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-f3a9dc244a526c89a50e92ea0396221ef3ad13e6 Step #5: Base64: PFItLS0wPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 859 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4051141470 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5567e81ecd60, 0x5567e83d571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5567e83d5720,0x5567ea25f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f3a9dc244a526c89a50e92ea0396221ef3ad13e6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 962 processed earlier; will process 10014 files now Step #5: ==30958== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5567ded2f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5567e536a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5567e534d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5567e534d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5567ded35652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5567dec9642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5567dec90c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5567ded27595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567e1d568c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567e1d568c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567e1d568c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567e1d568c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567e1d568c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567e1d568c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567e1d568c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567e1d568c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567e1d568c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567e1d568c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5567e3f5b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5567e0cb7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5567e0cc25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5567e0a6dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5567e0a6dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5567e0a6e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5567e0a6d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5567e0a6d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5567e0a6d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5567e534f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5567e53587b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5567e5340529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5567e536afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1b863f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5567dec8f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x53,0x3a,0xcd,0x8f,0xcd,0x8f, Step #5: wS:\315\217\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-032ed9e2dde4864f66a92a8e65fc7afb7840067e Step #5: Base64: d1M6zY/Njw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 860 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4051594892 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b561491d60, 0x55b56167a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b56167a720,0x55b5635042c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/032ed9e2dde4864f66a92a8e65fc7afb7840067e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 963 processed earlier; will process 10013 files now Step #5: ==30994== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b557fd42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b55e60f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b55e5f246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b55e5f238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b557fda652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b557f3b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b557f35c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b557fcc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b55affb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b55affb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b55affb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b55affb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b55affb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b55affb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b55affb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b55affb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b55affb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b55affb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b55d20045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b559f5c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b559f675a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b559d12d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b559d12d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b559d13808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b559d12944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b559d12944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b559d12944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b55e5f494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b55e5fd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b55e5e5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b55e60ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fec1edbd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b557f3443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xac,0x51,0x37,0xd6,0xac,0x51, Step #5: \326\254Q7\326\254Q Step #5: artifact_prefix='./'; Test unit written to ./oom-276e7efab12337f0bfaaadfa4e1bba7412ab44aa Step #5: Base64: 1qxRN9asUQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 861 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4052044468 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e60a75ad60, 0x55e60a94371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e60a943720,0x55e60c7cd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/276e7efab12337f0bfaaadfa4e1bba7412ab44aa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 964 processed earlier; will process 10012 files now Step #5: ==31030== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e60129d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e6078d8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e6078bb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e6078bb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e6012a3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e60120442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e6011fec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e601295595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e6042c48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e6042c48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e6042c48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e6042c48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e6042c48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e6042c48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e6042c48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e6042c48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e6042c48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e6042c48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e6064c945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e603225578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e6032305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e602fdbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e602fdbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e602fdc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e602fdb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e602fdb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e602fdb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e6078bd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e6078c67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e6078ae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e6078d8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25960c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e6011fd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x42,0xe1,0x80,0xb7, Step #5: ws:B\341\200\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-d0b8251859911283dfa84bd9da3e4428740e9098 Step #5: Base64: d3M6QuGAtw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 862 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4052512131 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a255b2d60, 0x558a2579b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a2579b720,0x558a276252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d0b8251859911283dfa84bd9da3e4428740e9098' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 965 processed earlier; will process 10011 files now Step #5: ==31066== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a1c0f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a22730728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a2271346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a2271338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a1c0fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a1c05c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a1c056c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a1c0ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a1f11c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a1f11c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a1f11c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a1f11c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a1f11c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a1f11c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a1f11c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a1f11c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a1f11c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a1f11c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a2132145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a1e07d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a1e0885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a1de33d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a1de33d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a1de34808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a1de33944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a1de33944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a1de33944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a2271594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a2271e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a22706529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a22730fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd77255082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a1c05543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x26,0x24,0x12,0x60,0x67,0x60, Step #5: $&$\022`g` Step #5: artifact_prefix='./'; Test unit written to ./oom-405e43b32f322cadfb48c0e9284c19ce0b8337eb Step #5: Base64: JCYkEmBnYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 863 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4053090049 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5616d0226d60, 0x5616d040f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5616d040f720,0x5616d22992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/405e43b32f322cadfb48c0e9284c19ce0b8337eb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 966 processed earlier; will process 10010 files now Step #5: ==31102== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616c6d692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5616cd3a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5616cd38746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5616cd38738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616c6d6f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616c6cd042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616c6ccac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616c6d61595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616c9d908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616c9d908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616c9d908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616c9d908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616c9d908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616c9d908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616c9d908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616c9d908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616c9d908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616c9d908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5616cbf9545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616c8cf1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616c8cfc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616c8aa7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616c8aa7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616c8aa8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616c8aa7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616c8aa7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616c8aa7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5616cd38994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5616cd3927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5616cd37a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5616cd3a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f242cc03082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616c6cc943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x22,0x24,0x68,0x6e,0x22,0x6d, Step #5: #\"$hn\"m Step #5: artifact_prefix='./'; Test unit written to ./oom-066f4ccad4d2926d649b341162f0cdcb9e4b9dce Step #5: Base64: IyIkaG4ibQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 864 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4053532791 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556574510d60, 0x5565746f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5565746f9720,0x5565765832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/066f4ccad4d2926d649b341162f0cdcb9e4b9dce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 967 processed earlier; will process 10009 files now Step #5: ==31138== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55656b0532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55657168e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55657167146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55657167138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55656b059652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55656afba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55656afb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55656b04b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55656e07a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55656e07a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55656e07a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55656e07a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55656e07a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55656e07a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55656e07a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55656e07a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55656e07a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55656e07a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55657027f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55656cfdb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55656cfe65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55656cd91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55656cd91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55656cd92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55656cd91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55656cd91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55656cd91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55657167394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55657167c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556571664529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55657168efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f81dcaeb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55656afb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x2e,0x2d,0x2e,0x2e,0xa,0x2b, Step #5: ..-..\012+ Step #5: artifact_prefix='./'; Test unit written to ./oom-1b0ff3c3ecaeace0c9a1d31b30863198567c0eca Step #5: Base64: Li4tLi4KKw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 865 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4053984427 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fcdf149d60, 0x55fcdf33271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fcdf332720,0x55fce11bc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1b0ff3c3ecaeace0c9a1d31b30863198567c0eca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 968 processed earlier; will process 10008 files now Step #5: ==31174== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fcd5c8c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fcdc2c7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fcdc2aa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fcdc2aa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fcd5c92652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fcd5bf342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fcd5bedc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fcd5c84595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fcd8cb38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fcd8cb38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fcd8cb38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fcd8cb38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fcd8cb38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fcd8cb38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fcd8cb38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fcd8cb38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fcd8cb38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fcd8cb38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fcdaeb845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fcd7c14578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fcd7c1f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fcd79cad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fcd79cad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fcd79cb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fcd79ca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fcd79ca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fcd79ca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fcdc2ac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fcdc2b57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fcdc29d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fcdc2c7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e7678c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fcd5bec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x27,0x5c,0xef,0xbb,0x8a,0x27, Step #5: e'\\\357\273\212' Step #5: artifact_prefix='./'; Test unit written to ./oom-80bea5b5372a79e5492623db195e0bc2a8851399 Step #5: Base64: ZSdc77uKJw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 866 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4054449689 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564330620d60, 0x56433080971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564330809720,0x5643326932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80bea5b5372a79e5492623db195e0bc2a8851399' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 969 processed earlier; will process 10007 files now Step #5: ==31210== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5643271632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56432d79e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56432d78146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56432d78138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564327169652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5643270ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5643270c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56432715b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56432a18a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56432a18a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56432a18a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56432a18a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56432a18a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56432a18a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56432a18a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56432a18a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56432a18a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56432a18a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56432c38f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5643290eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5643290f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564328ea1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564328ea1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564328ea2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564328ea1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564328ea1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564328ea1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56432d78394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56432d78c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56432d774529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56432d79efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9be1ea5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5643270c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34,0x34,0x34,0x3a,0x31,0x3a,0x2d, Step #5: 444:1:- Step #5: artifact_prefix='./'; Test unit written to ./oom-c7287251eebf704873b242fe865581f97d72e972 Step #5: Base64: NDQ0OjE6LQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 867 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4054903401 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55977144bd60, 0x55977163471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559771634720,0x5597734be2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c7287251eebf704873b242fe865581f97d72e972' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 970 processed earlier; will process 10006 files now Step #5: ==31246== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559767f8e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55976e5c9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55976e5ac46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55976e5ac38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559767f94652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559767ef542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559767eefc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559767f86595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55976afb58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55976afb58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55976afb58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55976afb58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55976afb58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55976afb58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55976afb58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55976afb58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55976afb58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55976afb58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55976d1ba45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559769f16578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559769f215a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559769cccd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559769cccd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559769ccd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559769ccc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559769ccc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559769ccc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55976e5ae94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55976e5b77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55976e59f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55976e5c9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0a072af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559767eee43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x21,0xdc,0xbd,0x21,0xdc,0xbd, Step #5: 0!\334\275!\334\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-09cbfad4f8f322fe181efe479594f011265792c3 Step #5: Base64: MCHcvSHcvQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 868 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4055353439 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558287012d60, 0x5582871fb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5582871fb720,0x5582890852c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/09cbfad4f8f322fe181efe479594f011265792c3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 971 processed earlier; will process 10005 files now Step #5: ==31282== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55827db552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558284190728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55828417346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55828417338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55827db5b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55827dabc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55827dab6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55827db4d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558280b7c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558280b7c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558280b7c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558280b7c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558280b7c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558280b7c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558280b7c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558280b7c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558280b7c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558280b7c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558282d8145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55827fadd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55827fae85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55827f893d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55827f893d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55827f894808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55827f893944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55827f893944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55827f893944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55828417594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55828417e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558284166529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558284190fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd21b8be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55827dab543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x1f,0x5f,0x5f,0x1,0x6,0x7, Step #5: \003\037__\001\006\007 Step #5: artifact_prefix='./'; Test unit written to ./oom-d4a54dfcfe18ecdf3a4ac7b47d3fd23b98b090e7 Step #5: Base64: Ax9fXwEGBw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 869 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4055813924 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e19bd8fd60, 0x55e19bf7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e19bf78720,0x55e19de022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d4a54dfcfe18ecdf3a4ac7b47d3fd23b98b090e7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 972 processed earlier; will process 10004 files now Step #5: ==31318== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1928d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e198f0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e198ef046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e198ef038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1928d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e19283942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e192833c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1928ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1958f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1958f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1958f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1958f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1958f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1958f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1958f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1958f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1958f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1958f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e197afe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e19485a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1948655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e194610d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e194610d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e194611808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e194610944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e194610944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e194610944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e198ef294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e198efb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e198ee3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e198f0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f42ee908082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e19283243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xf0,0x96,0xb9,0x9f, Step #5: ws:\360\226\271\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-472eaada1f8ca2bc0d15bd49339c3c950e707e33 Step #5: Base64: d3M68Ja5nw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 870 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4056263026 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b07c87ad60, 0x55b07ca6371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b07ca63720,0x55b07e8ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/472eaada1f8ca2bc0d15bd49339c3c950e707e33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 973 processed earlier; will process 10003 files now Step #5: #1 pulse cov: 3457 ft: 3458 exec/s: 0 rss: 161Mb Step #5: ==31354== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b0733bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b0799f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b0799db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b0799db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b0733c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b07332442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b07331ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b0733b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b0763e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b0763e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b0763e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b0763e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b0763e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b0763e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b0763e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b0763e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b0763e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b0763e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b0785e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b075345578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b0753505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b0750fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b0750fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b0750fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b0750fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b0750fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b0750fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b0799dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b0799e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b0799ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b0799f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8cf9140082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b07331d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x24,0x24,0x24,0x5b,0x74,0x24, Step #5: \003$$$[t$ Step #5: artifact_prefix='./'; Test unit written to ./oom-6b423924c65ec84df3ad23d4c2c3b135b424ee38 Step #5: Base64: AyQkJFt0JA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 871 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4056759271 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc9240fd60, 0x55fc925f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc925f8720,0x55fc944822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b423924c65ec84df3ad23d4c2c3b135b424ee38' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 975 processed earlier; will process 10001 files now Step #5: ==31390== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc88f522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc8f58d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc8f57046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc8f57038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc88f58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc88eb942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc88eb3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc88f4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc8bf798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc8bf798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc8bf798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc8bf798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc8bf798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc8bf798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc8bf798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc8bf798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc8bf798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc8bf798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc8e17e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc8aeda578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc8aee55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc8ac90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc8ac90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc8ac91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc8ac90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc8ac90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc8ac90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc8f57294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc8f57b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc8f563529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc8f58dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a2105d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc88eb243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0xef,0xbb,0xbf,0xef,0xbb,0xbf, Step #5: (\357\273\277\357\273\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-249caf1ab637a2cb45f51ac7d7d760f37a1e923b Step #5: Base64: KO+7v++7vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 872 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4057209140 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558f60592d60, 0x558f6077b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558f6077b720,0x558f626052c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/249caf1ab637a2cb45f51ac7d7d760f37a1e923b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 976 processed earlier; will process 10000 files now Step #5: #1 pulse cov: 3400 ft: 3401 exec/s: 0 rss: 159Mb Step #5: ==31426== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558f570d52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558f5d710728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558f5d6f346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558f5d6f338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558f570db652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558f5703c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558f57036c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558f570cd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558f5a0fc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558f5a0fc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558f5a0fc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558f5a0fc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558f5a0fc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558f5a0fc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558f5a0fc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558f5a0fc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558f5a0fc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558f5a0fc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558f5c30145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558f5905d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558f590685a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558f58e13d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558f58e13d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558f58e14808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558f58e13944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558f58e13944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558f58e13944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558f5d6f594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558f5d6fe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558f5d6e6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558f5d710fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcf9aa3f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558f5703543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xf0,0x90,0x8e,0x90, Step #5: ws:\360\220\216\220 Step #5: artifact_prefix='./'; Test unit written to ./oom-b5dba04e7977057fc3f63c96e396dde984218b4e Step #5: Base64: d3M68JCOkA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 873 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4057704427 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c346fdfd60, 0x55c3471c871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c3471c8720,0x55c3490522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5dba04e7977057fc3f63c96e396dde984218b4e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 978 processed earlier; will process 9998 files now Step #5: ==31462== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c33db222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c34415d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c34414046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c34414038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c33db28652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c33da8942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c33da83c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c33db1a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c340b498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c340b498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c340b498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c340b498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c340b498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c340b498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c340b498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c340b498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c340b498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c340b498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c342d4e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c33faaa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c33fab55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c33f860d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c33f860d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c33f861808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c33f860944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c33f860944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c33f860944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c34414294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c34414b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c344133529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c34415dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2af4f99082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c33da8243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x20,0x3f,0x20,0x3f,0x20,0x3f, Step #5: ? ? ? ? Step #5: artifact_prefix='./'; Test unit written to ./oom-e51a3ed5d6bea0127ae5f743e988d029de33a163 Step #5: Base64: PyA/ID8gPw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 874 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4058157304 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559abf4b6d60, 0x559abf69f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559abf69f720,0x559ac15292c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e51a3ed5d6bea0127ae5f743e988d029de33a163' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 979 processed earlier; will process 9997 files now Step #5: ==31498== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559ab5ff92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559abc634728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559abc61746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559abc61738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559ab5fff652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559ab5f6042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559ab5f5ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559ab5ff1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ab90208c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ab90208c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ab90208c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ab90208c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ab90208c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ab90208c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ab90208c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ab90208c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ab90208c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ab90208c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559abb22545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559ab7f81578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559ab7f8c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559ab7d37d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559ab7d37d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559ab7d38808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559ab7d37944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559ab7d37944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559ab7d37944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559abc61994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559abc6227b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559abc60a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559abc634fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f77af598082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559ab5f5943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd7,0xa9,0x28,0x1,0x9,0x37,0x74, Step #5: \327\251(\001\0117t Step #5: artifact_prefix='./'; Test unit written to ./oom-4f7ce2f9121d22026654fdd2bc5b352d97c1669c Step #5: Base64: 16koAQk3dA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 875 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4058612375 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564bacf05d60, 0x564bad0ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564bad0ee720,0x564baef782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f7ce2f9121d22026654fdd2bc5b352d97c1669c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 980 processed earlier; will process 9996 files now Step #5: #1 pulse cov: 3713 ft: 3714 exec/s: 0 rss: 160Mb Step #5: ==31534== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564ba3a482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564baa083728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564baa06646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564baa06638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564ba3a4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564ba39af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564ba39a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564ba3a40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564ba6a6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564ba6a6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564ba6a6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564ba6a6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564ba6a6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564ba6a6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564ba6a6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564ba6a6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564ba6a6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564ba6a6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564ba8c7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564ba59d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564ba59db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564ba5786d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564ba5786d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ba5787808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564ba5786944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564ba5786944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564ba5786944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564baa06894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564baa0717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564baa059529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564baa083fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd1a6497082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564ba39a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x42,0x6e,0x4b, Step #5: DanMBnK Step #5: artifact_prefix='./'; Test unit written to ./oom-271708807af567afbae5087ee0d3db253c5ace88 Step #5: Base64: RGFuTUJuSw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 876 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4059110230 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562145804d60, 0x5621459ed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5621459ed720,0x5621478772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/271708807af567afbae5087ee0d3db253c5ace88' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 982 processed earlier; will process 9994 files now Step #5: ==31570== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56213c3472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562142982728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56214296546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56214296538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56213c34d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56213c2ae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56213c2a8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56213c33f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56213f36e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56213f36e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56213f36e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56213f36e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56213f36e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56213f36e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56213f36e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56213f36e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56213f36e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56213f36e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56214157345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56213e2cf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56213e2da5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56213e085d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56213e085d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56213e086808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56213e085944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56213e085944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56213e085944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56214296794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5621429707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562142958529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562142982fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbde5c10082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56213c2a743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x3f,0x2d,0xf3,0xbf,0xbf,0x80, Step #5: [?-\363\277\277\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-4062d68441014655e1a2d312e35b18dd28b4f8e5 Step #5: Base64: Wz8t87+/gA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 877 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4059570954 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562bf922fd60, 0x562bf941871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562bf9418720,0x562bfb2a22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4062d68441014655e1a2d312e35b18dd28b4f8e5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 983 processed earlier; will process 9993 files now Step #5: ==31606== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562befd722d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562bf63ad728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562bf639046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562bf639038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562befd78652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562befcd942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562befcd3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562befd6a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562bf2d998c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562bf2d998c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562bf2d998c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562bf2d998c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562bf2d998c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562bf2d998c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562bf2d998c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562bf2d998c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562bf2d998c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562bf2d998c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562bf4f9e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562bf1cfa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562bf1d055a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562bf1ab0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562bf1ab0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562bf1ab1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562bf1ab0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562bf1ab0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562bf1ab0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562bf639294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562bf639b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562bf6383529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562bf63adfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0be6965082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562befcd243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x43,0x4f,0x4d, Step #5: DanMCOM Step #5: artifact_prefix='./'; Test unit written to ./oom-59e6412483e8ef983216a20fb2087df4bc1ea045 Step #5: Base64: RGFuTUNPTQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 878 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4060022780 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561433ab3d60, 0x561433c9c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561433c9c720,0x561435b262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/59e6412483e8ef983216a20fb2087df4bc1ea045' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 984 processed earlier; will process 9992 files now Step #5: ==31642== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56142a5f62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561430c31728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561430c1446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561430c1438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56142a5fc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56142a55d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56142a557c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56142a5ee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56142d61d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56142d61d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56142d61d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56142d61d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56142d61d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56142d61d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56142d61d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56142d61d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56142d61d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56142d61d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56142f82245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56142c57e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56142c5895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56142c334d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56142c334d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56142c335808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56142c334944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56142c334944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56142c334944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561430c1694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561430c1f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561430c07529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561430c31fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b2044a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56142a55643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf,0x25,0x54,0xdd,0xa6, Step #5: \357\273\277%T\335\246 Step #5: artifact_prefix='./'; Test unit written to ./oom-950e782de07a98c8465d610aabca74061c23116a Step #5: Base64: 77u/JVTdpg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 879 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4060479975 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5590f6fedd60, 0x5590f71d671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5590f71d6720,0x5590f90602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/950e782de07a98c8465d610aabca74061c23116a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 985 processed earlier; will process 9991 files now Step #5: ==31678== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5590edb302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5590f416b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5590f414e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5590f414e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5590edb36652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5590eda9742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5590eda91c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5590edb28595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590f0b578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590f0b578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590f0b578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590f0b578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590f0b578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590f0b578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590f0b578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590f0b578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590f0b578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590f0b578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5590f2d5c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5590efab8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5590efac35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5590ef86ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5590ef86ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5590ef86f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5590ef86e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5590ef86e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5590ef86e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5590f415094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5590f41597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5590f4141529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5590f416bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d0a044082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5590eda9043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x7e,0x2d,0x7e,0x2d,0x62,0x32, Step #5: -~-~-b2 Step #5: artifact_prefix='./'; Test unit written to ./oom-5dd7dd3764cf4ed1236ac3bdad2a73d3a38ffd80 Step #5: Base64: LX4tfi1iMg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 880 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4060941986 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b70ffbd60, 0x556b711e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b711e4720,0x556b7306e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5dd7dd3764cf4ed1236ac3bdad2a73d3a38ffd80' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 986 processed earlier; will process 9990 files now Step #5: #1 pulse cov: 3706 ft: 3707 exec/s: 0 rss: 162Mb Step #5: ==31714== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b67b3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b6e179728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b6e15c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b6e15c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b67b44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b67aa542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b67a9fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b67b36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b6ab658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b6ab658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b6ab658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b6ab658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b6ab658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b6ab658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b6ab658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b6ab658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b6ab658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b6ab658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b6cd6a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b69ac6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b69ad15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b6987cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b6987cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b6987d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b6987c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b6987c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b6987c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b6e15e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b6e1677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b6e14f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b6e179fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb00bb4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b67a9e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x6e,0x7b,0x39,0x38,0x31,0x7d, Step #5: ^n{981} Step #5: artifact_prefix='./'; Test unit written to ./oom-6f3223047cd0e5300ae2af12315eaabb1555041d Step #5: Base64: Xm57OTgxfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 881 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4061434807 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5591f35aad60, 0x5591f379371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5591f3793720,0x5591f561d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6f3223047cd0e5300ae2af12315eaabb1555041d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 988 processed earlier; will process 9988 files now Step #5: #1 pulse cov: 3531 ft: 3532 exec/s: 0 rss: 159Mb Step #5: ==31750== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5591ea0ed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591f0728728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5591f070b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5591f070b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5591ea0f3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5591ea05442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5591ea04ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5591ea0e5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5591ed1148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5591ed1148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5591ed1148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5591ed1148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5591ed1148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5591ed1148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5591ed1148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5591ed1148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5591ed1148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5591ed1148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5591ef31945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5591ec075578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5591ec0805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5591ebe2bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5591ebe2bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5591ebe2c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5591ebe2b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5591ebe2b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5591ebe2b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5591f070d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591f07167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5591f06fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591f0728fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe1f2128082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5591ea04d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24, Step #5: $|$|$|$ Step #5: artifact_prefix='./'; Test unit written to ./oom-0bbb0b660aeaeb18471e19687a43bda0e192165e Step #5: Base64: JHwkfCR8JA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 882 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4061940401 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f9c5ce1d60, 0x55f9c5eca71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f9c5eca720,0x55f9c7d542c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0bbb0b660aeaeb18471e19687a43bda0e192165e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 990 processed earlier; will process 9986 files now Step #5: #1 pulse cov: 3477 ft: 3478 exec/s: 0 rss: 163Mb Step #5: ==31786== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f9bc8242d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f9c2e5f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f9c2e4246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f9c2e4238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9bc82a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f9bc78b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f9bc785c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9bc81c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9bf84b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9bf84b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9bf84b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9bf84b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9bf84b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9bf84b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9bf84b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9bf84b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9bf84b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9bf84b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9c1a5045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f9be7ac578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9be7b75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9be562d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9be562d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f9be563808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9be562944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9be562944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9be562944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f9c2e4494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f9c2e4d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f9c2e35529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f9c2e5ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6b39214082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f9bc78443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0xa,0x7e,0xa,0x66,0xa,0x69, Step #5: f\012~\012f\012i Step #5: artifact_prefix='./'; Test unit written to ./oom-118f074eb273005fccf7e42721ecbbce7aa5d98a Step #5: Base64: Zgp+CmYKaQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 883 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4062440641 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55908f908d60, 0x55908faf171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55908faf1720,0x55909197b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/118f074eb273005fccf7e42721ecbbce7aa5d98a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 992 processed earlier; will process 9984 files now Step #5: ==31822== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55908644b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55908ca86728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55908ca6946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55908ca6938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559086451652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5590863b242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5590863acc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559086443595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590894728c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590894728c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590894728c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590894728c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590894728c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590894728c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590894728c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590894728c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590894728c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590894728c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55908b67745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5590883d3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5590883de5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559088189d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559088189d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55908818a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559088189944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559088189944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559088189944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55908ca6b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55908ca747b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55908ca5c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55908ca86fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f10fd2df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5590863ab43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc7,0xb2,0xc3,0x8c,0xc3,0x9b,0x1, Step #5: \307\262\303\214\303\233\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-3d35db91836b506a77e37dc89547594de0a6aa70 Step #5: Base64: x7LDjMObAQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 884 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4062898159 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555df376cd60, 0x555df395571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555df3955720,0x555df57df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d35db91836b506a77e37dc89547594de0a6aa70' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 993 processed earlier; will process 9983 files now Step #5: ==31858== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555dea2af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555df08ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555df08cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555df08cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555dea2b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555dea21642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555dea210c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555dea2a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555ded2d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555ded2d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555ded2d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555ded2d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555ded2d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555ded2d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555ded2d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555ded2d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555ded2d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555ded2d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555def4db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555dec237578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555dec2425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555debfedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555debfedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555debfee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555debfed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555debfed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555debfed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555df08cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555df08d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555df08c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555df08eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0dc49f8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555dea20f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x63,0x29,0x75,0xcd,0xa6,0x29, Step #5: \012c)u\315\246) Step #5: artifact_prefix='./'; Test unit written to ./oom-031e25c8c3b29153bccf4d5d5bb60cfbbadb1bc2 Step #5: Base64: CmMpdc2mKQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 885 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4063351592 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5580c1e8ad60, 0x5580c207371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5580c2073720,0x5580c3efd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/031e25c8c3b29153bccf4d5d5bb60cfbbadb1bc2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 994 processed earlier; will process 9982 files now Step #5: ==31894== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5580b89cd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5580bf008728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5580befeb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5580befeb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5580b89d3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5580b893442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5580b892ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5580b89c5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5580bb9f48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5580bb9f48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5580bb9f48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5580bb9f48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5580bb9f48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5580bb9f48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5580bb9f48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5580bb9f48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5580bb9f48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5580bb9f48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5580bdbf945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5580ba955578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5580ba9605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5580ba70bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5580ba70bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5580ba70c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5580ba70b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5580ba70b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5580ba70b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5580befed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5580beff67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5580befde529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5580bf008fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc17e32d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5580b892d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x37,0x2d,0x7a,0x5e,0x33,0x2d,0x7a, Step #5: 7-z^3-z Step #5: artifact_prefix='./'; Test unit written to ./oom-99ef9fe7960f8d3d110ec6cddf88e7b7e7da3bec Step #5: Base64: Ny16XjMteg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 886 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4063802617 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561862289d60, 0x56186247271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561862472720,0x5618642fc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/99ef9fe7960f8d3d110ec6cddf88e7b7e7da3bec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 995 processed earlier; will process 9981 files now Step #5: ==31930== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561858dcc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56185f407728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56185f3ea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56185f3ea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561858dd2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561858d3342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561858d2dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561858dc4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56185bdf38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56185bdf38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56185bdf38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56185bdf38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56185bdf38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56185bdf38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56185bdf38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56185bdf38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56185bdf38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56185bdf38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56185dff845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56185ad54578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56185ad5f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56185ab0ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56185ab0ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56185ab0b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56185ab0a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56185ab0a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56185ab0a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56185f3ec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56185f3f57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56185f3dd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56185f407fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce65255082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561858d2c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0xa,0x33,0xa,0x32,0xa,0x32, Step #5: 3\0123\0122\0122 Step #5: artifact_prefix='./'; Test unit written to ./oom-297d758be4a699b848ea3b5abda9bdd348e68414 Step #5: Base64: MwozCjIKMg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 887 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4064258654 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a9a56dd60, 0x555a9a75671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a9a756720,0x555a9c5e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/297d758be4a699b848ea3b5abda9bdd348e68414' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 996 processed earlier; will process 9980 files now Step #5: ==31966== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a910b02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a976eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a976ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a976ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a910b6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a9101742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a91011c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a910a8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a940d78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a940d78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a940d78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a940d78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a940d78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a940d78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a940d78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a940d78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a940d78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a940d78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a962dc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a93038578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a930435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a92deed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a92deed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a92def808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a92dee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a92dee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a92dee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a976d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a976d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a976c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a976ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3c6459d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a9101043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x35,0x2b,0x30,0x2c,0x36,0x2b,0x2b, Step #5: 5+0,6++ Step #5: artifact_prefix='./'; Test unit written to ./oom-32c1c2b01ac6de76d945a4a6d27086e4e763ae66 Step #5: Base64: NSswLDYrKw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 888 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4064707593 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558003de2d60, 0x558003fcb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558003fcb720,0x558005e552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/32c1c2b01ac6de76d945a4a6d27086e4e763ae66' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 997 processed earlier; will process 9979 files now Step #5: ==32002== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557ffa9252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558000f60728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558000f4346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558000f4338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557ffa92b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557ffa88c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557ffa886c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557ffa91d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557ffd94c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557ffd94c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557ffd94c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557ffd94c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557ffd94c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557ffd94c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557ffd94c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557ffd94c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557ffd94c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557ffd94c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557fffb5145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557ffc8ad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557ffc8b85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557ffc663d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557ffc663d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557ffc664808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557ffc663944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557ffc663944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557ffc663944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558000f4594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558000f4e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558000f36529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558000f60fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f85f7113082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557ffa88543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xea,0xab,0x81,0xcc,0x81,0xcc,0xb8, Step #5: \352\253\201\314\201\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-35e621411d51c555080b88552170d77c3d2857f3 Step #5: Base64: 6quBzIHMuA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 889 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4065159664 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e96a07d60, 0x559e96bf071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e96bf0720,0x559e98a7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/35e621411d51c555080b88552170d77c3d2857f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 998 processed earlier; will process 9978 files now Step #5: ==32038== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e8d54a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e93b85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e93b6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e93b6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e8d550652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e8d4b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e8d4abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e8d542595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e905718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e905718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e905718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e905718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e905718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e905718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e905718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e905718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e905718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e905718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e9277645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e8f4d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e8f4dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e8f288d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e8f288d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e8f289808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e8f288944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e8f288944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e8f288944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e93b6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e93b737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e93b5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e93b85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2e11b9c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e8d4aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0xdc,0xbb,0x2d,0xdc,0xb5, Step #5: --\334\273-\334\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-f815631faa4e252eb809b000d5f38ea7abe3ee7b Step #5: Base64: LS3cuy3ctQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 890 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4065608014 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56472c34cd60, 0x56472c53571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56472c535720,0x56472e3bf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f815631faa4e252eb809b000d5f38ea7abe3ee7b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 999 processed earlier; will process 9977 files now Step #5: ==32074== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564722e8f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5647294ca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5647294ad46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5647294ad38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564722e95652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564722df642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564722df0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564722e87595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564725eb68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564725eb68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564725eb68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564725eb68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564725eb68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564725eb68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564725eb68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564725eb68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564725eb68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564725eb68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5647280bb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564724e17578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564724e225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564724bcdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564724bcdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564724bce808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564724bcd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564724bcd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564724bcd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5647294af94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5647294b87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5647294a0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5647294cafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe48d85b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564722def43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x80,0x88,0xe1,0x80,0x88,0xd1, Step #5: \341\200\210\341\200\210\321 Step #5: artifact_prefix='./'; Test unit written to ./oom-9909479774080dc660ed1a3ece3be8dd0a85a521 Step #5: Base64: 4YCI4YCI0Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 891 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4066063943 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619e7fe6d60, 0x5619e81cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619e81cf720,0x5619ea0592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9909479774080dc660ed1a3ece3be8dd0a85a521' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1000 processed earlier; will process 9976 files now Step #5: ==32110== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5619deb292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619e5164728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619e514746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619e514738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5619deb2f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5619dea9042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5619dea8ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5619deb21595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619e1b508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619e1b508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619e1b508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619e1b508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619e1b508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619e1b508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619e1b508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619e1b508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619e1b508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619e1b508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619e3d5545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619e0ab1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619e0abc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619e0867d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619e0867d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619e0868808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619e0867944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619e0867944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619e0867944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619e514994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619e51527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619e513a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619e5164fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f19ca5f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5619dea8943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0x8e,0x80,0xa1,0x7b,0x34,0x7d, Step #5: \363\216\200\241{4} Step #5: artifact_prefix='./'; Test unit written to ./oom-2e5a8224feee00c781bdb04757d69c65fc09d3af Step #5: Base64: 846AoXs0fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 892 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4066523590 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b1c0cafd60, 0x55b1c0e9871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b1c0e98720,0x55b1c2d222c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2e5a8224feee00c781bdb04757d69c65fc09d3af' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1001 processed earlier; will process 9975 files now Step #5: ==32146== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b1b77f22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b1bde2d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b1bde1046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b1bde1038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b1b77f8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b1b775942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b1b7753c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b1b77ea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1ba8198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1ba8198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1ba8198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1ba8198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1ba8198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1ba8198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1ba8198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1ba8198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1ba8198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1ba8198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b1bca1e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b1b977a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1b97855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b1b9530d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b1b9530d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b1b9531808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b1b9530944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b1b9530944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b1b9530944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b1bde1294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1bde1b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b1bde03529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b1bde2dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f352276f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b1b775243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x66,0x66,0x66,0x66,0x66,0x3a, Step #5: ffffff: Step #5: artifact_prefix='./'; Test unit written to ./oom-5aada763ab7ca9cbbb96cec0c2e23f02debff81c Step #5: Base64: ZmZmZmZmOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 893 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4066973116 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56073d946d60, 0x56073db2f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56073db2f720,0x56073f9b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5aada763ab7ca9cbbb96cec0c2e23f02debff81c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1002 processed earlier; will process 9974 files now Step #5: ==32182== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5607344892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56073aac4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56073aaa746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56073aaa738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56073448f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5607343f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5607343eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560734481595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5607374b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5607374b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5607374b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5607374b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5607374b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5607374b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5607374b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5607374b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5607374b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5607374b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5607396b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560736411578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56073641c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5607361c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5607361c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5607361c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5607361c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5607361c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5607361c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56073aaa994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56073aab27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56073aa9a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56073aac4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6008c1e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5607343e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0xc2,0xad,0xc2,0x94,0x44,0x4b, Step #5: n\302\255\302\224DK Step #5: artifact_prefix='./'; Test unit written to ./oom-36539ec7a6108c4dd588f0cfb87101cbc2230529 Step #5: Base64: bsKtwpRESw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 894 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4067434062 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56434c401d60, 0x56434c5ea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56434c5ea720,0x56434e4742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/36539ec7a6108c4dd588f0cfb87101cbc2230529' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1003 processed earlier; will process 9973 files now Step #5: #1 pulse cov: 3438 ft: 3439 exec/s: 0 rss: 162Mb Step #5: ==32218== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564342f442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56434957f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56434956246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56434956238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564342f4a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564342eab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564342ea5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564342f3c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564345f6b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564345f6b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564345f6b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564345f6b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564345f6b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564345f6b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564345f6b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564345f6b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564345f6b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564345f6b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56434817045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564344ecc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564344ed75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564344c82d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564344c82d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564344c83808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564344c82944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564344c82944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564344c82944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56434956494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56434956d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564349555529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56434957ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f501681d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564342ea443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x55,0x4e,0x3d,0x22,0x1d,0x22, Step #5: RUN=\"\035\" Step #5: artifact_prefix='./'; Test unit written to ./oom-01647d26d0a450c49c8b8388488484da8de00a34 Step #5: Base64: UlVOPSIdIg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 895 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4067936503 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca77ea1d60, 0x55ca7808a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca7808a720,0x55ca79f142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/01647d26d0a450c49c8b8388488484da8de00a34' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1005 processed earlier; will process 9971 files now Step #5: ==32254== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca6e9e42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca7501f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca7500246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca7500238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca6e9ea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca6e94b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca6e945c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca6e9dc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca71a0b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca71a0b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca71a0b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca71a0b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca71a0b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca71a0b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca71a0b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca71a0b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca71a0b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca71a0b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca73c1045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca7096c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca709775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca70722d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca70722d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca70723808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca70722944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca70722944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca70722944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca7500494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca7500d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca74ff5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca7501ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3c4b042082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca6e94443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x0,0x2d,0xef,0xb3,0xb3,0x5d, Step #5: [\000-\357\263\263] Step #5: artifact_prefix='./'; Test unit written to ./oom-a20c62d63fc9d3f82d33a0aea6e9a7375fb3e7a7 Step #5: Base64: WwAt77OzXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 896 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4068391208 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d1fec24d60, 0x55d1fee0d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d1fee0d720,0x55d200c972c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a20c62d63fc9d3f82d33a0aea6e9a7375fb3e7a7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1006 processed earlier; will process 9970 files now Step #5: ==32290== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1f57672d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d1fbda2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d1fbd8546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d1fbd8538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1f576d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d1f56ce42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d1f56c8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1f575f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1f878e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1f878e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1f878e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1f878e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1f878e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1f878e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1f878e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1f878e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1f878e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1f878e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d1fa99345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d1f76ef578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1f76fa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d1f74a5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d1f74a5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d1f74a6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d1f74a5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d1f74a5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d1f74a5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d1fbd8794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d1fbd907b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d1fbd78529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d1fbda2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb454b9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d1f56c743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0xef,0xb7,0xbe, Step #5: (?i)\357\267\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-ffd0a0e9df68d33c0c25e3bc001bde1be3fc5290 Step #5: Base64: KD9pKe+3vg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 897 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4068838918 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1b7f69d60, 0x55e1b815271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1b8152720,0x55e1b9fdc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ffd0a0e9df68d33c0c25e3bc001bde1be3fc5290' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1007 processed earlier; will process 9969 files now Step #5: ==32326== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1aeaac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1b50e7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1b50ca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1b50ca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1aeab2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1aea1342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1aea0dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1aeaa4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1b1ad38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1b1ad38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1b1ad38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1b1ad38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1b1ad38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1b1ad38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1b1ad38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1b1ad38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1b1ad38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1b1ad38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1b3cd845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1b0a34578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1b0a3f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1b07ead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1b07ead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1b07eb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1b07ea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1b07ea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1b07ea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1b50cc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1b50d57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1b50bd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1b50e7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4646194082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1aea0c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0xb7,0xc2,0xb7,0xc2,0xb7,0xb7, Step #5: \302\267\302\267\302\267\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-56e717961ad3652ec7498fd56c13b4ad9c5dbfd2 Step #5: Base64: wrfCt8K3tw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 898 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4069286094 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55df51bdfd60, 0x55df51dc871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55df51dc8720,0x55df53c522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56e717961ad3652ec7498fd56c13b4ad9c5dbfd2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1008 processed earlier; will process 9968 files now Step #5: #1 pulse cov: 3448 ft: 3449 exec/s: 0 rss: 159Mb Step #5: ==32362== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55df487222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55df4ed5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55df4ed4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55df4ed4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55df48728652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55df4868942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55df48683c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55df4871a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55df4b7498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55df4b7498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55df4b7498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55df4b7498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55df4b7498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55df4b7498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55df4b7498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55df4b7498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55df4b7498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55df4b7498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55df4d94e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55df4a6aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55df4a6b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55df4a460d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55df4a460d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55df4a461808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55df4a460944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55df4a460944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55df4a460944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55df4ed4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55df4ed4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55df4ed33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55df4ed5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe9bf669082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55df4868243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x4,0x22,0x7e,0x7e,0x7e, Step #5: HU\004\"~~~ Step #5: artifact_prefix='./'; Test unit written to ./oom-ec5be69588c481c1d69ca77e658c119662b88bfc Step #5: Base64: SFUEIn5+fg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 899 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4069780927 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e7b11a4d60, 0x55e7b138d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e7b138d720,0x55e7b32172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ec5be69588c481c1d69ca77e658c119662b88bfc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1010 processed earlier; will process 9966 files now Step #5: ==32398== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e7a7ce72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e7ae322728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e7ae30546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e7ae30538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e7a7ced652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e7a7c4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e7a7c48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e7a7cdf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e7aad0e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e7aad0e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e7aad0e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e7aad0e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e7aad0e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e7aad0e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e7aad0e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e7aad0e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e7aad0e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e7aad0e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e7acf1345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e7a9c6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e7a9c7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e7a9a25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e7a9a25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e7a9a26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e7a9a25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e7a9a25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e7a9a25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e7ae30794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e7ae3107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e7ae2f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e7ae322fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8dcb3c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e7a7c4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x88,0x49,0xa,0xcd,0x88,0x43, Step #5: \315\210I\012\315\210C Step #5: artifact_prefix='./'; Test unit written to ./oom-2b7e812cbb66eacd8534785d95152e9b60da0d6c Step #5: Base64: zYhJCs2IQw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 900 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4070231561 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561caf578d60, 0x561caf76171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561caf761720,0x561cb15eb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2b7e812cbb66eacd8534785d95152e9b60da0d6c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1011 processed earlier; will process 9965 files now Step #5: #1 pulse cov: 3605 ft: 3606 exec/s: 0 rss: 162Mb Step #5: ==32434== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ca60bb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561cac6f6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561cac6d946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561cac6d938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ca60c1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ca602242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ca601cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ca60b3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ca90e28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ca90e28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ca90e28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ca90e28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ca90e28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ca90e28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ca90e28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ca90e28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ca90e28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ca90e28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561cab2e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ca8043578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ca804e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ca7df9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ca7df9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ca7dfa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ca7df9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ca7df9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ca7df9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561cac6db94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561cac6e47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561cac6cc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561cac6f6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe02edb8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ca601b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x0,0x2,0x0,0x0,0x3,0x3, Step #5: \003\000\002\000\000\003\003 Step #5: artifact_prefix='./'; Test unit written to ./oom-46034c394850d563de5f245124cb2bb9c70fb36a Step #5: Base64: AwACAAADAw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 901 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4070728334 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560a04381d60, 0x560a0456a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560a0456a720,0x560a063f42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/46034c394850d563de5f245124cb2bb9c70fb36a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1013 processed earlier; will process 9963 files now Step #5: ==32470== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609faec42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560a014ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560a014e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560a014e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5609faeca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5609fae2b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5609fae25c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5609faebc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609fdeeb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609fdeeb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609fdeeb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609fdeeb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609fdeeb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609fdeeb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609fdeeb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609fdeeb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609fdeeb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609fdeeb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560a000f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609fce4c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609fce575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5609fcc02d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5609fcc02d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5609fcc03808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5609fcc02944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5609fcc02944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5609fcc02944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560a014e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560a014ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560a014d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560a014fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbde95b1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5609fae2443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x3f,0x69,0x29,0xce,0xbc, Step #5: ^(?i)\316\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-bba3789b23017637aaf75069b18cc430022cf21c Step #5: Base64: Xig/aSnOvA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 902 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4071186484 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5593ec4c4d60, 0x5593ec6ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593ec6ad720,0x5593ee5372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bba3789b23017637aaf75069b18cc430022cf21c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1014 processed earlier; will process 9962 files now Step #5: ==32506== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5593e30072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593e9642728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593e962546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593e962538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5593e300d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5593e2f6e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5593e2f68c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5593e2fff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5593e602e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5593e602e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5593e602e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5593e602e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5593e602e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5593e602e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5593e602e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5593e602e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5593e602e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5593e602e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593e823345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5593e4f8f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5593e4f9a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5593e4d45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5593e4d45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5593e4d46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5593e4d45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5593e4d45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5593e4d45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593e962794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593e96307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593e9618529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593e9642fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a14ba0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5593e2f6743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xf0,0x9e,0x92,0xa9,0x2f,0x3e, Step #5: <\360\236\222\251/> Step #5: artifact_prefix='./'; Test unit written to ./oom-1190661f2765bfa9b1521ddec017ea5d474691a1 Step #5: Base64: PPCekqkvPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 903 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4071641548 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db16cd4d60, 0x55db16ebd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db16ebd720,0x55db18d472c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1190661f2765bfa9b1521ddec017ea5d474691a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1015 processed earlier; will process 9961 files now Step #5: ==32542== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55db0d8172d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db13e52728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db13e3546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db13e3538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55db0d81d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55db0d77e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55db0d778c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55db0d80f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55db1083e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55db1083e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55db1083e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55db1083e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55db1083e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55db1083e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55db1083e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55db1083e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55db1083e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55db1083e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db12a4345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55db0f79f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55db0f7aa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55db0f555d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55db0f555d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55db0f556808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55db0f555944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55db0f555944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55db0f555944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db13e3794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db13e407b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db13e28529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db13e52fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3553b4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55db0d77743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x3,0xe1,0x9f,0xa0, Step #5: \000\000\000\003\341\237\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-948525da1de4f432f320050dbdb7d1125beffc74 Step #5: Base64: AAAAA+GfoA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 904 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4072094423 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55949f777d60, 0x55949f96071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55949f960720,0x5594a17ea2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/948525da1de4f432f320050dbdb7d1125beffc74' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1016 processed earlier; will process 9960 files now Step #5: ==32578== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5594962ba2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55949c8f5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55949c8d846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55949c8d838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5594962c0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55949622142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55949621bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5594962b2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5594992e18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5594992e18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5594992e18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5594992e18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5594992e18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5594992e18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5594992e18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5594992e18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5594992e18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5594992e18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55949b4e645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559498242578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55949824d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559497ff8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559497ff8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559497ff9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559497ff8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559497ff8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559497ff8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55949c8da94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55949c8e37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55949c8cb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55949c8f5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e46cc0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55949621a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x3,0xe2,0x80,0x8a, Step #5: \000\000\000\003\342\200\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-2004f7ac78041478a5f7b91bbe7aadb525ebbc0d Step #5: Base64: AAAAA+KAig== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 905 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4072553476 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a32290d60, 0x564a3247971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a32479720,0x564a343032c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2004f7ac78041478a5f7b91bbe7aadb525ebbc0d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1017 processed earlier; will process 9959 files now Step #5: #1 pulse cov: 3501 ft: 3502 exec/s: 0 rss: 161Mb Step #5: ==32614== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a28dd32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a2f40e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a2f3f146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a2f3f138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a28dd9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a28d3a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a28d34c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a28dcb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a2bdfa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a2bdfa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a2bdfa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a2bdfa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a2bdfa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a2bdfa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a2bdfa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a2bdfa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a2bdfa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a2bdfa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a2dfff45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a2ad5b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a2ad665a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a2ab11d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a2ab11d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a2ab12808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a2ab11944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a2ab11944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a2ab11944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a2f3f394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a2f3fc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a2f3e4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a2f40efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9189d15082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a28d3343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x3b,0x86,0x60, Step #5: DanM;\206` Step #5: artifact_prefix='./'; Test unit written to ./oom-cc412bf784e78e5b767d61a14b0bac68b13c57dd Step #5: Base64: RGFuTTuGYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 906 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4073059558 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563f1c018d60, 0x563f1c20171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563f1c201720,0x563f1e08b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc412bf784e78e5b767d61a14b0bac68b13c57dd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1019 processed earlier; will process 9957 files now Step #5: ==32650== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563f12b5b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563f19196728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563f1917946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563f1917938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563f12b61652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563f12ac242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563f12abcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563f12b53595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563f15b828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563f15b828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563f15b828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563f15b828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563f15b828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563f15b828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563f15b828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563f15b828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563f15b828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563f15b828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563f17d8745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563f14ae3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563f14aee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563f14899d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563f14899d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563f1489a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563f14899944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563f14899944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563f14899944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563f1917b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563f191847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563f1916c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563f19196fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3ea8c7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563f12abb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x3,0xe2,0x81,0x84, Step #5: \000\000\000\003\342\201\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-4e579f061c40d27c4c66517975e821c7ec15095c Step #5: Base64: AAAAA+KBhA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 907 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4073516799 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560d65495d60, 0x560d6567e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560d6567e720,0x560d675082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4e579f061c40d27c4c66517975e821c7ec15095c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1020 processed earlier; will process 9956 files now Step #5: ==32686== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560d5bfd82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560d62613728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560d625f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560d625f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560d5bfde652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560d5bf3f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560d5bf39c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560d5bfd0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560d5efff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560d5efff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560d5efff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560d5efff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560d5efff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560d5efff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560d5efff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560d5efff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560d5efff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560d5efff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560d6120445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560d5df60578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560d5df6b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560d5dd16d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560d5dd16d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560d5dd17808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560d5dd16944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560d5dd16944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560d5dd16944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560d625f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560d626017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560d625e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560d62613fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe1f638f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560d5bf3843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xa4,0xad,0xbf,0x7c,0x40,0x2e, Step #5: \360\244\255\277|@. Step #5: artifact_prefix='./'; Test unit written to ./oom-7240b9db1029804f20e95b8108222078aaf872ce Step #5: Base64: 8KStv3xALg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 908 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4073976015 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ed1a05d60, 0x560ed1bee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ed1bee720,0x560ed3a782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7240b9db1029804f20e95b8108222078aaf872ce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1021 processed earlier; will process 9955 files now Step #5: ==32722== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ec85482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560eceb83728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560eceb6646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560eceb6638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ec854e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ec84af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ec84a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ec8540595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ecb56f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ecb56f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ecb56f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ecb56f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ecb56f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ecb56f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ecb56f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ecb56f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ecb56f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ecb56f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ecd77445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560eca4d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560eca4db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560eca286d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560eca286d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560eca287808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560eca286944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560eca286944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560eca286944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560eceb6894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560eceb717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560eceb59529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560eceb83fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f12b6ea8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ec84a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x63,0x65,0x6e,0x64,0x61,0x5b, Step #5: scenda[ Step #5: artifact_prefix='./'; Test unit written to ./oom-428706c8d42e0d520dc9356895cbbcab38baea3d Step #5: Base64: c2NlbmRhWw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 909 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4074436042 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f41bb6ad60, 0x55f41bd5371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f41bd53720,0x55f41dbdd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/428706c8d42e0d520dc9356895cbbcab38baea3d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1022 processed earlier; will process 9954 files now Step #5: ==32758== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f4126ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f418ce8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f418ccb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f418ccb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f4126b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f41261442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f41260ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f4126a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f4156d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f4156d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f4156d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f4156d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f4156d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f4156d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f4156d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f4156d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f4156d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f4156d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f4178d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f414635578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f4146405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f4143ebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f4143ebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f4143ec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f4143eb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f4143eb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f4143eb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f418ccd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f418cd67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f418cbe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f418ce8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f392009f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f41260d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4b,0x45,0x52,0x4c,0x3d,0x22,0x22, Step #5: KERL=\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-dd84ebb701e0da81d289efa3d75dd85ed46c2aa0 Step #5: Base64: S0VSTD0iIg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 910 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4074898137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a237ca5d60, 0x55a237e8e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a237e8e720,0x55a239d182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dd84ebb701e0da81d289efa3d75dd85ed46c2aa0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1023 processed earlier; will process 9953 files now Step #5: #1 pulse cov: 3577 ft: 3578 exec/s: 0 rss: 161Mb Step #5: ==32794== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a22e7e82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a234e23728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a234e0646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a234e0638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a22e7ee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a22e74f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a22e749c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a22e7e0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a23180f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a23180f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a23180f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a23180f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a23180f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a23180f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a23180f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a23180f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a23180f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a23180f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a233a1445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a230770578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a23077b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a230526d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a230526d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a230527808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a230526944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a230526944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a230526944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a234e0894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a234e117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a234df9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a234e23fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f41cbc5d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a22e74843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x1,0x25,0x2d,0xdf,0xbf,0x5d, Step #5: [\001%-\337\277] Step #5: artifact_prefix='./'; Test unit written to ./oom-a62be1bd1ecd7a8c4c5d0b6a6809add14dc797a5 Step #5: Base64: WwElLd+/XQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 911 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4075394602 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a57081d60, 0x558a5726a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a5726a720,0x558a590f42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a62be1bd1ecd7a8c4c5d0b6a6809add14dc797a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1025 processed earlier; will process 9951 files now Step #5: ==32830== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a4dbc42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a541ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a541e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a541e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a4dbca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a4db2b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a4db25c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a4dbbc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a50beb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a50beb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a50beb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a50beb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a50beb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a50beb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a50beb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a50beb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a50beb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a50beb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a52df045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a4fb4c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a4fb575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a4f902d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a4f902d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a4f903808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a4f902944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a4f902944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a4f902944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a541e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a541ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a541d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a541fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1716ec3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a4db2443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x22,0x22,0xf0,0x90,0xae,0x90, Step #5: \000\"\"\360\220\256\220 Step #5: artifact_prefix='./'; Test unit written to ./oom-feb374d75fa4743b719a110a6605fc0752552dd2 Step #5: Base64: ACIi8JCukA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 912 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4075851114 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5599a8a9fd60, 0x5599a8c8871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5599a8c88720,0x5599aab122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/feb374d75fa4743b719a110a6605fc0752552dd2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1026 processed earlier; will process 9950 files now Step #5: ==32866== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55999f5e22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5599a5c1d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5599a5c0046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5599a5c0038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55999f5e8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55999f54942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55999f543c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55999f5da595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5599a26098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5599a26098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5599a26098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5599a26098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5599a26098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5599a26098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5599a26098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5599a26098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5599a26098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5599a26098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5599a480e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5599a156a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599a15755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5599a1320d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5599a1320d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5599a1321808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5599a1320944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5599a1320944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5599a1320944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5599a5c0294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5599a5c0b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5599a5bf3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5599a5c1dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b5ab1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55999f54243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5b,0x5b,0x32,0x5d,0x5d,0x5d, Step #5: [[[2]]] Step #5: artifact_prefix='./'; Test unit written to ./oom-cdaf9c7b6637f7e9a85ef2c80bfd797d65a94f83 Step #5: Base64: W1tbMl1dXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 913 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4076306827 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55da51403d60, 0x55da515ec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55da515ec720,0x55da534762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cdaf9c7b6637f7e9a85ef2c80bfd797d65a94f83' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1027 processed earlier; will process 9949 files now Step #5: ==32902== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55da47f462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55da4e581728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55da4e56446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55da4e56438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55da47f4c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55da47ead42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55da47ea7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55da47f3e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55da4af6d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55da4af6d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55da4af6d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55da4af6d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55da4af6d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55da4af6d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55da4af6d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55da4af6d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55da4af6d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55da4af6d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55da4d17245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55da49ece578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55da49ed95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55da49c84d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55da49c84d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55da49c85808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55da49c84944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55da49c84944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55da49c84944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55da4e56694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55da4e56f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55da4e557529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55da4e581fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc8b8cd2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55da47ea643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x20,0x2d,0xf1,0xbb,0xbf,0xbf, Step #5: [ -\361\273\277\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-c03915f922b17c58554135c3c3c7d701bd5065b5 Step #5: Base64: WyAt8bu/vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 914 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4076757368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d5e64bad60, 0x55d5e66a371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d5e66a3720,0x55d5e852d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c03915f922b17c58554135c3c3c7d701bd5065b5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1028 processed earlier; will process 9948 files now Step #5: ==32938== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d5dcffd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d5e3638728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d5e361b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d5e361b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d5dd003652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d5dcf6442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d5dcf5ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d5dcff5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d5e00248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d5e00248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d5e00248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d5e00248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d5e00248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d5e00248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d5e00248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d5e00248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d5e00248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d5e00248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d5e222945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d5def85578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d5def905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d5ded3bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d5ded3bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d5ded3c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d5ded3b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d5ded3b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d5ded3b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d5e361d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d5e36267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d5e360e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d5e3638fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f143ed88082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d5dcf5d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x43,0x4f,0x49, Step #5: DanMCOI Step #5: artifact_prefix='./'; Test unit written to ./oom-46e0e9b266bc00364bd9dd83c0bd4a9c86d4ec03 Step #5: Base64: RGFuTUNPSQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 915 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4077206421 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5589d608fd60, 0x5589d627871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5589d6278720,0x5589d81022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/46e0e9b266bc00364bd9dd83c0bd4a9c86d4ec03' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1029 processed earlier; will process 9947 files now Step #5: ==32974== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5589ccbd22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5589d320d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5589d31f046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5589d31f038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5589ccbd8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5589ccb3942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5589ccb33c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5589ccbca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5589cfbf98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5589cfbf98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5589cfbf98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5589cfbf98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5589cfbf98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5589cfbf98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5589cfbf98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5589cfbf98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5589cfbf98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5589cfbf98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5589d1dfe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5589ceb5a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5589ceb655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5589ce910d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5589ce910d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5589ce911808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5589ce910944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5589ce910944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5589ce910944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5589d31f294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5589d31fb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5589d31e3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5589d320dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f135169b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5589ccb3243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0xf3,0xbf,0xba,0xbe,0x31,0x45, Step #5: 2\363\277\272\2761E Step #5: artifact_prefix='./'; Test unit written to ./oom-97f44d6948182bc878b2d7a1ee4153dfe662028a Step #5: Base64: MvO/ur4xRQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 916 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4077661720 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad42dd7d60, 0x55ad42fc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad42fc0720,0x55ad44e4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/97f44d6948182bc878b2d7a1ee4153dfe662028a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1030 processed earlier; will process 9946 files now Step #5: ==33010== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad3991a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad3ff55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad3ff3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad3ff3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad39920652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad3988142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad3987bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad39912595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad3c9418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad3c9418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad3c9418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad3c9418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad3c9418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad3c9418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad3c9418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad3c9418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad3c9418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad3c9418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad3eb4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad3b8a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad3b8ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad3b658d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad3b658d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad3b659808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad3b658944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad3b658944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad3b658944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad3ff3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad3ff437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad3ff2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad3ff55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3ed214082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad3987a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x2f,0xdb,0x81,0xe2,0x80,0xab, Step #5: +/\333\201\342\200\253 Step #5: artifact_prefix='./'; Test unit written to ./oom-7eff559d72ebb53c1664ee587142aafe2ab6dc5c Step #5: Base64: Ky/bgeKAqw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 917 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4078114154 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560056897d60, 0x560056a8071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560056a80720,0x56005890a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7eff559d72ebb53c1664ee587142aafe2ab6dc5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1031 processed earlier; will process 9945 files now Step #5: #1 pulse cov: 3643 ft: 3644 exec/s: 0 rss: 160Mb Step #5: ==33046== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56004d3da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560053a15728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5600539f846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5600539f838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56004d3e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56004d34142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56004d33bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56004d3d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600504018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600504018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600504018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600504018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600504018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600504018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600504018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600504018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600504018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600504018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56005260645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56004f362578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56004f36d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56004f118d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56004f118d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56004f119808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56004f118944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56004f118944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56004f118944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5600539fa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560053a037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5600539eb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560053a15fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3104673082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56004d33a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0x5b,0x5e,0xf4,0x8f,0x26, Step #5: [^[^\364\217& Step #5: artifact_prefix='./'; Test unit written to ./oom-02afe787dce6c8a138fac014df9f307d03871032 Step #5: Base64: W15bXvSPJg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 918 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4078604156 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561626148d60, 0x56162633171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561626331720,0x5616281bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/02afe787dce6c8a138fac014df9f307d03871032' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1033 processed earlier; will process 9943 files now Step #5: Step #5: thread '' (33082) panicked at crates/typst-layout/src/inline/shaping.rs:1353:9: Step #5: one or more glyphs in " " fell out of range Step #5: note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace Step #5: AddressSanitizer:DEADLYSIGNAL Step #5: ================================================================= Step #5: ==33082==ERROR: AddressSanitizer: ABRT on unknown address 0x00000000813a (pc 0x7f6cd061300b bp 0x7fff1d3b5ba0 sp 0x7fff1d3b5950 T0) Step #5: SCARINESS: 10 (signal) Step #5: #0 0x7f6cd061300b in raise (/lib/x86_64-linux-gnu/libc.so.6+0x4300b) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #1 0x7f6cd05f2858 in abort (/lib/x86_64-linux-gnu/libc.so.6+0x22858) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #2 0x56161caad929 in std::sys::pal::unix::abort_internal (.llvm.13016512536609702143) /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/sys/pal/unix/mod.rs:300:14 Step #5: #3 0x56161caad748 in std::process::abort /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/process.rs:2638:5 Step #5: #4 0x56161ca3997c in libfuzzer_sys::initialize::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:94:9 Step #5: #5 0x56161fa26261 in core::ops::function::Fn<(&'a std::panic::PanicHookInfo<'b>,), Output = ()> + core::marker::Sync + core::marker::Send> as core::ops::function::Fn<(&std::panic::PanicHookInfo,)>>::call /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/boxed.rs:2355:9 Step #5: #6 0x56161fa26261 in std::panicking::panic_with_hook /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:819:13 Step #5: #7 0x56161fa13251 in std::panicking::panic_handler::{closure#0} /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:685:13 Step #5: #8 0x56161fa0d428 in std::sys::backtrace::__rust_end_short_backtrace:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/sys/backtrace.rs:182:18 Step #5: #9 0x56161fa13e5c in __rustc::rust_begin_unwind /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:676:5 Step #5: #10 0x56161c99138b in core::panicking::panic_fmt /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/panicking.rs:80:14 Step #5: #11 0x5616204e8c01 in typst_layout::inline::shaping::assert_all_glyphs_in_range /src/typst/crates/typst-layout/src/inline/shaping.rs:1353:9 Step #5: #12 0x5616204e8c01 in ::reshape /src/typst/crates/typst-layout/src/inline/shaping.rs:550:13 Step #5: #13 0x56162045b8d2 in typst_layout::inline::line::collect_range /src/typst/crates/typst-layout/src/inline/line.rs:320:35 Step #5: #14 0x56162045b8d2 in typst_layout::inline::line::collect_items::{closure#0} /src/typst/crates/typst-layout/src/inline/line.rs:218:9 Step #5: #15 0x56162066cdb4 in typst_layout::inline::line::reorder:: /src/typst/crates/typst-layout/src/inline/line.rs:279:9 Step #5: #16 0x56162066cdb4 in typst_layout::inline::line::collect_items /src/typst/crates/typst-layout/src/inline/line.rs:216:5 Step #5: #17 0x56162066cdb4 in typst_layout::inline::line::line /src/typst/crates/typst-layout/src/inline/line.rs:159:5 Step #5: #18 0x561620463d0c in typst_layout::inline::linebreak::linebreak_simple::{closure#0} /src/typst/crates/typst-layout/src/inline/linebreak.rs:178:27 Step #5: #19 0x5616205dcf55 in typst_layout::inline::linebreak::breakpoints:: /src/typst/crates/typst-layout/src/inline/linebreak.rs:790:9 Step #5: #20 0x5616205dcf55 in typst_layout::inline::linebreak::linebreak_simple /src/typst/crates/typst-layout/src/inline/linebreak.rs:176:5 Step #5: #21 0x5616205dcf55 in typst_layout::inline::linebreak::linebreak /src/typst/crates/typst-layout/src/inline/linebreak.rs:158:31 Step #5: #22 0x5616205dcf55 in typst_layout::inline::layout_inline_impl /src/typst/crates/typst-layout/src/inline/mod.rs:174:17 Step #5: #23 0x561620575f6a in typst_layout::inline::layout_par_impl::{closure#0} /src/typst/crates/typst-layout/src/inline/mod.rs:108:5 Step #5: #24 0x561620575f6a in comemo::memoize::memoize::, comemo::track::Tracked, &typst_utils::hash::LazyHash, comemo::track::Tracked, comemo::track::Tracked, comemo::track::TrackedMut, comemo::track::Tracked, comemo::track::Tracked, typst_library::foundations::styles::StyleChain, typst_library::layout::axes::Axes, bool, typst_layout::inline::ParSituation)>, core::result::Result>, typst_layout::inline::layout_par_impl::{closure#0}> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/comemo-0.5.1/src/memoize.rs:71:18 Step #5: #25 0x561620575f6a in typst_layout::inline::layout_par_impl /src/typst/crates/typst-layout/src/inline/mod.rs:70:1 Step #5: #26 0x561620575f6a in typst_layout::inline::layout_par /src/typst/crates/typst-layout/src/inline/mod.rs:53:5 Step #5: #27 0x561620575f6a in ::par /src/typst/crates/typst-layout/src/flow/collect.rs:167:21 Step #5: #28 0x561620575f6a in ::run_block /src/typst/crates/typst-layout/src/flow/collect.rs:101:22 Step #5: #29 0x561620575f6a in ::run /src/typst/crates/typst-layout/src/flow/collect.rs:81:54 Step #5: #30 0x561620575f6a in typst_layout::flow::collect::collect /src/typst/crates/typst-layout/src/flow/collect.rs:50:6 Step #5: #31 0x561620575f6a in typst_layout::flow::layout_flow /src/typst/crates/typst-layout/src/flow/mod.rs:213:20 Step #5: #32 0x561620454ae1 in typst_layout::pages::run::layout_page_run_impl::{closure#0} /src/typst/crates/typst-layout/src/pages/run.rs:189:20 Step #5: #33 0x561620660cf8 in comemo::memoize::memoize::, &typst_utils::hash::LazyHash, comemo::track::Tracked, comemo::track::Tracked, comemo::track::TrackedMut, comemo::track::Tracked, &[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], comemo::track::Tracked, typst_library::foundations::styles::StyleChain)>, core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::run::layout_page_run_impl::{closure#0}> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/comemo-0.5.1/src/memoize.rs:71:18 Step #5: #34 0x561620660cf8 in typst_layout::pages::run::layout_page_run_impl /src/typst/crates/typst-layout/src/pages/run.rs:76:1 Step #5: #35 0x561620660cf8 in typst_layout::pages::run::layout_page_run /src/typst/crates/typst-layout/src/pages/run.rs:62:5 Step #5: #36 0x5616203ee3f7 in typst_layout::pages::layout_pages::{closure#1} /src/typst/crates/typst-layout/src/pages/mod.rs:197:13 Step #5: #37 0x5616203ee3f7 in ::parallelize::, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0} /src/typst/crates/typst-library/src/engine.rs:86:18 Step #5: #38 0x5616203ee3f7 in <&::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0} as core::ops::function::FnMut<((&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator),)>>::call_mut /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/ops/function.rs:274:22 Step #5: #39 0x5616203ee3f7 in <&mut &::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0} as core::ops::function::FnOnce<((&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator),)>>::call_once /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/ops/function.rs:310:21 Step #5: #40 0x5616203ee3f7 in >::map::<(core::result::Result, ecow::vec::EcoVec>, typst_library::engine::Sink), &mut &::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}> /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/option.rs:1165:29 Step #5: #41 0x5616203ee3f7 in , &::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}> as core::iter::traits::iterator::Iterator>::next /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/core/src/iter/adapters/map.rs:107:26 Step #5: #42 0x5616203ee3f7 in , ecow::vec::EcoVec>, typst_library::engine::Sink)> as rayon::iter::plumbing::Folder<(core::result::Result, ecow::vec::EcoVec>, typst_library::engine::Sink)>>::consume_iter::, &::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/plumbing/mod.rs:173:21 Step #5: #43 0x5616203ee3f7 in , ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}> as rayon::iter::plumbing::Folder<(&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator)>>::consume_iter::> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/map.rs:244:31 Step #5: #44 0x5616203ee3f7 in as rayon::iter::plumbing::Producer>::fold_with::, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/plumbing/mod.rs:107:16 Step #5: #45 0x5616203ee3f7 in rayon::iter::plumbing::bridge_producer_consumer::helper::, rayon::iter::map::MapConsumer, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/plumbing/mod.rs:432:22 Step #5: #46 0x5616205bb7bf in rayon::iter::plumbing::bridge_producer_consumer::, rayon::iter::map::MapConsumer, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/plumbing/mod.rs:391:12 Step #5: #47 0x5616205bb7bf in , ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> as rayon::iter::plumbing::ProducerCallback<(&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator)>>::callback::> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/plumbing/mod.rs:368:13 Step #5: #48 0x5616205bb7bf in as rayon::iter::IndexedParallelIterator>::with_producer::, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/vec.rs:156:22 Step #5: #49 0x5616205bb7bf in as rayon::iter::IndexedParallelIterator>::with_producer::, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/vec.rs:92:32 Step #5: #50 0x5616205bb7bf in rayon::iter::plumbing::bridge::, rayon::iter::map::MapConsumer, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/plumbing/mod.rs:352:21 Step #5: #51 0x5616205bb7bf in as rayon::iter::IndexedParallelIterator>::drive::, ecow::vec::EcoVec>, typst_library::engine::Sink)>, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/vec.rs:80:9 Step #5: #52 0x5616205bb7bf in , ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}> as rayon::iter::IndexedParallelIterator>::drive::, ecow::vec::EcoVec>, typst_library::engine::Sink)>> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/map.rs:64:19 Step #5: #53 0x5616205bb7bf in rayon::iter::collect::collect_into_vec::, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>, (core::result::Result, ecow::vec::EcoVec>, typst_library::engine::Sink)>::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/collect/mod.rs:20:49 Step #5: #54 0x5616205bb7bf in rayon::iter::collect::collect_with_consumer::<(core::result::Result, ecow::vec::EcoVec>, typst_library::engine::Sink), rayon::iter::collect::collect_into_vec, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>, (core::result::Result, ecow::vec::EcoVec>, typst_library::engine::Sink)>::{closure#0}> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/collect/mod.rs:84:18 Step #5: #55 0x5616205bb7bf in rayon::iter::collect::collect_into_vec::, ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}>, (core::result::Result, ecow::vec::EcoVec>, typst_library::engine::Sink)> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/collect/mod.rs:20:5 Step #5: #56 0x5616205bb7bf in , ::parallelize, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}>::{closure#0}> as rayon::iter::IndexedParallelIterator>::collect_into_vec /rust/registry/src/index.crates.io-1949cf8c6b5b557f/rayon-1.12.0/src/iter/mod.rs:2524:9 Step #5: #57 0x5616205bb7bf in ::parallelize::, typst_layout::pages::layout_pages::{closure#0}>, core::iter::adapters::filter_map::FilterMap, typst_layout::pages::layout_pages::{closure#0}>, (&&[(&typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)], &typst_library::foundations::styles::StyleChain, typst_library::introspection::locator::Locator), core::result::Result, ecow::vec::EcoVec>, typst_layout::pages::layout_pages::{closure#1}> /src/typst/crates/typst-library/src/engine.rs:88:14 Step #5: #58 0x5616205bb7bf in typst_layout::pages::layout_pages /src/typst/crates/typst-layout/src/pages/mod.rs:189:27 Step #5: #59 0x5616205bb7bf in typst_layout::pages::layout_document_common /src/typst/crates/typst-layout/src/pages/mod.rs:173:17 Step #5: #60 0x5616205b4157 in typst_layout::pages::layout_document_impl::{closure#0} /src/typst/crates/typst-layout/src/pages/mod.rs:65:5 Step #5: #61 0x5616205b4157 in comemo::memoize::memoize::, &typst_utils::hash::LazyHash, comemo::track::Tracked, comemo::track::Tracked, comemo::track::TrackedMut, comemo::track::Tracked, &typst_library::foundations::content::Content, typst_library::foundations::styles::StyleChain)>, core::result::Result>, typst_layout::pages::layout_document_impl::{closure#0}> /rust/registry/src/index.crates.io-1949cf8c6b5b557f/comemo-0.5.1/src/memoize.rs:71:18 Step #5: #62 0x5616205b4157 in typst_layout::pages::layout_document_impl /src/typst/crates/typst-layout/src/pages/mod.rs:53:1 Step #5: #63 0x5616205b4157 in typst_layout::pages::layout_document /src/typst/crates/typst-layout/src/pages/mod.rs:40:5 Step #5: #64 0x5616206ac01c in ::create /src/typst/crates/typst-layout/src/document.rs:92:9 Step #5: #65 0x56161ebc3151 in typst::compile_impl:: /src/typst/crates/typst/src/lib.rs:157:20 Step #5: #66 0x56161ec1300f in typst::compile:: /src/typst/crates/typst/src/lib.rs:80:18 Step #5: #67 0x56161ec1300f in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:13:27 Step #5: #68 0x56161ec1e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #69 0x56161e9c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #70 0x56161e9c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #71 0x56161e9ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #72 0x56161e9c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #73 0x56161e9c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #74 0x56161e9c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #75 0x5616232ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #76 0x5616232b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #77 0x56162329c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #78 0x5616232c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #79 0x7f6cd05f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #80 0x56161cbeb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: raise--abort--std::sys::pal::unix::abort_internal (.llvm.13016512536609702143) Step #5: ==33082==Register values: Step #5: rax = 0x0000000000000000 rbx = 0x00007f6cd05cf580 rcx = 0x00007f6cd061300b rdx = 0x0000000000000000 Step #5: rdi = 0x0000000000000002 rsi = 0x00007fff1d3b5950 rbp = 0x00007fff1d3b5ba0 rsp = 0x00007fff1d3b5950 Step #5: r8 = 0x0000000000000000 r9 = 0x00007fff1d3b5950 r10 = 0x0000000000000008 r11 = 0x0000000000000246 Step #5: r12 = 0x0000000000000000 r13 = 0x00005616286f77a8 r14 = 0x000056161fa31360 r15 = 0x0000000000000001 Step #5: AddressSanitizer can not provide additional info. Step #5: SUMMARY: AddressSanitizer: ABRT (/lib/x86_64-linux-gnu/libc.so.6+0x4300b) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) in raise Step #5: ==33082==ABORTING Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd8,0x80,0x20,0xd8,0x94,0xda,0x80, Step #5: \330\200 \330\224\332\200 Step #5: artifact_prefix='./'; Test unit written to ./crash-0e57f6c94ed6999af28f3653f1bf06c8f1a327a5 Step #5: Base64: 2IAg2JTagA== Step #5: MERGE-OUTER: attempt 919 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4079206368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a1fb586d60, 0x55a1fb76f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a1fb76f720,0x55a1fd5f92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/regressions/0e57f6c94ed6999af28f3653f1bf06c8f1a327a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1034 processed earlier; will process 9942 files now Step #5: ==33118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a1f20c92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a1f8704728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a1f86e746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a1f86e738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a1f20cf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1f203042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1f202ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a1f20c1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1f50f08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1f50f08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1f50f08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1f50f08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1f50f08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1f50f08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1f50f08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1f50f08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1f50f08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1f50f08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a1f72f545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a1f4051578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a1f405c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a1f3e07d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a1f3e07d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a1f3e08808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a1f3e07944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a1f3e07944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a1f3e07944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a1f86e994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a1f86f27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a1f86da529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a1f8704fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f77d9366082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1f202943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4f,0x55,0x58,0x53,0x2e,0x2e,0x70, Step #5: OUXS..p Step #5: artifact_prefix='./'; Test unit written to ./oom-b0b4a66d9d0c378d06c81e681cf1eedc26b3a89d Step #5: Base64: T1VYUy4ucA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 920 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4079661657 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fedf094d60, 0x55fedf27d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fedf27d720,0x55fee11072c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b0b4a66d9d0c378d06c81e681cf1eedc26b3a89d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1035 processed earlier; will process 9941 files now Step #5: ==33154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fed5bd72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fedc212728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fedc1f546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fedc1f538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fed5bdd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fed5b3e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fed5b38c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fed5bcf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fed8bfe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fed8bfe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fed8bfe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fed8bfe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fed8bfe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fed8bfe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fed8bfe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fed8bfe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fed8bfe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fed8bfe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fedae0345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fed7b5f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fed7b6a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fed7915d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fed7915d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fed7916808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fed7915944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fed7915944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fed7915944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fedc1f794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fedc2007b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fedc1e8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fedc212fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2276faf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fed5b3743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0xa,0x2d,0xdf,0xb3,0x5d, Step #5: [^\012-\337\263] Step #5: artifact_prefix='./'; Test unit written to ./oom-7aceadd136bbde7446fd4b96ef252691fe343a3c Step #5: Base64: W14KLd+zXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 921 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4080116575 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559997292d60, 0x55999747b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55999747b720,0x5599993052c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7aceadd136bbde7446fd4b96ef252691fe343a3c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1036 processed earlier; will process 9940 files now Step #5: ==33190== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55998ddd52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559994410728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5599943f346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5599943f338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55998dddb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55998dd3c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55998dd36c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55998ddcd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559990dfc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559990dfc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559990dfc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559990dfc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559990dfc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559990dfc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559990dfc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559990dfc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559990dfc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559990dfc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55999300145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55998fd5d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55998fd685a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55998fb13d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55998fb13d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55998fb14808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55998fb13944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55998fb13944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55998fb13944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5599943f594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5599943fe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5599943e6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559994410fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f42defa7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55998dd3543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x46,0xa,0xa,0xa,0x2e,0x30, Step #5: PF\012\012\012.0 Step #5: artifact_prefix='./'; Test unit written to ./oom-842f0eb0a5bc0b31f0f69125c2bf97e80661b238 Step #5: Base64: UEYKCgouMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 922 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4080577379 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563c2719bd60, 0x563c2738471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563c27384720,0x563c2920e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/842f0eb0a5bc0b31f0f69125c2bf97e80661b238' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1037 processed earlier; will process 9939 files now Step #5: ==33226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563c1dcde2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563c24319728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563c242fc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563c242fc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563c1dce4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563c1dc4542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563c1dc3fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563c1dcd6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563c20d058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563c20d058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563c20d058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563c20d058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563c20d058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563c20d058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563c20d058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563c20d058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563c20d058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563c20d058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563c22f0a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563c1fc66578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563c1fc715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563c1fa1cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563c1fa1cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563c1fa1d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563c1fa1c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563c1fa1c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563c1fa1c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563c242fe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563c243077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563c242ef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563c24319fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4eb674c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563c1dc3e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x3a,0x2d,0x57,0x30,0x75,0x2b, Step #5: f:-W0u+ Step #5: artifact_prefix='./'; Test unit written to ./oom-178a88a5dab55175ecc0d4a7aff8234f2e81ff2f Step #5: Base64: ZjotVzB1Kw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 923 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4081028305 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fe10a6ad60, 0x55fe10c5371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fe10c53720,0x55fe12add2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/178a88a5dab55175ecc0d4a7aff8234f2e81ff2f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1038 processed earlier; will process 9938 files now Step #5: ==33262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fe075ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fe0dbe8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fe0dbcb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fe0dbcb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fe075b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fe0751442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fe0750ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fe075a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fe0a5d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fe0a5d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fe0a5d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fe0a5d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fe0a5d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fe0a5d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fe0a5d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fe0a5d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fe0a5d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fe0a5d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fe0c7d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fe09535578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fe095405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fe092ebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fe092ebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fe092ec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fe092eb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fe092eb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fe092eb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fe0dbcd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fe0dbd67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fe0dbbe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fe0dbe8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba07582082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fe0750d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x3,0xef,0xbc,0x81, Step #5: \000\000\000\003\357\274\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-26767974cb5d6118798bd0c52620500af6dd14de Step #5: Base64: AAAAA++8gQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 924 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4081476385 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5607f7c01d60, 0x5607f7dea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5607f7dea720,0x5607f9c742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/26767974cb5d6118798bd0c52620500af6dd14de' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1039 processed earlier; will process 9937 files now Step #5: ==33298== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5607ee7442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5607f4d7f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5607f4d6246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5607f4d6238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5607ee74a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5607ee6ab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5607ee6a5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5607ee73c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5607f176b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5607f176b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5607f176b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5607f176b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5607f176b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5607f176b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5607f176b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5607f176b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5607f176b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5607f176b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5607f397045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5607f06cc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5607f06d75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5607f0482d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5607f0482d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5607f0483808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5607f0482944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5607f0482944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5607f0482944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5607f4d6494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5607f4d6d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5607f4d55529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5607f4d7ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f48cb0a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5607ee6a443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0x6d,0x74,0x78,0x58,0x26,0x63, Step #5: hmtxX&c Step #5: artifact_prefix='./'; Test unit written to ./oom-aaead0fa757aeb9b6ae0b685c83d5d5d28eb7127 Step #5: Base64: aG10eFgmYw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 925 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4081923264 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d120ccd60, 0x556d122b571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d122b5720,0x556d1413f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aaead0fa757aeb9b6ae0b685c83d5d5d28eb7127' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1040 processed earlier; will process 9936 files now Step #5: ==33334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d08c0f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d0f24a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d0f22d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d0f22d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d08c15652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d08b7642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d08b70c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d08c07595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d0bc368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d0bc368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d0bc368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d0bc368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d0bc368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d0bc368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d0bc368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d0bc368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d0bc368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d0bc368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d0de3b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d0ab97578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d0aba25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d0a94dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d0a94dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d0a94e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d0a94d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d0a94d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d0a94d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d0f22f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d0f2387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d0f220529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d0f24afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f07fd00a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d08b6f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0xa,0xa,0x2b,0xa,0xa,0x2b, Step #5: c\012\012+\012\012+ Step #5: artifact_prefix='./'; Test unit written to ./oom-6dc694df433b0f5648ba9da08f926bf78f6d9b98 Step #5: Base64: YwoKKwoKKw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 926 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4082384808 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56316ca30d60, 0x56316cc1971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56316cc19720,0x56316eaa32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6dc694df433b0f5648ba9da08f926bf78f6d9b98' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1041 processed earlier; will process 9935 files now Step #5: ==33370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5631635732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563169bae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563169b9146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563169b9138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563163579652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5631634da42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5631634d4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56316356b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56316659a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56316659a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56316659a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56316659a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56316659a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56316659a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56316659a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56316659a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56316659a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56316659a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56316879f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5631654fb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5631655065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5631652b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5631652b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5631652b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5631652b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5631652b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5631652b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563169b9394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563169b9c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563169b84529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563169baefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc09468082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5631634d343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0xc2,0xad,0xc3,0x94,0x44,0x4b, Step #5: n\302\255\303\224DK Step #5: artifact_prefix='./'; Test unit written to ./oom-3698b9abe9a37e401a050c1f46625d6aa5089ce0 Step #5: Base64: bsKtw5RESw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 927 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4082839961 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5556ca16ed60, 0x5556ca35771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556ca357720,0x5556cc1e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3698b9abe9a37e401a050c1f46625d6aa5089ce0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1042 processed earlier; will process 9934 files now Step #5: ==33406== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556c0cb12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5556c72ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5556c72cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5556c72cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5556c0cb7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5556c0c1842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5556c0c12c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5556c0ca9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5556c3cd88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5556c3cd88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5556c3cd88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5556c3cd88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5556c3cd88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5556c3cd88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5556c3cd88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5556c3cd88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5556c3cd88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5556c3cd88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5556c5edd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5556c2c39578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5556c2c445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5556c29efd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5556c29efd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5556c29f0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5556c29ef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5556c29ef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5556c29ef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5556c72d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556c72da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5556c72c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5556c72ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f138bf25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5556c0c1143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x5c,0xd7,0x96,0x26,0x96,0x26, Step #5: B\\\327\226&\226& Step #5: artifact_prefix='./'; Test unit written to ./oom-667eb38c9e48673f5c263be2e87cd99f357e0433 Step #5: Base64: QlzXliaWJg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 928 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4083291480 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56402170ad60, 0x5640218f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5640218f3720,0x56402377d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/667eb38c9e48673f5c263be2e87cd99f357e0433' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1043 processed earlier; will process 9933 files now Step #5: ==33442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56401824d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56401e888728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56401e86b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56401e86b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564018253652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5640181b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640181aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564018245595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56401b2748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56401b2748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56401b2748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56401b2748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56401b2748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56401b2748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56401b2748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56401b2748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56401b2748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56401b2748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56401d47945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56401a1d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56401a1e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564019f8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564019f8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564019f8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564019f8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564019f8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564019f8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56401e86d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56401e8767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56401e85e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56401e888fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3f05762082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5640181ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2a,0x2a,0x0,0x98,0x5b,0x5b,0x24, Step #5: **\000\230[[$ Step #5: artifact_prefix='./'; Test unit written to ./oom-183b7c71a12d2b4948f2edfc0d704b8a5f86aaa2 Step #5: Base64: KioAmFtbJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 929 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4083750449 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c5fe864d60, 0x55c5fea4d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c5fea4d720,0x55c6008d72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/183b7c71a12d2b4948f2edfc0d704b8a5f86aaa2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1044 processed earlier; will process 9932 files now Step #5: ==33478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5f53a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c5fb9e2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c5fb9c546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c5fb9c538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c5f53ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c5f530e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c5f5308c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c5f539f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c5f83ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c5f83ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c5f83ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c5f83ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c5f83ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c5f83ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c5f83ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c5f83ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c5f83ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c5f83ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c5fa5d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c5f732f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c5f733a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c5f70e5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c5f70e5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c5f70e6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c5f70e5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c5f70e5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c5f70e5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c5fb9c794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c5fb9d07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c5fb9b8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c5fb9e2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdb86c9e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c5f530743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0xb2,0xb2,0xe0,0xb2,0xb6, Step #5: \363\240\262\262\340\262\266 Step #5: artifact_prefix='./'; Test unit written to ./oom-20d6d20a922c5539c9c1a511196b01abc5ae1b57 Step #5: Base64: 86CysuCytg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 930 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4084204532 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e75dee9d60, 0x55e75e0d271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e75e0d2720,0x55e75ff5c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/20d6d20a922c5539c9c1a511196b01abc5ae1b57' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1045 processed earlier; will process 9931 files now Step #5: ==33514== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e754a2c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e75b067728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e75b04a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e75b04a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e754a32652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e75499342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e75498dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e754a24595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e757a538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e757a538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e757a538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e757a538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e757a538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e757a538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e757a538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e757a538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e757a538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e757a538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e759c5845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e7569b4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e7569bf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e75676ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e75676ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e75676b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e75676a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e75676a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e75676a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e75b04c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e75b0557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e75b03d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e75b067fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb4c04b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e75498c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd7,0xa9,0x1,0x0,0x2b,0x6,0x74, Step #5: \327\251\001\000+\006t Step #5: artifact_prefix='./'; Test unit written to ./oom-7e9e5c75288fd92ec43cbcb4c92865c22f2c941e Step #5: Base64: 16kBACsGdA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 931 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4084663306 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56513c510d60, 0x56513c6f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56513c6f9720,0x56513e5832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7e9e5c75288fd92ec43cbcb4c92865c22f2c941e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1046 processed earlier; will process 9930 files now Step #5: ==33550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5651330532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56513968e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56513967146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56513967138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565133059652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565132fba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565132fb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56513304b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56513607a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56513607a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56513607a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56513607a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56513607a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56513607a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56513607a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56513607a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56513607a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56513607a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56513827f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565134fdb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565134fe65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565134d91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565134d91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565134d92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565134d91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565134d91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565134d91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56513967394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56513967c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565139664529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56513968efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f39d8785082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565132fb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xf3,0xa0,0x81,0x80,0x3e,0x3a, Step #5: <\363\240\201\200>: Step #5: artifact_prefix='./'; Test unit written to ./oom-321c09f8f9aa667820c2f5f14b4bbdc74bc9322d Step #5: Base64: PPOggYA+Og== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 932 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4085112688 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c5e4642d60, 0x55c5e482b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c5e482b720,0x55c5e66b52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/321c09f8f9aa667820c2f5f14b4bbdc74bc9322d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1047 processed earlier; will process 9929 files now Step #5: #1 pulse cov: 3862 ft: 3863 exec/s: 0 rss: 164Mb Step #5: ==33586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5db1852d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c5e17c0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c5e17a346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c5e17a338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c5db18b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c5db0ec42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c5db0e6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c5db17d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c5de1ac8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c5de1ac8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c5de1ac8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c5de1ac8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c5de1ac8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c5de1ac8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c5de1ac8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c5de1ac8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c5de1ac8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c5de1ac8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c5e03b145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c5dd10d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c5dd1185a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c5dcec3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c5dcec3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c5dcec4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c5dcec3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c5dcec3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c5dcec3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c5e17a594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c5e17ae7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c5e1796529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c5e17c0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78d5f8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c5db0e543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x6e,0x3a,0x6f,0x75,0x3d,0x73, Step #5: dn:ou=s Step #5: artifact_prefix='./'; Test unit written to ./oom-458af2b37fc1a1749d841e77c20ef1c3505531ca Step #5: Base64: ZG46b3U9cw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 933 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4085609475 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b38dad7d60, 0x55b38dcc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b38dcc0720,0x55b38fb4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/458af2b37fc1a1749d841e77c20ef1c3505531ca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1049 processed earlier; will process 9927 files now Step #5: ==33622== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b38461a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b38ac55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b38ac3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b38ac3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b384620652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b38458142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b38457bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b384612595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b3876418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b3876418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b3876418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b3876418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b3876418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b3876418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b3876418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b3876418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b3876418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b3876418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b38984645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b3865a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b3865ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b386358d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b386358d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b386359808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b386358944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b386358944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b386358944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b38ac3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b38ac437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b38ac2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b38ac55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbcc09d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b38457a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x22,0x22,0x22,0xe0,0xba,0xb5, Step #5: R\"\"\"\340\272\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-4bfafc062cf3a8d19678ef23a5c30b9d23f3c3c3 Step #5: Base64: UiIiIuC6tQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 934 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4086064732 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c17a568d60, 0x55c17a75171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c17a751720,0x55c17c5db2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4bfafc062cf3a8d19678ef23a5c30b9d23f3c3c3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1050 processed earlier; will process 9926 files now Step #5: ==33658== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c1710ab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c1776e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c1776c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c1776c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c1710b1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c17101242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c17100cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c1710a3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1740d28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1740d28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1740d28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1740d28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1740d28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1740d28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1740d28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1740d28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1740d28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1740d28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c1762d745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c173033578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c17303e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c172de9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c172de9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c172dea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c172de9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c172de9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c172de9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c1776cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c1776d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c1776bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c1776e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc238bcb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c17100b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x11,0xcc,0xb0,0xcc,0xb0, Step #5: \000\000\021\314\260\314\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-f62421205df64b14984c2488af8c66672f80f381 Step #5: Base64: AAARzLDMsA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 935 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4086530383 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b3232fd60, 0x559b3251871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b32518720,0x559b343a22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f62421205df64b14984c2488af8c66672f80f381' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1051 processed earlier; will process 9925 files now Step #5: ==33694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b28e722d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b2f4ad728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b2f49046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b2f49038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b28e78652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b28dd942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b28dd3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b28e6a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b2be998c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b2be998c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b2be998c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b2be998c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b2be998c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b2be998c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b2be998c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b2be998c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b2be998c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b2be998c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b2e09e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b2adfa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b2ae055a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b2abb0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b2abb0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b2abb1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b2abb0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b2abb0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b2abb0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b2f49294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b2f49b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b2f483529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b2f4adfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f018938d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b28dd243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0x90,0xde,0x98,0xf,0xd6,0xb8, Step #5: \336\220\336\230\017\326\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-746b6260a8d998eda1d9fd628c11cad123e7b1be Step #5: Base64: 3pDemA/WuA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 936 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4086989888 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562a31dadd60, 0x562a31f9671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562a31f96720,0x562a33e202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/746b6260a8d998eda1d9fd628c11cad123e7b1be' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1052 processed earlier; will process 9924 files now Step #5: ==33730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562a288f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562a2ef2b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562a2ef0e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562a2ef0e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562a288f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562a2885742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562a28851c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562a288e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562a2b9178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562a2b9178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562a2b9178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562a2b9178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562a2b9178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562a2b9178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562a2b9178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562a2b9178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562a2b9178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562a2b9178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562a2db1c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562a2a878578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562a2a8835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562a2a62ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562a2a62ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562a2a62f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562a2a62e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562a2a62e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562a2a62e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562a2ef1094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562a2ef197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562a2ef01529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562a2ef2bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f6502d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562a2885043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0xf0,0x9e,0xb8,0x9e, Step #5: \"\\u\360\236\270\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-b8f2d9d355615a87fcd57f6c678a172f5872124d Step #5: Base64: Ilx18J64ng== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 937 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4087445442 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56064cb85d60, 0x56064cd6e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56064cd6e720,0x56064ebf82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8f2d9d355615a87fcd57f6c678a172f5872124d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1053 processed earlier; will process 9923 files now Step #5: ==33766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606436c82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560649d03728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560649ce646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560649ce638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606436ce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56064362f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560643629c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606436c0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5606466ef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5606466ef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5606466ef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5606466ef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5606466ef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5606466ef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5606466ef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5606466ef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5606466ef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5606466ef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606488f445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560645650578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56064565b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560645406d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560645406d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560645407808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560645406944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560645406944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560645406944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560649ce894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560649cf17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560649cd9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560649d03fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7697785082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56064362843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x20,0x68,0x20,0x61,0x38,0x6f, Step #5: 1 h a8o Step #5: artifact_prefix='./'; Test unit written to ./oom-f4f699c0053df0c75822a052a98d380bf6a09bb8 Step #5: Base64: MSBoIGE4bw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 938 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4087895692 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab80bbdd60, 0x55ab80da671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab80da6720,0x55ab82c302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f4f699c0053df0c75822a052a98d380bf6a09bb8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1054 processed earlier; will process 9922 files now Step #5: ==33802== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ab777002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab7dd3b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab7dd1e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab7dd1e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ab77706652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ab7766742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ab77661c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ab776f8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab7a7278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab7a7278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab7a7278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab7a7278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab7a7278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab7a7278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab7a7278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab7a7278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab7a7278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab7a7278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab7c92c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab79688578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab796935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab7943ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab7943ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab7943f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab7943e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab7943e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab7943e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab7dd2094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab7dd297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab7dd11529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab7dd3bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f06770fa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ab7766043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x3d,0xa,0x60,0xa,0x60,0x3d, Step #5: ==\012`\012`= Step #5: artifact_prefix='./'; Test unit written to ./oom-425a66ac08ce48ca266d441e2c8c51e7c3a21e60 Step #5: Base64: PT0KYApgPQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 939 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4088485264 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5593e7754d60, 0x5593e793d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593e793d720,0x5593e97c72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/425a66ac08ce48ca266d441e2c8c51e7c3a21e60' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1055 processed earlier; will process 9921 files now Step #5: ==33838== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5593de2972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593e48d2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593e48b546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593e48b538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5593de29d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5593de1fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5593de1f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5593de28f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5593e12be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5593e12be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5593e12be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5593e12be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5593e12be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5593e12be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5593e12be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5593e12be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5593e12be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5593e12be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593e34c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5593e021f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5593e022a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5593dffd5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5593dffd5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5593dffd6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5593dffd5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5593dffd5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5593dffd5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593e48b794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593e48c07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593e48a8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593e48d2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f24b6337082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5593de1f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x38,0x58,0x25,0x58,0x5e,0x32,0x30, Step #5: 8X%X^20 Step #5: artifact_prefix='./'; Test unit written to ./oom-4484375688a2c04f281240d86738fb564c946235 Step #5: Base64: OFglWF4yMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 940 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4088935131 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5592125bbd60, 0x5592127a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5592127a4720,0x55921462e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4484375688a2c04f281240d86738fb564c946235' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1056 processed earlier; will process 9920 files now Step #5: ==33874== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5592090fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55920f739728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55920f71c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55920f71c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559209104652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55920906542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55920905fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5592090f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55920c1258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55920c1258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55920c1258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55920c1258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55920c1258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55920c1258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55920c1258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55920c1258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55920c1258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55920c1258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55920e32a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55920b086578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55920b0915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55920ae3cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55920ae3cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55920ae3d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55920ae3c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55920ae3c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55920ae3c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55920f71e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55920f7277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55920f70f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55920f739fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe866e0b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55920905e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xa,0x3d,0x3d,0xa,0x3d,0x3d, Step #5: =\012==\012== Step #5: artifact_prefix='./'; Test unit written to ./oom-dabcc1a373c0d9c3e48c84a514516ba4b9a967ab Step #5: Base64: PQo9PQo9PQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 941 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4089384515 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562667adfd60, 0x562667cc871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562667cc8720,0x562669b522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dabcc1a373c0d9c3e48c84a514516ba4b9a967ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1057 processed earlier; will process 9919 files now Step #5: ==33910== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56265e6222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562664c5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562664c4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562664c4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56265e628652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56265e58942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56265e583c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56265e61a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5626616498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5626616498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5626616498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5626616498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5626616498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5626616498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5626616498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5626616498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5626616498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5626616498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56266384e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5626605aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5626605b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562660360d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562660360d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562660361808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562660360944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562660360944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562660360944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562664c4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562664c4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562664c33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562664c5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fde061a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56265e58243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45,0x27,0x5c,0xed,0x88,0x8a,0x27, Step #5: E'\\\355\210\212' Step #5: artifact_prefix='./'; Test unit written to ./oom-d64c8015f216bdcb0b3a1a1a54ae5c590997b0f6 Step #5: Base64: RSdc7YiKJw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 942 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4089841428 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fe98a9cd60, 0x55fe98c8571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fe98c85720,0x55fe9ab0f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d64c8015f216bdcb0b3a1a1a54ae5c590997b0f6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1058 processed earlier; will process 9918 files now Step #5: ==33946== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fe8f5df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fe95c1a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fe95bfd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fe95bfd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fe8f5e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fe8f54642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fe8f540c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fe8f5d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fe926068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fe926068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fe926068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fe926068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fe926068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fe926068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fe926068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fe926068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fe926068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fe926068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fe9480b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fe91567578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fe915725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fe9131dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fe9131dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fe9131e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fe9131d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fe9131d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fe9131d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fe95bff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fe95c087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fe95bf0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fe95c1afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4343cbb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fe8f53f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x7b,0x37,0x32,0x7d, Step #5: \"\\u{72} Step #5: artifact_prefix='./'; Test unit written to ./oom-58d18d9e9b15027bb6b5204d2b083a0c20076876 Step #5: Base64: Ilx1ezcyfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 943 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4090299117 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bf96bd7d60, 0x55bf96dc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bf96dc0720,0x55bf98c4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58d18d9e9b15027bb6b5204d2b083a0c20076876' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1059 processed earlier; will process 9917 files now Step #5: ==33982== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bf8d71a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bf93d55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bf93d3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bf93d3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bf8d720652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bf8d68142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bf8d67bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bf8d712595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bf907418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bf907418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bf907418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bf907418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bf907418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bf907418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bf907418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bf907418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bf907418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bf907418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bf9294645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bf8f6a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bf8f6ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bf8f458d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bf8f458d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bf8f459808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bf8f458944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bf8f458944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bf8f458944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bf93d3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bf93d437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bf93d2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bf93d55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff2b16a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bf8d67a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xa4,0x7b,0x35,0x31,0x31,0x7d, Step #5: \336\244{511} Step #5: artifact_prefix='./'; Test unit written to ./oom-3f0b17942d8620e4e04182d6abd77785b309fb1c Step #5: Base64: 3qR7NTExfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 944 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4090764752 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a35f65d60, 0x556a3614e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a3614e720,0x556a37fd82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3f0b17942d8620e4e04182d6abd77785b309fb1c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1060 processed earlier; will process 9916 files now Step #5: ==34018== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a2caa82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a330e3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a330c646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a330c638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a2caae652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a2ca0f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a2ca09c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a2caa0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a2facf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a2facf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a2facf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a2facf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a2facf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a2facf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a2facf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a2facf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a2facf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a2facf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a31cd445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a2ea30578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a2ea3b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a2e7e6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a2e7e6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a2e7e7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a2e7e6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a2e7e6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a2e7e6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a330c894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a330d17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a330b9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a330e3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbea6adc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a2ca0843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0xf0,0x90,0xbd,0x93,0x7d,0x3a, Step #5: {\360\220\275\223}: Step #5: artifact_prefix='./'; Test unit written to ./oom-0a518cef2ee3c1345502ea68c6e4931fdce362d3 Step #5: Base64: e/CQvZN9Og== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 945 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4091224180 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556c38e97d60, 0x556c3908071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556c39080720,0x556c3af0a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0a518cef2ee3c1345502ea68c6e4931fdce362d3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1061 processed earlier; will process 9915 files now Step #5: ==34054== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556c2f9da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556c36015728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556c35ff846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556c35ff838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556c2f9e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556c2f94142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556c2f93bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556c2f9d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556c32a018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556c32a018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556c32a018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556c32a018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556c32a018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556c32a018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556c32a018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556c32a018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556c32a018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556c32a018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556c34c0645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556c31962578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556c3196d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556c31718d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556c31718d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556c31719808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556c31718944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556c31718944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556c31718944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556c35ffa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556c360037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556c35feb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556c36015fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08fca09082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556c2f93a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x77,0x77,0x2e,0x48,0x6d,0x6d, Step #5: www.Hmm Step #5: artifact_prefix='./'; Test unit written to ./oom-0ae9146d7a00ec5e1d3459f014cd662d018f7c6b Step #5: Base64: d3d3LkhtbQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 946 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4091687722 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585d3b25d60, 0x5585d3d0e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585d3d0e720,0x5585d5b982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0ae9146d7a00ec5e1d3459f014cd662d018f7c6b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1062 processed earlier; will process 9914 files now Step #5: #1 pulse cov: 3760 ft: 3761 exec/s: 0 rss: 160Mb Step #5: #2 pulse cov: 3959 ft: 4270 exec/s: 0 rss: 161Mb Step #5: ==34090== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585ca6682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585d0ca3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585d0c8646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585d0c8638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585ca66e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585ca5cf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585ca5c9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585ca660595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585cd68f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585cd68f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585cd68f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585cd68f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585cd68f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585cd68f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585cd68f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585cd68f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585cd68f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585cd68f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585cf89445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585cc5f0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585cc5fb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5585cc3a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5585cc3a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5585cc3a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5585cc3a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5585cc3a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5585cc3a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585d0c8894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585d0c917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585d0c79529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585d0ca3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ce8e4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585ca5c843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0xe2,0x81,0xa7,0x41,0x47,0xa4, Step #5: T\342\201\247AG\244 Step #5: artifact_prefix='./'; Test unit written to ./oom-7960e399f01f50f407000e2623712064f390c243 Step #5: Base64: VOKBp0FHpA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 947 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4092274072 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b0d9cdcd60, 0x55b0d9ec571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b0d9ec5720,0x55b0dbd4f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7960e399f01f50f407000e2623712064f390c243' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1066 processed earlier; will process 9910 files now Step #5: ==34126== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b0d081f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b0d6e5a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b0d6e3d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b0d6e3d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b0d0825652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b0d078642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b0d0780c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b0d0817595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b0d38468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b0d38468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b0d38468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b0d38468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b0d38468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b0d38468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b0d38468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b0d38468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b0d38468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b0d38468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b0d5a4b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b0d27a7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b0d27b25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b0d255dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b0d255dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b0d255e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b0d255d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b0d255d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b0d255d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b0d6e3f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b0d6e487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b0d6e30529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b0d6e5afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc9a7de6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b0d077f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x2d,0x2d,0x2d,0x2d,0x0,0x41, Step #5: \002----\000A Step #5: artifact_prefix='./'; Test unit written to ./oom-ba1772e49f93363f274e3af7e05a6f196e74bd72 Step #5: Base64: Ai0tLS0AQQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 948 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4092732387 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561ea9741d60, 0x561ea992a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561ea992a720,0x561eab7b42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ba1772e49f93363f274e3af7e05a6f196e74bd72' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1067 processed earlier; will process 9909 files now Step #5: ==34162== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ea02842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ea68bf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ea68a246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ea68a238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ea028a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ea01eb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ea01e5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ea027c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ea32ab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ea32ab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ea32ab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ea32ab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ea32ab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ea32ab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ea32ab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ea32ab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ea32ab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ea32ab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ea54b045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ea220c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ea22175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ea1fc2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ea1fc2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ea1fc3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ea1fc2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ea1fc2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ea1fc2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ea68a494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ea68ad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ea6895529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ea68bffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcc58123082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ea01e443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0xc4,0xad,0x8a,0x8a,0x55, Step #5: - \304\255\212\212U Step #5: artifact_prefix='./'; Test unit written to ./oom-0533b719386047c839aa7819a5e43debaf176f5b Step #5: Base64: LSDErYqKVQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 949 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4093193407 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e5661ad60, 0x559e5680371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e56803720,0x559e5868d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0533b719386047c839aa7819a5e43debaf176f5b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1068 processed earlier; will process 9908 files now Step #5: ==34198== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e4d15d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e53798728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e5377b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e5377b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e4d163652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e4d0c442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e4d0bec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e4d155595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e501848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e501848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e501848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e501848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e501848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e501848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e501848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e501848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e501848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e501848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e5238945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e4f0e5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e4f0f05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e4ee9bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e4ee9bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e4ee9c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e4ee9b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e4ee9b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e4ee9b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e5377d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e537867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e5376e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e53798fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc90e0b9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e4d0bd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x0,0x0,0x0,0x0,0x0,0x1, Step #5: 0\000\000\000\000\000\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-ca2d4523cce6d5ced097a8fb8dcbad085d2dff1d Step #5: Base64: MAAAAAAAAQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 950 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4093652096 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a54c8f4d60, 0x55a54cadd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a54cadd720,0x55a54e9672c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ca2d4523cce6d5ced097a8fb8dcbad085d2dff1d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1069 processed earlier; will process 9907 files now Step #5: ==34234== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a5434372d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a549a72728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a549a5546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a549a5538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a54343d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a54339e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a543398c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a54342f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a54645e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a54645e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a54645e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a54645e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a54645e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a54645e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a54645e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a54645e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a54645e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a54645e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a54866345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a5453bf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a5453ca5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a545175d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a545175d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a545176808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a545175944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a545175944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a545175944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a549a5794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a549a607b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a549a48529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a549a72fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa118733082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a54339743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x2f,0xda,0xb4,0x5f,0xda,0xb4, Step #5: ~/\332\264_\332\264 Step #5: artifact_prefix='./'; Test unit written to ./oom-63ecdce87adeda688c96f8899247091f1eaac189 Step #5: Base64: fi/atF/atA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 951 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4094105325 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d1c270ad60, 0x55d1c28f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d1c28f3720,0x55d1c477d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/63ecdce87adeda688c96f8899247091f1eaac189' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1070 processed earlier; will process 9906 files now Step #5: #1 pulse cov: 3519 ft: 3520 exec/s: 0 rss: 162Mb Step #5: ==34270== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1b924d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d1bf888728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d1bf86b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d1bf86b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1b9253652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d1b91b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d1b91aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1b9245595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1bc2748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1bc2748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1bc2748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1bc2748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1bc2748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1bc2748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1bc2748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1bc2748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1bc2748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1bc2748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d1be47945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d1bb1d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1bb1e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d1baf8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d1baf8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d1baf8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d1baf8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d1baf8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d1baf8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d1bf86d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d1bf8767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d1bf85e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d1bf888fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa938554082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d1b91ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0xe0,0xa3,0x9a, Step #5: \000\000\000\000\340\243\232 Step #5: artifact_prefix='./'; Test unit written to ./oom-b30c008199aef59a61588522bbc99fcc7af543a3 Step #5: Base64: AAAAAOCjmg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 952 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4094602956 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55afb389fd60, 0x55afb3a8871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55afb3a88720,0x55afb59122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b30c008199aef59a61588522bbc99fcc7af543a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1072 processed earlier; will process 9904 files now Step #5: ==34306== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55afaa3e22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55afb0a1d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55afb0a0046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55afb0a0038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55afaa3e8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55afaa34942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55afaa343c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55afaa3da595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55afad4098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55afad4098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55afad4098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55afad4098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55afad4098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55afad4098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55afad4098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55afad4098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55afad4098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55afad4098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55afaf60e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55afac36a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55afac3755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55afac120d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55afac120d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55afac121808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55afac120944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55afac120944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55afac120944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55afb0a0294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55afb0a0b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55afb09f3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55afb0a1dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6473a52082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55afaa34243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xef,0xb8,0x8a,0xef,0xb8,0x8a,0x22, Step #5: \"\357\270\212\357\270\212\" Step #5: artifact_prefix='./'; Test unit written to ./oom-129690775a6a339af9e7ce5aa44c47a0754d5162 Step #5: Base64: Iu+4iu+4iiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 953 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4095053624 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b25b87ad60, 0x55b25ba6371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b25ba63720,0x55b25d8ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/129690775a6a339af9e7ce5aa44c47a0754d5162' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1073 processed earlier; will process 9903 files now Step #5: ==34342== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b2523bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b2589f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b2589db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b2589db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b2523c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b25232442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b25231ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b2523b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b2553e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b2553e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b2553e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b2553e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b2553e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b2553e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b2553e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b2553e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b2553e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b2553e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b2575e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b254345578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b2543505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b2540fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b2540fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b2540fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b2540fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b2540fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b2540fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b2589dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b2589e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b2589ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b2589f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7fa46d2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b25231d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0xf0,0x9e,0xa4,0xa6, Step #5: (?i)\360\236\244\246 Step #5: artifact_prefix='./'; Test unit written to ./oom-fb8fa21f7f7bef6f2a4778dc56569e543f1245b9 Step #5: Base64: KD9pKfCepKY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 954 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4095506633 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556be1dacd60, 0x556be1f9571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556be1f95720,0x556be3e1f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb8fa21f7f7bef6f2a4778dc56569e543f1245b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1074 processed earlier; will process 9902 files now Step #5: ==34378== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556bd88ef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556bdef2a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556bdef0d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556bdef0d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556bd88f5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556bd885642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556bd8850c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556bd88e7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556bdb9168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556bdb9168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556bdb9168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556bdb9168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556bdb9168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556bdb9168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556bdb9168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556bdb9168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556bdb9168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556bdb9168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556bddb1b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556bda877578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556bda8825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556bda62dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556bda62dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556bda62e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556bda62d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556bda62d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556bda62d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556bdef0f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556bdef187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556bdef00529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556bdef2afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f69266082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556bd884f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x66,0xa,0xa,0xa,0x33,0x65,0xd2, Step #5: Pf\012\012\0123e\322 Step #5: artifact_prefix='./'; Test unit written to ./oom-4736414e666457953b7a85a1482aeae0a6c16c03 Step #5: Base64: UGYKCgozZdI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 955 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4095961723 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec55f7fd60, 0x55ec5616871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec56168720,0x55ec57ff22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4736414e666457953b7a85a1482aeae0a6c16c03' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1075 processed earlier; will process 9901 files now Step #5: ==34414== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec4cac22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec530fd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec530e046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec530e038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec4cac8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec4ca2942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec4ca23c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec4caba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec4fae98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec4fae98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec4fae98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec4fae98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec4fae98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec4fae98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec4fae98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec4fae98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec4fae98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec4fae98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec51cee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec4ea4a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec4ea555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec4e800d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec4e800d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec4e801808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec4e800944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec4e800944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec4e800944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec530e294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec530eb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec530d3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec530fdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c4253c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec4ca2243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x4,0x25,0xde,0x8d,0x30, Step #5: \000\000\000\004%\336\2150 Step #5: artifact_prefix='./'; Test unit written to ./oom-d3f9cc99669fcefaabd71480441fc0fd96993253 Step #5: Base64: AAAABCXejTA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 956 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4096418236 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562c198a6d60, 0x562c19a8f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562c19a8f720,0x562c1b9192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d3f9cc99669fcefaabd71480441fc0fd96993253' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1076 processed earlier; will process 9900 files now Step #5: ==34450== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562c103e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562c16a24728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562c16a0746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562c16a0738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562c103ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562c1035042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562c1034ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562c103e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562c134108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562c134108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562c134108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562c134108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562c134108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562c134108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562c134108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562c134108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562c134108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562c134108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562c1561545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562c12371578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562c1237c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562c12127d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562c12127d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562c12128808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562c12127944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562c12127944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562c12127944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562c16a0994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562c16a127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562c169fa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562c16a24fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4e63d11082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562c1034943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x35,0x32,0x20,0x36,0x33,0x20,0x32, Step #5: P52 63 2 Step #5: artifact_prefix='./'; Test unit written to ./oom-d639eb969a5ffdf5b0a9ed9388f76098f4a39413 Step #5: Base64: UDUyIDYzIDI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 957 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4096876208 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5556c6dbad60, 0x5556c6fa371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556c6fa3720,0x5556c8e2d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d639eb969a5ffdf5b0a9ed9388f76098f4a39413' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1077 processed earlier; will process 9899 files now Step #5: ==34486== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556bd8fd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5556c3f38728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5556c3f1b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5556c3f1b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5556bd903652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5556bd86442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5556bd85ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5556bd8f5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5556c09248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5556c09248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5556c09248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5556c09248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5556c09248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5556c09248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5556c09248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5556c09248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5556c09248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5556c09248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5556c2b2945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5556bf885578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5556bf8905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5556bf63bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5556bf63bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5556bf63c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5556bf63b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5556bf63b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5556bf63b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5556c3f1d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556c3f267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5556c3f0e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5556c3f38fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5b85763082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5556bd85d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x64,0x37,0x66,0x32,0x22, Step #5: \"\\ud7f2\" Step #5: artifact_prefix='./'; Test unit written to ./oom-b987923e68d85405080e2abc1e439bb8ac1bd8e9 Step #5: Base64: Ilx1ZDdmMiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 958 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4097339974 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556aa676fd60, 0x556aa695871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556aa6958720,0x556aa87e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b987923e68d85405080e2abc1e439bb8ac1bd8e9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1078 processed earlier; will process 9898 files now Step #5: ==34522== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a9d2b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556aa38ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556aa38d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556aa38d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a9d2b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a9d21942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a9d213c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a9d2aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556aa02d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556aa02d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556aa02d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556aa02d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556aa02d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556aa02d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556aa02d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556aa02d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556aa02d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556aa02d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556aa24de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a9f23a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a9f2455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a9eff0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a9eff0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a9eff1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a9eff0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a9eff0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a9eff0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556aa38d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556aa38db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556aa38c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556aa38edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc10bf1e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a9d21243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x5b,0x5b,0x7e,0x74,0x6c,0x6c,0x5d, Step #5: %[[~tll] Step #5: artifact_prefix='./'; Test unit written to ./oom-afd127b4c2de280febf7d6e7e4e8d36186f57ac0 Step #5: Base64: JVtbfnRsbF0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 959 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4097802173 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5575e9393d60, 0x5575e957c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5575e957c720,0x5575eb4062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/afd127b4c2de280febf7d6e7e4e8d36186f57ac0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1079 processed earlier; will process 9897 files now Step #5: ==34558== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5575dfed62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5575e6511728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5575e64f446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5575e64f438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5575dfedc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5575dfe3d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5575dfe37c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5575dfece595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5575e2efd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5575e2efd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5575e2efd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5575e2efd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5575e2efd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5575e2efd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5575e2efd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5575e2efd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5575e2efd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5575e2efd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5575e510245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5575e1e5e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5575e1e695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5575e1c14d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5575e1c14d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5575e1c15808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5575e1c14944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5575e1c14944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5575e1c14944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5575e64f694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5575e64ff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5575e64e7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5575e6511fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6b443f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5575dfe3643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4,0x65,0x22,0xf3,0xb5,0x9f,0x8f,0x22, Step #5: \004e\"\363\265\237\217\" Step #5: artifact_prefix='./'; Test unit written to ./oom-9b9ddfc3b689e3ac0dd2a59dea8367d9b694d707 Step #5: Base64: BGUi87WfjyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 960 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4098251425 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb4c075d60, 0x55fb4c25e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb4c25e720,0x55fb4e0e82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9b9ddfc3b689e3ac0dd2a59dea8367d9b694d707' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1080 processed earlier; will process 9896 files now Step #5: #1 pulse cov: 3631 ft: 3632 exec/s: 0 rss: 162Mb Step #5: ==34594== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb42bb82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb491f3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb491d646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb491d638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb42bbe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb42b1f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb42b19c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb42bb0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb45bdf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb45bdf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb45bdf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb45bdf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb45bdf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb45bdf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb45bdf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb45bdf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb45bdf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb45bdf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb47de445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb44b40578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb44b4b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb448f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb448f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb448f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb448f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb448f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb448f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb491d894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb491e17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb491c9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb491f3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f913e35f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb42b1843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x57,0x31,0xf0,0x90,0x92,0xa0,0xd7, Step #5: BW1\360\220\222\240\327 Step #5: artifact_prefix='./'; Test unit written to ./oom-a81930a5cd48441ebad103d6a0609d066edafa89 Step #5: Base64: Qlcx8JCSoNc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 961 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4098758546 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564c100edd60, 0x564c102d671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564c102d6720,0x564c121602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a81930a5cd48441ebad103d6a0609d066edafa89' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1082 processed earlier; will process 9894 files now Step #5: ==34630== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564c06c302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564c0d26b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564c0d24e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564c0d24e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564c06c36652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564c06b9742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564c06b91c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564c06c28595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564c09c578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564c09c578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564c09c578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564c09c578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564c09c578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564c09c578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564c09c578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564c09c578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564c09c578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564c09c578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564c0be5c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564c08bb8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564c08bc35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564c0896ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564c0896ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564c0896f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564c0896e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564c0896e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564c0896e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564c0d25094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564c0d2597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564c0d241529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564c0d26bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce94bb0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564c06b9043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xbe,0x9c,0xd,0x69,0x6e,0xd,0xf3, Step #5: \341\276\234\015in\015\363 Step #5: artifact_prefix='./'; Test unit written to ./oom-c69e7ad5f788965f5f5fecfa5dc39abd8600b8bf Step #5: Base64: 4b6cDWluDfM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 962 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4099208619 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563d40d84d60, 0x563d40f6d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563d40f6d720,0x563d42df72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c69e7ad5f788965f5f5fecfa5dc39abd8600b8bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1083 processed earlier; will process 9893 files now Step #5: ==34666== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563d378c72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563d3df02728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563d3dee546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563d3dee538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563d378cd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563d3782e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563d37828c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563d378bf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563d3a8ee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563d3a8ee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563d3a8ee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563d3a8ee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563d3a8ee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563d3a8ee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563d3a8ee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563d3a8ee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563d3a8ee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563d3a8ee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563d3caf345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563d3984f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563d3985a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563d39605d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563d39605d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563d39606808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563d39605944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563d39605944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563d39605944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563d3dee794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563d3def07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563d3ded8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563d3df02fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd8e55d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563d3782743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x66,0xa,0xa,0xa,0x38,0x45,0x2b, Step #5: Pf\012\012\0128E+ Step #5: artifact_prefix='./'; Test unit written to ./oom-b3f16c4d30cfc9f4c271e5d7970e763157ae29c1 Step #5: Base64: UGYKCgo4RSs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 963 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4099657290 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555e8ab74d60, 0x555e8ad5d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555e8ad5d720,0x555e8cbe72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b3f16c4d30cfc9f4c271e5d7970e763157ae29c1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1084 processed earlier; will process 9892 files now Step #5: ==34702== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555e816b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555e87cf2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555e87cd546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555e87cd538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555e816bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555e8161e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555e81618c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555e816af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555e846de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555e846de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555e846de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555e846de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555e846de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555e846de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555e846de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555e846de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555e846de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555e846de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555e868e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555e8363f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555e8364a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555e833f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555e833f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555e833f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555e833f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555e833f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555e833f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555e87cd794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555e87ce07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555e87cc8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555e87cf2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbf56875082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555e8161743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x20,0x30,0x5b,0x0,0x0,0x20,0x24, Step #5: $ 0[\000\000 $ Step #5: artifact_prefix='./'; Test unit written to ./oom-80e22252ace8ae9c611ff3f7e7ed101238f74254 Step #5: Base64: JCAwWwAAICQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 964 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4100109158 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b58f0cdd60, 0x55b58f2b671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b58f2b6720,0x55b5911402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80e22252ace8ae9c611ff3f7e7ed101238f74254' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1085 processed earlier; will process 9891 files now Step #5: ==34738== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b585c102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b58c24b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b58c22e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b58c22e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b585c16652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b585b7742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b585b71c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b585c08595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b588c378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b588c378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b588c378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b588c378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b588c378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b588c378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b588c378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b588c378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b588c378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b588c378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b58ae3c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b587b98578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b587ba35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b58794ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b58794ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b58794f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b58794e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b58794e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b58794e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b58c23094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b58c2397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b58c221529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b58c24bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2fcdf99082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b585b7043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x53,0x3a,0xe3,0x8c,0x96,0xcd,0x84, Step #5: wS:\343\214\226\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-1370d0240a5a594a7286a5739a44271fce42500c Step #5: Base64: d1M644yWzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 965 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4100561860 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587f39b7d60, 0x5587f3ba071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5587f3ba0720,0x5587f5a2a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1370d0240a5a594a7286a5739a44271fce42500c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1086 processed earlier; will process 9890 files now Step #5: ==34774== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5587ea4fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5587f0b35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5587f0b1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5587f0b1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5587ea500652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5587ea46142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5587ea45bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5587ea4f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5587ed5218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5587ed5218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5587ed5218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5587ed5218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5587ed5218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5587ed5218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5587ed5218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5587ed5218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5587ed5218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5587ed5218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5587ef72645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5587ec482578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587ec48d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5587ec238d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5587ec238d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5587ec239808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5587ec238944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5587ec238944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5587ec238944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5587f0b1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5587f0b237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5587f0b0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5587f0b35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7aa5469082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5587ea45a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0x7d,0x66,0x7d,0x73,0x7d,0x73,0x7b, Step #5: n}f}s}s{ Step #5: artifact_prefix='./'; Test unit written to ./oom-6f4ec37bdad99d9b1ac4a9d577b0595ba9fca186 Step #5: Base64: bn1mfXN9c3s= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 966 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4101016033 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5614a9d3bd60, 0x5614a9f2471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5614a9f24720,0x5614abdae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6f4ec37bdad99d9b1ac4a9d577b0595ba9fca186' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1087 processed earlier; will process 9889 files now Step #5: #1 pulse cov: 3537 ft: 3538 exec/s: 0 rss: 162Mb Step #5: ==34810== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614a087e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5614a6eb9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5614a6e9c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5614a6e9c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614a0884652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5614a07e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5614a07dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614a0876595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5614a38a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5614a38a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5614a38a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5614a38a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5614a38a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5614a38a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5614a38a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5614a38a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5614a38a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5614a38a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5614a5aaa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5614a2806578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5614a28115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5614a25bcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5614a25bcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5614a25bd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5614a25bc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5614a25bc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5614a25bc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5614a6e9e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5614a6ea77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5614a6e8f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5614a6eb9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c4da19082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5614a07de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x30,0x30,0x30,0x42,0x3c,0xdb,0xbe, Step #5: 0000B<\333\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-094953fbe3ec485ff89ff9b935023c61ba843ac4 Step #5: Base64: MDAwMEI8274= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 967 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4101525275 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561fb324dd60, 0x561fb343671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561fb3436720,0x561fb52c02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/094953fbe3ec485ff89ff9b935023c61ba843ac4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1089 processed earlier; will process 9887 files now Step #5: ==34846== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561fa9d902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561fb03cb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561fb03ae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561fb03ae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561fa9d96652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561fa9cf742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561fa9cf1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561fa9d88595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561facdb78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561facdb78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561facdb78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561facdb78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561facdb78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561facdb78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561facdb78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561facdb78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561facdb78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561facdb78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561faefbc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561fabd18578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561fabd235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561fabaced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561fabaced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561fabacf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561fabace944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561fabace944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561fabace944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561fb03b094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561fb03b97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561fb03a1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561fb03cbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f378f16a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561fa9cf043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xe6,0x9d,0x9d,0xe7,0x9d,0x9d,0x3e, Step #5: <\346\235\235\347\235\235> Step #5: artifact_prefix='./'; Test unit written to ./oom-7f6faefbbbe50225222ceef7a817b5c158a2f0e3 Step #5: Base64: POadneednT4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 968 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4101963687 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555e1da71d60, 0x555e1dc5a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555e1dc5a720,0x555e1fae42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f6faefbbbe50225222ceef7a817b5c158a2f0e3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1090 processed earlier; will process 9886 files now Step #5: ==34882== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555e145b42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555e1abef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555e1abd246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555e1abd238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555e145ba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555e1451b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555e14515c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555e145ac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555e175db8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555e175db8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555e175db8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555e175db8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555e175db8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555e175db8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555e175db8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555e175db8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555e175db8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555e175db8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555e197e045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555e1653c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555e165475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555e162f2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555e162f2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555e162f3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555e162f2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555e162f2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555e162f2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555e1abd494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555e1abdd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555e1abc5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555e1abeffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc168a4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555e1451443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60, Step #5: _`_`_`_` Step #5: artifact_prefix='./'; Test unit written to ./oom-5ef2c6a17c6de85e0e5856740525712975d5050f Step #5: Base64: X2BfYF9gX2A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 969 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4102550221 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5558bf7abd60, 0x5558bf99471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5558bf994720,0x5558c181e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ef2c6a17c6de85e0e5856740525712975d5050f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1091 processed earlier; will process 9885 files now Step #5: ==34918== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5558b62ee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5558bc929728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5558bc90c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5558bc90c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5558b62f4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5558b625542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5558b624fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5558b62e6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5558b93158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5558b93158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5558b93158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5558b93158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5558b93158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5558b93158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5558b93158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5558b93158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5558b93158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5558b93158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5558bb51a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5558b8276578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5558b82815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5558b802cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5558b802cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5558b802d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5558b802c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5558b802c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5558b802c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5558bc90e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5558bc9177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5558bc8ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5558bc929fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4fd3a27082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5558b624e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x20,0x20,0x20,0x20,0x0,0x80,0x25, Step #5: \000\200% Step #5: artifact_prefix='./'; Test unit written to ./oom-ba9ede4177a5379383b39f38e7a05f496e57c253 Step #5: Base64: ICAgICAAgCU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 970 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4103008279 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e68587cd60, 0x55e685a6571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e685a65720,0x55e6878ef2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ba9ede4177a5379383b39f38e7a05f496e57c253' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1092 processed earlier; will process 9884 files now Step #5: ==34954== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e67c3bf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e6829fa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e6829dd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e6829dd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e67c3c5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e67c32642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e67c320c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e67c3b7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e67f3e68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e67f3e68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e67f3e68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e67f3e68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e67f3e68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e67f3e68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e67f3e68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e67f3e68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e67f3e68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e67f3e68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e6815eb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e67e347578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e67e3525a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e67e0fdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e67e0fdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e67e0fe808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e67e0fd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e67e0fd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e67e0fd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e6829df94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e6829e87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e6829d0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e6829fafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4efd620082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e67c31f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0x6d,0x74,0x78,0x69,0x3f,0x57,0x4f, Step #5: hmtxi?WO Step #5: artifact_prefix='./'; Test unit written to ./oom-597f18c7ba2c873939f07274ef57b5a8519cf10a Step #5: Base64: aG10eGk/V08= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 971 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4103466116 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556c56cc3d60, 0x556c56eac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556c56eac720,0x556c58d362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/597f18c7ba2c873939f07274ef57b5a8519cf10a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1093 processed earlier; will process 9883 files now Step #5: ==34990== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556c4d8062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556c53e41728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556c53e2446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556c53e2438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556c4d80c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556c4d76d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556c4d767c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556c4d7fe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556c5082d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556c5082d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556c5082d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556c5082d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556c5082d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556c5082d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556c5082d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556c5082d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556c5082d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556c5082d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556c52a3245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556c4f78e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556c4f7995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556c4f544d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556c4f544d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556c4f545808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556c4f544944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556c4f544944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556c4f544944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556c53e2694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556c53e2f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556c53e17529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556c53e41fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1e573cd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556c4d76643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0xb2,0x0,0x6d,0x61,0x4d, Step #5: \363\240\200\262\000maM Step #5: artifact_prefix='./'; Test unit written to ./oom-f4c2433e9f7c998c4d8276345c5133fb09e8fefc Step #5: Base64: 86CAsgBtYU0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 972 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4103928649 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564da4b99d60, 0x564da4d8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564da4d82720,0x564da6c0c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f4c2433e9f7c998c4d8276345c5133fb09e8fefc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1094 processed earlier; will process 9882 files now Step #5: ==35026== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564d9b6dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564da1d17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564da1cfa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564da1cfa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564d9b6e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564d9b64342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564d9b63dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564d9b6d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564d9e7038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564d9e7038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564d9e7038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564d9e7038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564d9e7038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564d9e7038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564d9e7038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564d9e7038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564d9e7038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564d9e7038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564da090845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564d9d664578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564d9d66f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564d9d41ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564d9d41ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564d9d41b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564d9d41a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564d9d41a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564d9d41a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564da1cfc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564da1d057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564da1ced529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564da1d17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3da8c09082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564d9b63c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6c,0x6f,0x6e,0x6d,0x9,0x0,0x0,0x0, Step #5: lonm\011\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4d4a713f2058c346b3122af985165f77bcf56b32 Step #5: Base64: bG9ubQkAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 973 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4104389930 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564be9b1cd60, 0x564be9d0571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564be9d05720,0x564bebb8f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4d4a713f2058c346b3122af985165f77bcf56b32' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1095 processed earlier; will process 9881 files now Step #5: #1 pulse cov: 6548 ft: 6549 exec/s: 0 rss: 177Mb Step #5: ==35062== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564be065f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564be6c9a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564be6c7d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564be6c7d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564be0665652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564be05c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564be05c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564be0657595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564be36868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564be36868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564be36868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564be36868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564be36868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564be36868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564be36868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564be36868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564be36868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564be36868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564be588b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564be25e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564be25f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564be239dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564be239dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564be239e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564be239d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564be239d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564be239d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564be6c7f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564be6c887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564be6c70529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564be6c9afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f420e393082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564be05bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xb6,0xb6,0xfe,0xf3,0xf3,0x81,0x4f, Step #5: \326\266\266\376\363\363\201O Step #5: artifact_prefix='./'; Test unit written to ./oom-14367d48aef8ddfb5497414a8f2d07a13ebffc9d Step #5: Base64: 1ra2/vPzgU8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 974 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4104908266 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561b2dd0ad60, 0x561b2def371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561b2def3720,0x561b2fd7d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/14367d48aef8ddfb5497414a8f2d07a13ebffc9d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1097 processed earlier; will process 9879 files now Step #5: #1 pulse cov: 3636 ft: 3637 exec/s: 0 rss: 162Mb Step #5: #2 pulse cov: 3892 ft: 4158 exec/s: 0 rss: 164Mb Step #5: ==35098== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561b2484d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561b2ae88728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561b2ae6b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561b2ae6b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561b24853652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561b247b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561b247aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561b24845595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561b278748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561b278748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561b278748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561b278748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561b278748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561b278748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561b278748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561b278748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561b278748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561b278748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561b29a7945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561b267d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561b267e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561b2658bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561b2658bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561b2658c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561b2658b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561b2658b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561b2658b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561b2ae6d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561b2ae767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561b2ae5e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561b2ae88fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f951a587082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561b247ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x70,0x64,0x41,0x42,0x69,0x68,0x67,0x77, Step #5: pdABihgw Step #5: artifact_prefix='./'; Test unit written to ./oom-5f228ab37850e111beed784e2577f42ae4090c4b Step #5: Base64: cGRBQmloZ3c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 975 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4105438395 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c13fe58d60, 0x55c14004171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c140041720,0x55c141ecb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5f228ab37850e111beed784e2577f42ae4090c4b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1100 processed earlier; will process 9876 files now Step #5: #1 pulse cov: 3666 ft: 3667 exec/s: 0 rss: 164Mb Step #5: #2 pulse cov: 3965 ft: 4220 exec/s: 0 rss: 165Mb Step #5: ==35134== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c13699b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c13cfd6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c13cfb946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c13cfb938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c1369a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c13690242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c1368fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c136993595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1399c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1399c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1399c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1399c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1399c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1399c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1399c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1399c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1399c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1399c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c13bbc745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c138923578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c13892e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c1386d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c1386d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c1386da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c1386d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c1386d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c1386d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c13cfbb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c13cfc47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c13cfac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c13cfd6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffa1afec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c1368fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x3f,0x3a,0x24,0x7c,0x24,0x29, Step #5: ^(?:$|$) Step #5: artifact_prefix='./'; Test unit written to ./oom-e92a0c092b41be291fd2e66eda8bfd6889716c3c Step #5: Base64: Xig/OiR8JCk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 976 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4105971802 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5638642ced60, 0x5638644b771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5638644b7720,0x5638663412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e92a0c092b41be291fd2e66eda8bfd6889716c3c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1103 processed earlier; will process 9873 files now Step #5: ==35170== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56385ae112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56386144c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56386142f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56386142f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56385ae17652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56385ad7842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56385ad72c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56385ae09595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56385de388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56385de388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56385de388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56385de388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56385de388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56385de388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56385de388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56385de388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56385de388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56385de388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56386003d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56385cd99578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56385cda45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56385cb4fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56385cb4fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56385cb50808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56385cb4f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56385cb4f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56385cb4f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56386143194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56386143a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563861422529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56386144cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2b3551082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56385ad7143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x24,0x24,0x33,0x55, Step #5: DanM$$3U Step #5: artifact_prefix='./'; Test unit written to ./oom-b7b03a01aa0a080af5fbcbfb5488ee13d66d6574 Step #5: Base64: RGFuTSQkM1U= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 977 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4106427099 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f94cacbd60, 0x55f94ccb471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f94ccb4720,0x55f94eb3e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b7b03a01aa0a080af5fbcbfb5488ee13d66d6574' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1104 processed earlier; will process 9872 files now Step #5: ==35206== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f94360e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f949c49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f949c2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f949c2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f943614652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f94357542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f94356fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f943606595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9466358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9466358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9466358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9466358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9466358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9466358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9466358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9466358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9466358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9466358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f94883a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f945596578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9455a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f94534cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f94534cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f94534d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f94534c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f94534c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f94534c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f949c2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f949c377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f949c1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f949c49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb2e5561082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f94356e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x53,0x0,0x0,0x0,0x0,0xda,0xb4, Step #5: /S\000\000\000\000\332\264 Step #5: artifact_prefix='./'; Test unit written to ./oom-cf0e131b80536467a003699064106c73080ea1ca Step #5: Base64: L1MAAAAA2rQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 978 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4106881022 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d14f3bd60, 0x556d1512471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d15124720,0x556d16fae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cf0e131b80536467a003699064106c73080ea1ca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1105 processed earlier; will process 9871 files now Step #5: ==35242== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d0ba7e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d120b9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d1209c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d1209c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d0ba84652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d0b9e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d0b9dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d0ba76595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d0eaa58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d0eaa58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d0eaa58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d0eaa58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d0eaa58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d0eaa58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d0eaa58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d0eaa58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d0eaa58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d0eaa58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d10caa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d0da06578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d0da115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d0d7bcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d0d7bcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d0d7bd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d0d7bc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d0d7bc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d0d7bc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d1209e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d120a77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d1208f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d120b9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa2993ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d0b9de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f,0x5c,0x75,0xc,0x0,0x0,0x0, Step #5: //\\u\014\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-343d0be8b9446b1eea45385f623a09ffee47f749 Step #5: Base64: Ly9cdQwAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 979 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4107329942 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559c1f29ed60, 0x559c1f48771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559c1f487720,0x559c213112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/343d0be8b9446b1eea45385f623a09ffee47f749' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1106 processed earlier; will process 9870 files now Step #5: ==35278== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559c15de12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559c1c41c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559c1c3ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559c1c3ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559c15de7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559c15d4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559c15d42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559c15dd9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559c18e088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559c18e088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559c18e088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559c18e088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559c18e088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559c18e088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559c18e088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559c18e088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559c18e088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559c18e088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559c1b00d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559c17d69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559c17d745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559c17b1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559c17b1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559c17b20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559c17b1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559c17b1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559c17b1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559c1c40194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559c1c40a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559c1c3f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559c1c41cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd50c579082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559c15d4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x3a,0x2f,0x2f,0xf4,0x88,0xa9,0xbe, Step #5: f://\364\210\251\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-388ec629d162df8c264c005f48294542db621554 Step #5: Base64: ZjovL/SIqb4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 980 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4107790453 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b870c3bd60, 0x55b870e2471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b870e24720,0x55b872cae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/388ec629d162df8c264c005f48294542db621554' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1107 processed earlier; will process 9869 files now Step #5: ==35314== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b86777e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b86ddb9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b86dd9c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b86dd9c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b867784652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8676e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8676dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b867776595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b86a7a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b86a7a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b86a7a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b86a7a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b86a7a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b86a7a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b86a7a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b86a7a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b86a7a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b86a7a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b86c9aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b869706578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8697115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8694bcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8694bcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8694bd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8694bc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8694bc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8694bc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b86dd9e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b86dda77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b86dd8f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b86ddb9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f11a07fc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8676de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x5c,0x72,0x5c,0x7b,0x5c,0x32,0x2f, Step #5: /\\r\\{\\2/ Step #5: artifact_prefix='./'; Test unit written to ./oom-4dad1033f2706cebee2a79b5e921418cc70d6b7b Step #5: Base64: L1xyXHtcMi8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 981 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4108245805 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55603eb6bd60, 0x55603ed5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55603ed54720,0x556040bde2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4dad1033f2706cebee2a79b5e921418cc70d6b7b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1108 processed earlier; will process 9868 files now Step #5: ==35350== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560356ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55603bce9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55603bccc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55603bccc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560356b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55603561542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55603560fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560356a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560386d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560386d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560386d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560386d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560386d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560386d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560386d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560386d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560386d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560386d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55603a8da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556037636578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560376415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560373ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560373ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560373ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560373ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560373ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560373ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55603bcce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55603bcd77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55603bcbf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55603bce9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc840624082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55603560e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x6a, Step #5: 1******j Step #5: artifact_prefix='./'; Test unit written to ./oom-97005b37a72c6a43ef041e9b158c75fe04584b63 Step #5: Base64: MSoqKioqKmo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 982 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4108701028 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f68e03d60, 0x557f68fec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f68fec720,0x557f6ae762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/97005b37a72c6a43ef041e9b158c75fe04584b63' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1109 processed earlier; will process 9867 files now Step #5: ==35386== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f5f9462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f65f81728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f65f6446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f65f6438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f5f94c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f5f8ad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f5f8a7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f5f93e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f6296d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f6296d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f6296d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f6296d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f6296d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f6296d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f6296d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f6296d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f6296d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f6296d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f64b7245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f618ce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f618d95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f61684d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f61684d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f61685808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f61684944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f61684944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f61684944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f65f6694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f65f6f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f65f57529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f65f81fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f73af12e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f5f8a643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x4,0xf0,0x9b,0xb2,0x9d, Step #5: \000\000\000\004\360\233\262\235 Step #5: artifact_prefix='./'; Test unit written to ./oom-447d929972cf5e367aed8ceccc4de1a0146b564e Step #5: Base64: AAAABPCbsp0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 983 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4109150455 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55929311ed60, 0x55929330771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559293307720,0x5592951912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/447d929972cf5e367aed8ceccc4de1a0146b564e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1110 processed earlier; will process 9866 files now Step #5: #1 pulse cov: 3488 ft: 3489 exec/s: 0 rss: 163Mb Step #5: ==35422== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559289c612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55929029c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55929027f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55929027f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559289c67652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559289bc842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559289bc2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559289c59595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55928cc888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55928cc888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55928cc888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55928cc888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55928cc888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55928cc888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55928cc888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55928cc888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55928cc888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55928cc888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55928ee8d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55928bbe9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55928bbf45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55928b99fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55928b99fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55928b9a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55928b99f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55928b99f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55928b99f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55929028194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55929028a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559290272529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55929029cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd8993be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559289bc143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xa,0x3d,0xbe,0x3d,0xa,0x3d,0x3d, Step #5: =\012=\276=\012== Step #5: artifact_prefix='./'; Test unit written to ./oom-96b29434805af9ca94e090bee0eb9d670268dfaf Step #5: Base64: PQo9vj0KPT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 984 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4109635077 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5586b99a5d60, 0x5586b9b8e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5586b9b8e720,0x5586bba182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/96b29434805af9ca94e090bee0eb9d670268dfaf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1112 processed earlier; will process 9864 files now Step #5: ==35458== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5586b04e82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5586b6b23728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5586b6b0646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5586b6b0638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5586b04ee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5586b044f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5586b0449c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5586b04e0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5586b350f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5586b350f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5586b350f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5586b350f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5586b350f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5586b350f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5586b350f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5586b350f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5586b350f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5586b350f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5586b571445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5586b2470578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5586b247b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5586b2226d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5586b2226d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5586b2227808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5586b2226944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5586b2226944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5586b2226944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5586b6b0894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5586b6b117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5586b6af9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5586b6b23fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2109756082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5586b044843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x7b,0x46,0x7d,0x5c,0x75, Step #5: \"\\u{F}\\u Step #5: artifact_prefix='./'; Test unit written to ./oom-643b48f1edab5bfd5be5d0c0d45d69a8e51a0b28 Step #5: Base64: Ilx1e0Z9XHU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 985 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4110093307 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5612948add60, 0x561294a9671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561294a96720,0x5612969202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/643b48f1edab5bfd5be5d0c0d45d69a8e51a0b28' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1113 processed earlier; will process 9863 files now Step #5: ==35494== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56128b3f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561291a2b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561291a0e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561291a0e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56128b3f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56128b35742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56128b351c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56128b3e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56128e4178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56128e4178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56128e4178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56128e4178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56128e4178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56128e4178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56128e4178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56128e4178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56128e4178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56128e4178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56129061c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56128d378578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56128d3835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56128d12ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56128d12ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56128d12f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56128d12e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56128d12e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56128d12e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561291a1094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561291a197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561291a01529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561291a2bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc9ff891082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56128b35043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0xa,0x20,0x3,0xf3,0xff,0x1, Step #5: $$\012 \003\363\377\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-246b95f7ed04830c6d085453306f0cd11091f554 Step #5: Base64: JCQKIAPz/wE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 986 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4110548982 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55693ba75d60, 0x55693bc5e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55693bc5e720,0x55693dae82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/246b95f7ed04830c6d085453306f0cd11091f554' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1114 processed earlier; will process 9862 files now Step #5: ==35530== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5569325b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556938bf3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556938bd646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556938bd638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5569325be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55693251f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556932519c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5569325b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569355df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569355df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569355df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569355df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569355df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569355df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569355df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569355df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569355df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569355df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569377e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556934540578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55693454b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5569342f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5569342f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5569342f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5569342f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5569342f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5569342f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556938bd894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556938be17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556938bc9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556938bf3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff4fb30b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55693251843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0xbf,0xbd,0xf4,0x8f,0xb5,0xbd, Step #5: \364\217\277\275\364\217\265\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-9bc5fc5795cfe9dea5e6a81d36e3a146f16724ea Step #5: Base64: 9I+/vfSPtb0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 987 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4111002501 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bcef8a1d60, 0x55bcefa8a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bcefa8a720,0x55bcf19142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9bc5fc5795cfe9dea5e6a81d36e3a146f16724ea' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1115 processed earlier; will process 9861 files now Step #5: ==35566== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bce63e42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bceca1f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bceca0246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bceca0238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bce63ea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bce634b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bce6345c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bce63dc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bce940b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bce940b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bce940b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bce940b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bce940b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bce940b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bce940b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bce940b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bce940b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bce940b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bceb61045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bce836c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bce83775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bce8122d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bce8122d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bce8123808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bce8122944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bce8122944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bce8122944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bceca0494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bceca0d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bcec9f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bceca1ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f60ed81c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bce634443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x65,0x3f,0x6e,0x3f,0x65,0x3f,0x6e, Step #5: ?e?n?e?n Step #5: artifact_prefix='./'; Test unit written to ./oom-24d668ac38e46b20a63074eaf823e79127bf9369 Step #5: Base64: P2U/bj9lP24= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 988 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4111462234 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f03bb36d60, 0x55f03bd1f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f03bd1f720,0x55f03dba92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/24d668ac38e46b20a63074eaf823e79127bf9369' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1116 processed earlier; will process 9860 files now Step #5: ==35602== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f0326792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f038cb4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f038c9746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f038c9738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f03267f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f0325e042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f0325dac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f032671595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f0356a08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f0356a08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f0356a08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f0356a08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f0356a08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f0356a08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f0356a08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f0356a08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f0356a08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f0356a08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f0378a545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f034601578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f03460c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f0343b7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f0343b7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f0343b8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f0343b7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f0343b7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f0343b7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f038c9994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f038ca27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f038c8a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f038cb4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2a22c7d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f0325d943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x2c,0x30,0xa,0x2d,0x31,0x2c,0x33, Step #5: 0,0\012-1,3 Step #5: artifact_prefix='./'; Test unit written to ./oom-401f037b382f529ec108b70d844b22ee9bc6c74b Step #5: Base64: MCwwCi0xLDM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 989 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4111935118 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b6946edd60, 0x55b6948d671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b6948d6720,0x55b6967602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/401f037b382f529ec108b70d844b22ee9bc6c74b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1117 processed earlier; will process 9859 files now Step #5: ==35638== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b68b2302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b69186b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b69184e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b69184e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b68b236652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b68b19742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b68b191c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b68b228595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b68e2578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b68e2578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b68e2578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b68e2578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b68e2578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b68e2578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b68e2578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b68e2578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b68e2578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b68e2578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b69045c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b68d1b8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b68d1c35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b68cf6ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b68cf6ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b68cf6f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b68cf6e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b68cf6e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b68cf6e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b69185094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b6918597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b691841529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b69186bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6be0e20082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b68b19043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0xc4,0xb2,0x35,0x0,0x44,0x92,0x35, Step #5: a\304\2625\000D\2225 Step #5: artifact_prefix='./'; Test unit written to ./oom-a3ef4cc889b5cded3aae108377a987c483fe2654 Step #5: Base64: YcSyNQBEkjU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 990 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4112406338 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e09d987d60, 0x55e09db7071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e09db70720,0x55e09f9fa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a3ef4cc889b5cded3aae108377a987c483fe2654' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1118 processed earlier; will process 9858 files now Step #5: ==35674== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e0944ca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e09ab05728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e09aae846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e09aae838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e0944d0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e09443142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e09442bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e0944c2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e0974f18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e0974f18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e0974f18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e0974f18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e0974f18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e0974f18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e0974f18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e0974f18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e0974f18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e0974f18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e0996f645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e096452578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e09645d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e096208d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e096208d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e096209808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e096208944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e096208944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e096208944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e09aaea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e09aaf37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e09aadb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e09ab05fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faf1141f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e09442a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x43,0x46,0x46,0x20,0xc2,0xbd,0x27, Step #5: SCFF \302\275' Step #5: artifact_prefix='./'; Test unit written to ./oom-e3d54623d04c9f72c009ff23e0cf74ce07a6c483 Step #5: Base64: U0NGRiDCvSc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 991 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4112879968 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b28351d60, 0x558b2853a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b2853a720,0x558b2a3c42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e3d54623d04c9f72c009ff23e0cf74ce07a6c483' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1119 processed earlier; will process 9857 files now Step #5: #1 pulse cov: 6559 ft: 6560 exec/s: 0 rss: 174Mb Step #5: ==35710== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b1ee942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b254cf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b254b246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b254b238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b1ee9a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b1edfb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b1edf5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b1ee8c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b21ebb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b21ebb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b21ebb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b21ebb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b21ebb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b21ebb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b21ebb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b21ebb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b21ebb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b21ebb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b240c045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b20e1c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b20e275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b20bd2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b20bd2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b20bd3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b20bd2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b20bd2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b20bd2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b254b494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b254bd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b254a5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b254cffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6b34468082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b1edf443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x60,0x44,0x60,0xf3,0x4d,0xa2,0x4d, Step #5: D`D`\363M\242M Step #5: artifact_prefix='./'; Test unit written to ./oom-9c03df3320069eda85de88f640306bdbf7f22ada Step #5: Base64: RGBEYPNNok0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 992 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4113516183 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b38839bd60, 0x55b38858471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b388584720,0x55b38a40e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9c03df3320069eda85de88f640306bdbf7f22ada' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1121 processed earlier; will process 9855 files now Step #5: ==35746== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b37eede2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b385519728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b3854fc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b3854fc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b37eee4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b37ee4542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b37ee3fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b37eed6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b381f058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b381f058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b381f058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b381f058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b381f058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b381f058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b381f058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b381f058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b381f058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b381f058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b38410a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b380e66578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b380e715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b380c1cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b380c1cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b380c1d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b380c1c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b380c1c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b380c1c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b3854fe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b3855077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b3854ef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b385519fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a757d5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b37ee3e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0x3a,0x2f,0x0,0xcd,0x95,0xcd,0x95, Step #5: X:/\000\315\225\315\225 Step #5: artifact_prefix='./'; Test unit written to ./oom-25ef9d86a647f7565d18b29068dbc3c572b473fc Step #5: Base64: WDovAM2VzZU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 993 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4113973861 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b9fb1dad60, 0x55b9fb3c371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b9fb3c3720,0x55b9fd24d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/25ef9d86a647f7565d18b29068dbc3c572b473fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1122 processed earlier; will process 9854 files now Step #5: ==35782== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b9f1d1d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b9f8358728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b9f833b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b9f833b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b9f1d23652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b9f1c8442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b9f1c7ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b9f1d15595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9f4d448c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9f4d448c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9f4d448c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9f4d448c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9f4d448c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9f4d448c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9f4d448c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9f4d448c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9f4d448c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9f4d448c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b9f6f4945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9f3ca5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9f3cb05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b9f3a5bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b9f3a5bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b9f3a5c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b9f3a5b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b9f3a5b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b9f3a5b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b9f833d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b9f83467b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b9f832e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b9f8358fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f932ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b9f1c7d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c,0x60,0x7c,0xd,0x20,0x60,0xd,0x35, Step #5: |`|\015 `\0155 Step #5: artifact_prefix='./'; Test unit written to ./oom-9050b8b1250074676aa6b75848e0d74e3bc36d01 Step #5: Base64: fGB8DSBgDTU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 994 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4114552440 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c9528ad60, 0x557c9547371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c95473720,0x557c972fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9050b8b1250074676aa6b75848e0d74e3bc36d01' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1123 processed earlier; will process 9853 files now Step #5: ==35818== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c8bdcd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c92408728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c923eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c923eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c8bdd3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c8bd3442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c8bd2ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c8bdc5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c8edf48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c8edf48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c8edf48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c8edf48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c8edf48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c8edf48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c8edf48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c8edf48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c8edf48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c8edf48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c90ff945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c8dd55578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c8dd605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c8db0bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c8db0bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c8db0c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c8db0b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c8db0b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c8db0b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c923ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c923f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c923de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c92408fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1156a98082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c8bd2d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x8, Step #5: \001\000\000\000\000\000\000\010 Step #5: artifact_prefix='./'; Test unit written to ./oom-970c55f162cce5bdaf93b3990a98bac077cfbd75 Step #5: Base64: AQAAAAAAAAg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 995 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4115008976 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561406bf0d60, 0x561406dd971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561406dd9720,0x561408c632c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/970c55f162cce5bdaf93b3990a98bac077cfbd75' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1124 processed earlier; will process 9852 files now Step #5: ==35854== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5613fd7332d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561403d6e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561403d5146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561403d5138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5613fd739652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5613fd69a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5613fd694c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5613fd72b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56140075a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56140075a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56140075a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56140075a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56140075a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56140075a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56140075a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56140075a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56140075a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56140075a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56140295f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5613ff6bb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5613ff6c65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5613ff471d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5613ff471d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5613ff472808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5613ff471944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5613ff471944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5613ff471944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561403d5394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561403d5c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561403d44529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561403d6efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba2cf4a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5613fd69343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x0,0xd,0x0,0x10,0x0,0x0,0x0, Step #5: \001\000\015\000\020\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-070134a7b9826ff728ae4e6404f17dbcc123a8a6 Step #5: Base64: AQANABAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 996 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4115464454 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f940482d60, 0x55f94066b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f94066b720,0x55f9424f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/070134a7b9826ff728ae4e6404f17dbcc123a8a6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1125 processed earlier; will process 9851 files now Step #5: ==35890== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f936fc52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f93d600728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f93d5e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f93d5e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f936fcb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f936f2c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f936f26c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f936fbd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f939fec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f939fec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f939fec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f939fec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f939fec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f939fec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f939fec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f939fec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f939fec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f939fec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f93c1f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f938f4d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f938f585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f938d03d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f938d03d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f938d04808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f938d03944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f938d03944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f938d03944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f93d5e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f93d5ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f93d5d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f93d600fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f043c37f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f936f2543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x5e,0x49,0xc4,0x35, Step #5: DanM^I\3045 Step #5: artifact_prefix='./'; Test unit written to ./oom-78a5427573c6ec3b6f57688d9582bc09e08cb018 Step #5: Base64: RGFuTV5JxDU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 997 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4115924298 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e9f90bed60, 0x55e9f92a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e9f92a7720,0x55e9fb1312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/78a5427573c6ec3b6f57688d9582bc09e08cb018' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1126 processed earlier; will process 9850 files now Step #5: ==35926== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e9efc012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e9f623c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e9f621f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e9f621f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e9efc07652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e9efb6842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e9efb62c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e9efbf9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9f2c288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9f2c288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9f2c288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9f2c288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9f2c288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9f2c288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9f2c288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9f2c288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9f2c288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9f2c288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e9f4e2d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e9f1b89578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e9f1b945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e9f193fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e9f193fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e9f1940808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e9f193f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e9f193f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e9f193f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e9f622194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e9f622a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e9f6212529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e9f623cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8cf36b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e9efb6143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x0,0x20,0x0,0x20,0x0,0x20,0x0, Step #5: \000 \000 \000 \000 Step #5: artifact_prefix='./'; Test unit written to ./oom-28be9a569dccaecc3746aa7945f873f6cd56f68e Step #5: Base64: IAAgACAAIAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 998 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4116378511 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a374013d60, 0x55a3741fc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a3741fc720,0x55a3760862c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28be9a569dccaecc3746aa7945f873f6cd56f68e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1127 processed earlier; will process 9849 files now Step #5: ==35962== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a36ab562d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a371191728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a37117446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a37117438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a36ab5c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a36aabd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a36aab7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a36ab4e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a36db7d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a36db7d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a36db7d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a36db7d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a36db7d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a36db7d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a36db7d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a36db7d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a36db7d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a36db7d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a36fd8245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a36cade578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a36cae95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a36c894d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a36c894d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a36c895808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a36c894944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a36c894944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a36c894944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a37117694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a37117f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a371167529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a371191fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f248dea4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a36aab643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7a,0x7b,0x22,0xb,0x2d,0x2e,0x30,0x2e, Step #5: z{\"\013-.0. Step #5: artifact_prefix='./'; Test unit written to ./oom-7714b59d11ecfdcb718e3e60290034d645297f02 Step #5: Base64: ensiCy0uMC4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 999 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4116839523 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e6e6169d60, 0x55e6e635271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e6e6352720,0x55e6e81dc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7714b59d11ecfdcb718e3e60290034d645297f02' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1128 processed earlier; will process 9848 files now Step #5: ==35998== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e6dccac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e6e32e7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e6e32ca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e6e32ca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e6dccb2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e6dcc1342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e6dcc0dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e6dcca4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e6dfcd38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e6dfcd38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e6dfcd38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e6dfcd38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e6dfcd38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e6dfcd38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e6dfcd38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e6dfcd38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e6dfcd38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e6dfcd38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e6e1ed845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e6dec34578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e6dec3f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e6de9ead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e6de9ead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e6de9eb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e6de9ea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e6de9ea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e6de9ea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e6e32cc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e6e32d57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e6e32bd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e6e32e7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25f2819082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e6dcc0c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5,0x28,0x0,0x1d,0x79,0x0,0x0,0x0, Step #5: \005(\000\035y\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-c4565630280169dbbee72fbc0b1582e258daa7d5 Step #5: Base64: BSgAHXkAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1000 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4117292322 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d2b213ed60, 0x55d2b232771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d2b2327720,0x55d2b41b12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c4565630280169dbbee72fbc0b1582e258daa7d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1129 processed earlier; will process 9847 files now Step #5: #1 pulse cov: 3557 ft: 3558 exec/s: 0 rss: 161Mb Step #5: ==36034== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d2a8c812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d2af2bc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d2af29f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d2af29f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d2a8c87652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d2a8be842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d2a8be2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d2a8c79595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d2abca88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d2abca88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d2abca88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d2abca88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d2abca88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d2abca88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d2abca88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d2abca88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d2abca88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d2abca88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d2adead45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d2aac09578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d2aac145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d2aa9bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d2aa9bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d2aa9c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d2aa9bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d2aa9bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d2aa9bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d2af2a194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d2af2aa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d2af292529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d2af2bcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa1350ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d2a8be143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x74,0x70,0x1a,0x2f,0x2a,0x2f,0x7f, Step #5: ttp\032/*/\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-7f1683856865c0538df8a69507009c25f7bc1381 Step #5: Base64: dHRwGi8qL38= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1001 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4117799666 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b25146ad60, 0x55b25165371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b251653720,0x55b2534dd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f1683856865c0538df8a69507009c25f7bc1381' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1131 processed earlier; will process 9845 files now Step #5: ==36070== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b247fad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b24e5e8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b24e5cb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b24e5cb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b247fb3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b247f1442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b247f0ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b247fa5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b24afd48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b24afd48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b24afd48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b24afd48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b24afd48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b24afd48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b24afd48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b24afd48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b24afd48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b24afd48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b24d1d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b249f35578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b249f405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b249cebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b249cebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b249cec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b249ceb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b249ceb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b249ceb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b24e5cd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b24e5d67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b24e5be529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b24e5e8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9728db8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b247f0d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x36,0x5a,0x29,0x5e,0x2d,0x32,0x34, Step #5: (6Z)^-24 Step #5: artifact_prefix='./'; Test unit written to ./oom-cc57418c218300e0c24a4554da2500d3725e6157 Step #5: Base64: KDZaKV4tMjQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1002 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4118251798 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5608804b7d60, 0x5608806a071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5608806a0720,0x56088252a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc57418c218300e0c24a4554da2500d3725e6157' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1132 processed earlier; will process 9844 files now Step #5: ==36106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560876ffa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56087d635728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56087d61846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56087d61838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560877000652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560876f6142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560876f5bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560876ff2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56087a0218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56087a0218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56087a0218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56087a0218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56087a0218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56087a0218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56087a0218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56087a0218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56087a0218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56087a0218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56087c22645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560878f82578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560878f8d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560878d38d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560878d38d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560878d39808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560878d38944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560878d38944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560878d38944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56087d61a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56087d6237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56087d60b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56087d635fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8c83b18082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560876f5a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x2,0xa,0xa,0x1,0x0,0x2,0xf1, Step #5: \002\002\012\012\001\000\002\361 Step #5: artifact_prefix='./'; Test unit written to ./oom-4699546f02604485547dd6348f474b80cbb5546e Step #5: Base64: AgIKCgEAAvE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1003 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4118712279 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560931510d60, 0x5609316f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5609316f9720,0x5609335832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4699546f02604485547dd6348f474b80cbb5546e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1133 processed earlier; will process 9843 files now Step #5: ==36142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609280532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56092e68e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56092e67146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56092e67138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560928059652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560927fba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560927fb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56092804b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56092b07a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56092b07a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56092b07a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56092b07a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56092b07a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56092b07a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56092b07a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56092b07a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56092b07a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56092b07a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56092d27f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560929fdb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560929fe65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560929d91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560929d91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560929d92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560929d91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560929d91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560929d91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56092e67394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56092e67c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56092e664529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56092e68efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb83f7fd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560927fb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x25,0x3f,0x25,0x3f,0x25,0x3f,0x25, Step #5: ?%?%?%?% Step #5: artifact_prefix='./'; Test unit written to ./oom-2fac8c4622c069afc3fd0332370c191b319b41fe Step #5: Base64: PyU/JT8lPyU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1004 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4119164884 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5558f0e2ed60, 0x5558f101771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5558f1017720,0x5558f2ea12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2fac8c4622c069afc3fd0332370c191b319b41fe' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1134 processed earlier; will process 9842 files now Step #5: ==36178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5558e79712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5558edfac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5558edf8f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5558edf8f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5558e7977652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5558e78d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5558e78d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5558e7969595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5558ea9988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5558ea9988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5558ea9988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5558ea9988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5558ea9988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5558ea9988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5558ea9988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5558ea9988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5558ea9988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5558ea9988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5558ecb9d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5558e98f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5558e99045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5558e96afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5558e96afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5558e96b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5558e96af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5558e96af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5558e96af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5558edf9194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5558edf9a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5558edf82529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5558edfacfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27b2789082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5558e78d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xe3,0x80,0x8c,0xde,0xbf,0x5d,0x3a, Step #5: [\343\200\214\336\277]: Step #5: artifact_prefix='./'; Test unit written to ./oom-37b3b13705096bdece68996afb7dd03481863839 Step #5: Base64: W+OAjN6/XTo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1005 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4119616413 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560069c50d60, 0x560069e3971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560069e39720,0x56006bcc32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/37b3b13705096bdece68996afb7dd03481863839' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1135 processed earlier; will process 9841 files now Step #5: ==36214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600607932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560066dce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560066db146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560066db138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560060799652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600606fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600606f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56006078b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600637ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600637ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600637ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600637ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600637ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600637ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600637ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600637ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600637ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600637ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600659bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56006271b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600627265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600624d1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600624d1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600624d2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600624d1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600624d1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600624d1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560066db394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560066dbc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560066da4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560066dcefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f37d66e2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600606f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x24,0x24,0x29,0x7b,0x38,0x36,0x7d, Step #5: ($$){86} Step #5: artifact_prefix='./'; Test unit written to ./oom-fd601bf6e903cd098505791a4bd20c94db015ce2 Step #5: Base64: KCQkKXs4Nn0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1006 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4120068795 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5556d709cd60, 0x5556d728571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556d7285720,0x5556d910f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fd601bf6e903cd098505791a4bd20c94db015ce2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1136 processed earlier; will process 9840 files now Step #5: ==36250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556cdbdf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5556d421a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5556d41fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5556d41fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5556cdbe5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5556cdb4642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5556cdb40c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5556cdbd7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5556d0c068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5556d0c068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5556d0c068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5556d0c068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5556d0c068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5556d0c068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5556d0c068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5556d0c068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5556d0c068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5556d0c068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5556d2e0b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5556cfb67578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5556cfb725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5556cf91dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5556cf91dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5556cf91e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5556cf91d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5556cf91d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5556cf91d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5556d41ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556d42087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5556d41f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5556d421afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2efb073082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5556cdb3f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0x5b,0xe1,0x9a,0xbc, Step #5: (?i)[\341\232\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-78f41703baf3aa5cf2dea5820d3e354eba4b7188 Step #5: Base64: KD9pKVvhmrw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1007 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4120525584 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55edff4e7d60, 0x55edff6d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55edff6d0720,0x55ee0155a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/78f41703baf3aa5cf2dea5820d3e354eba4b7188' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1137 processed earlier; will process 9839 files now Step #5: #1 pulse cov: 3605 ft: 3606 exec/s: 0 rss: 161Mb Step #5: ==36286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55edf602a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55edfc665728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55edfc64846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55edfc64838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55edf6030652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55edf5f9142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55edf5f8bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55edf6022595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55edf90518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55edf90518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55edf90518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55edf90518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55edf90518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55edf90518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55edf90518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55edf90518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55edf90518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55edf90518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55edfb25645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55edf7fb2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55edf7fbd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55edf7d68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55edf7d68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55edf7d69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55edf7d68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55edf7d68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55edf7d68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55edfc64a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55edfc6537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55edfc63b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55edfc665fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa945265082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55edf5f8a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x32,0x30,0x36,0x30,0x36,0x36,0x31, Step #5: 32060661 Step #5: artifact_prefix='./'; Test unit written to ./oom-107f2a487b517203fd0e6c701e8946bd4e29497e Step #5: Base64: MzIwNjA2NjE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1008 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4121020589 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f9dd21ad60, 0x55f9dd40371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f9dd403720,0x55f9df28d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/107f2a487b517203fd0e6c701e8946bd4e29497e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1139 processed earlier; will process 9837 files now Step #5: ==36322== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f9d3d5d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f9da398728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f9da37b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f9da37b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9d3d63652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f9d3cc442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f9d3cbec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9d3d55595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9d6d848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9d6d848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9d6d848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9d6d848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9d6d848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9d6d848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9d6d848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9d6d848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9d6d848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9d6d848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9d8f8945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f9d5ce5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9d5cf05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9d5a9bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9d5a9bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f9d5a9c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9d5a9b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9d5a9b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9d5a9b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f9da37d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f9da3867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f9da36e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f9da398fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f114a8f8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f9d3cbd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0xd6,0x9a,0xa1,0xa5, Step #5: (?i)\326\232\241\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-3069d4cdcb40bcf4b8ab691f56af444391d076c6 Step #5: Base64: KD9pKdaaoaU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1009 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4121470986 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560c63577d60, 0x560c6376071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560c63760720,0x560c655ea2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3069d4cdcb40bcf4b8ab691f56af444391d076c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1140 processed earlier; will process 9836 files now Step #5: ==36358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c5a0ba2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560c606f5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560c606d846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560c606d838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c5a0c0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c5a02142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c5a01bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c5a0b2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560c5d0e18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560c5d0e18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560c5d0e18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560c5d0e18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560c5d0e18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560c5d0e18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560c5d0e18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560c5d0e18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560c5d0e18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560c5d0e18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560c5f2e645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560c5c042578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560c5c04d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560c5bdf8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560c5bdf8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560c5bdf9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560c5bdf8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560c5bdf8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560c5bdf8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560c606da94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560c606e37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560c606cb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560c606f5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f560d5ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c5a01a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x2d,0x2d,0x3d,0x2d,0x9,0x0,0x2, Step #5: \000--=-\011\000\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-00d431ec18a7dfad265f174466472accd2c3e954 Step #5: Base64: AC0tPS0JAAI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1010 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4121937198 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558715cf6d60, 0x558715edf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558715edf720,0x558717d692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00d431ec18a7dfad265f174466472accd2c3e954' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1141 processed earlier; will process 9835 files now Step #5: ==36394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55870c8392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558712e74728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558712e5746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558712e5738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55870c83f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55870c7a042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55870c79ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55870c831595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55870f8608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55870f8608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55870f8608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55870f8608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55870f8608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55870f8608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55870f8608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55870f8608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55870f8608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55870f8608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558711a6545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55870e7c1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55870e7cc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55870e577d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55870e577d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55870e578808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55870e577944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55870e577944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55870e577944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558712e5994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558712e627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558712e4a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558712e74fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc3ec04082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55870c79943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa8,0xba,0xd,0x69,0x6e,0xd,0xf3, Step #5: \341\250\272\015in\015\363 Step #5: artifact_prefix='./'; Test unit written to ./oom-aad4e0e72869494e21501281ca2b0e8f0a480bda Step #5: Base64: 4ai6DWluDfM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1011 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4122404057 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a6ef731d60, 0x55a6ef91a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a6ef91a720,0x55a6f17a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aad4e0e72869494e21501281ca2b0e8f0a480bda' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1142 processed earlier; will process 9834 files now Step #5: ==36430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a6e62742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a6ec8af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a6ec89246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a6ec89238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a6e627a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a6e61db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a6e61d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a6e626c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a6e929b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a6e929b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a6e929b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a6e929b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a6e929b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a6e929b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a6e929b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a6e929b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a6e929b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a6e929b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a6eb4a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a6e81fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a6e82075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a6e7fb2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a6e7fb2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a6e7fb3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a6e7fb2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a6e7fb2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a6e7fb2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a6ec89494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a6ec89d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a6ec885529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a6ec8affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffbaf32a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a6e61d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x4f,0x46,0x46,0x0,0x1,0x0,0x0, Step #5: wOFF\000\001\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-e233dcf39f11c147ebb8239c463c633b35acdc02 Step #5: Base64: d09GRgABAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1012 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4122865754 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561693b6fd60, 0x561693d5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561693d58720,0x561695be22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e233dcf39f11c147ebb8239c463c633b35acdc02' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1143 processed earlier; will process 9833 files now Step #5: ==36466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56168a6b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561690ced728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561690cd046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561690cd038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56168a6b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56168a61942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56168a613c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56168a6aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56168d6d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56168d6d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56168d6d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56168d6d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56168d6d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56168d6d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56168d6d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56168d6d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56168d6d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56168d6d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56168f8de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56168c63a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56168c6455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56168c3f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56168c3f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56168c3f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56168c3f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56168c3f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56168c3f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561690cd294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561690cdb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561690cc3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561690cedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1e0b268082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56168a61243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x5f,0x2f,0x52,0x42,0x5f,0x2f,0x52, Step #5: C_/RB_/R Step #5: artifact_prefix='./'; Test unit written to ./oom-3eaed025165636b86ffea4710ffd9e81d5a42860 Step #5: Base64: Q18vUkJfL1I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1013 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4123328373 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559f4f5b0d60, 0x559f4f79971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559f4f799720,0x559f516232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3eaed025165636b86ffea4710ffd9e81d5a42860' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1144 processed earlier; will process 9832 files now Step #5: #1 pulse cov: 3513 ft: 3514 exec/s: 0 rss: 163Mb Step #5: ==36502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559f460f32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559f4c72e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559f4c71146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559f4c71138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559f460f9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559f4605a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559f46054c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559f460eb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559f4911a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559f4911a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559f4911a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559f4911a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559f4911a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559f4911a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559f4911a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559f4911a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559f4911a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559f4911a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559f4b31f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559f4807b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559f480865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559f47e31d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559f47e31d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559f47e32808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559f47e31944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559f47e31944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559f47e31944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559f4c71394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559f4c71c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559f4c704529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559f4c72efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd4d49c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559f4605343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x6d,0x9,0xb,0x9,0x9,0x9,0x9, Step #5: -m\011\013\011\011\011\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-6b43f502c7228bab7fb16702e32ba238359fe277 Step #5: Base64: LW0JCwkJCQk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1014 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4124071871 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562911f85d60, 0x56291216e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56291216e720,0x562913ff82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b43f502c7228bab7fb16702e32ba238359fe277' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1146 processed earlier; will process 9830 files now Step #5: ==36538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562908ac82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56290f103728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56290f0e646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56290f0e638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562908ace652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562908a2f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562908a29c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562908ac0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56290baef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56290baef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56290baef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56290baef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56290baef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56290baef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56290baef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56290baef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56290baef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56290baef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56290dcf445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56290aa50578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56290aa5b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56290a806d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56290a806d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56290a807808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56290a806944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56290a806944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56290a806944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56290f0e894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56290f0f17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56290f0d9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56290f103fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcaa70f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562908a2843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xa,0xa,0x60,0xa,0x60,0xa,0x60, Step #5: `\012\012`\012`\012` Step #5: artifact_prefix='./'; Test unit written to ./oom-3d147c11dfae6d5d2fa076035fb9bbf912f43187 Step #5: Base64: YAoKYApgCmA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1015 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4125103460 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642c7598d60, 0x5642c778171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642c7781720,0x5642c960b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d147c11dfae6d5d2fa076035fb9bbf912f43187' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1147 processed earlier; will process 9829 files now Step #5: ==36574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5642be0db2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5642c4716728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5642c46f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5642c46f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5642be0e1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5642be04242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5642be03cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5642be0d3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5642c11028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5642c11028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5642c11028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5642c11028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5642c11028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5642c11028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5642c11028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5642c11028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5642c11028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5642c11028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5642c330745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5642c0063578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642c006e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5642bfe19d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5642bfe19d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5642bfe1a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5642bfe19944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5642bfe19944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5642bfe19944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5642c46fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642c47047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5642c46ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5642c4716fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac6736e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5642be03b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0xf2,0xbf,0xbe,0x9e,0x3e, Step #5: (?<\362\277\276\236> Step #5: artifact_prefix='./'; Test unit written to ./oom-f4262e3bd1041df384bcaabae59a1b570b90b198 Step #5: Base64: KD888r++nj4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1016 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4125931386 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564f124d2d60, 0x564f126bb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564f126bb720,0x564f145452c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f4262e3bd1041df384bcaabae59a1b570b90b198' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1148 processed earlier; will process 9828 files now Step #5: ==36610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564f090152d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564f0f650728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564f0f63346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564f0f63338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564f0901b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564f08f7c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564f08f76c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564f0900d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564f0c03c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564f0c03c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564f0c03c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564f0c03c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564f0c03c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564f0c03c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564f0c03c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564f0c03c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564f0c03c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564f0c03c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564f0e24145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564f0af9d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564f0afa85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564f0ad53d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564f0ad53d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564f0ad54808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564f0ad53944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564f0ad53944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564f0ad53944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564f0f63594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564f0f63e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564f0f626529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564f0f650fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3f62c8a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564f08f7543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9d,0x85,0xa0,0xf0,0x91,0x93,0x83, Step #5: \360\235\205\240\360\221\223\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-2c1fd730e325996de4984940afe12c66624d33d7 Step #5: Base64: 8J2FoPCRk4M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1017 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4126748258 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b48fd4fd60, 0x55b48ff3871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b48ff38720,0x55b491dc22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2c1fd730e325996de4984940afe12c66624d33d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1149 processed earlier; will process 9827 files now Step #5: ==36646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b4868922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b48cecd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b48ceb046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b48ceb038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b486898652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b4867f942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b4867f3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b48688a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b4898b98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b4898b98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b4898b98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b4898b98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b4898b98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b4898b98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b4898b98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b4898b98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b4898b98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b4898b98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b48babe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b48881a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b4888255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b4885d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b4885d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b4885d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b4885d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b4885d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b4885d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b48ceb294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b48cebb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b48cea3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b48cecdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2077e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b4867f243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x23,0x38,0x31,0x38,0x32,0x3b,0xfa, Step #5: ῶ\372 Step #5: artifact_prefix='./'; Test unit written to ./oom-631763bd6738c4aa1f5a477916c73b5a4113d0f1 Step #5: Base64: JiM4MTgyO/o= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1018 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4127557255 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642375bad60, 0x5642377a371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642377a3720,0x56423962d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/631763bd6738c4aa1f5a477916c73b5a4113d0f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1150 processed earlier; will process 9826 files now Step #5: ==36682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56422e0fd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564234738728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56423471b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56423471b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56422e103652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56422e06442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56422e05ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56422e0f5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5642311248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5642311248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5642311248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5642311248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5642311248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5642311248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5642311248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5642311248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5642311248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5642311248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56423332945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564230085578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642300905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56422fe3bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56422fe3bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56422fe3c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56422fe3b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56422fe3b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56422fe3b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56423471d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642347267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56423470e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564234738fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b85e06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56422e05d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x4,0xf0,0x91,0x97,0x9d, Step #5: \000\000\000\004\360\221\227\235 Step #5: artifact_prefix='./'; Test unit written to ./oom-6dc9946c25080b0d3c697d662686396bf157a0d7 Step #5: Base64: AAAABPCRl50= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1019 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4128369794 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5609e5471d60, 0x5609e565a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5609e565a720,0x5609e74e42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6dc9946c25080b0d3c697d662686396bf157a0d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1151 processed earlier; will process 9825 files now Step #5: ==36718== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609dbfb42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5609e25ef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5609e25d246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5609e25d238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5609dbfba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5609dbf1b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5609dbf15c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5609dbfac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609defdb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609defdb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609defdb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609defdb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609defdb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609defdb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609defdb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609defdb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609defdb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609defdb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5609e11e045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609ddf3c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609ddf475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5609ddcf2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5609ddcf2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5609ddcf3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5609ddcf2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5609ddcf2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5609ddcf2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5609e25d494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5609e25dd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5609e25c5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5609e25effa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f512ef6f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5609dbf1443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xa8,0xa7,0xcd,0x84, Step #5: ws:\357\250\247\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-66792ba65fbf5804649e04d9d47d2ffaef918ad6 Step #5: Base64: d3M676inzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1020 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4129181460 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563fd2e9cd60, 0x563fd308571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563fd3085720,0x563fd4f0f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/66792ba65fbf5804649e04d9d47d2ffaef918ad6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1152 processed earlier; will process 9824 files now Step #5: #1 pulse cov: 3734 ft: 3735 exec/s: 0 rss: 163Mb Step #5: #2 pulse cov: 3957 ft: 4168 exec/s: 0 rss: 164Mb Step #5: ==36754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563fc99df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563fd001a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563fcfffd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563fcfffd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563fc99e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563fc994642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563fc9940c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563fc99d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563fcca068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563fcca068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563fcca068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563fcca068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563fcca068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563fcca068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563fcca068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563fcca068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563fcca068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563fcca068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563fcec0b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563fcb967578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563fcb9725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563fcb71dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563fcb71dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563fcb71e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563fcb71d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563fcb71d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563fcb71d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563fcffff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563fd00087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563fcfff0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563fd001afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffae4337082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563fc993f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x3a,0xf0,0x9c,0x9e,0x9b, Step #5: (?i:\360\234\236\233 Step #5: artifact_prefix='./'; Test unit written to ./oom-6a25b93c06315a97c140d847e2792951b5c7e0bf Step #5: Base64: KD9pOvCcnps= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1021 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4130130735 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b4d611d60, 0x558b4d7fa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b4d7fa720,0x558b4f6842c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6a25b93c06315a97c140d847e2792951b5c7e0bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1155 processed earlier; will process 9821 files now Step #5: ==36790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b441542d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b4a78f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b4a77246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b4a77238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b4415a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b440bb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b440b5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b4414c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b4717b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b4717b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b4717b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b4717b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b4717b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b4717b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b4717b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b4717b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b4717b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b4717b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b4938045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b460dc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b460e75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b45e92d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b45e92d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b45e93808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b45e92944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b45e92944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b45e92944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b4a77494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b4a77d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b4a765529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b4a78ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f99e22a0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b440b443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x3a,0x2f,0x40,0x2f,0x46,0x2f,0x36, Step #5: F:/@/F/6 Step #5: artifact_prefix='./'; Test unit written to ./oom-aec1ea25071bc217928e4e1187988bfd044813d8 Step #5: Base64: RjovQC9GLzY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1022 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4130944481 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c2e2ead60, 0x557c2e4d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c2e4d3720,0x557c3035d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aec1ea25071bc217928e4e1187988bfd044813d8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1156 processed earlier; will process 9820 files now Step #5: ==36826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c24e2d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c2b468728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c2b44b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c2b44b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c24e33652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c24d9442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c24d8ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c24e25595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c27e548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c27e548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c27e548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c27e548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c27e548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c27e548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c27e548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c27e548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c27e548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c27e548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c2a05945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c26db5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c26dc05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c26b6bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c26b6bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c26b6c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c26b6b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c26b6b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c26b6b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c2b44d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c2b4567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c2b43e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c2b468fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f83536df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c24d8d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xad,0x2d,0x2c,0xdf,0xad,0x2d,0x40, Step #5: \337\255-,\337\255-@ Step #5: artifact_prefix='./'; Test unit written to ./oom-9facdefbe23eda9ba73f43dea209c756f1e7f9dc Step #5: Base64: 360tLN+tLUA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1023 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4131739601 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562a80408d60, 0x562a805f171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562a805f1720,0x562a8247b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9facdefbe23eda9ba73f43dea209c756f1e7f9dc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1157 processed earlier; will process 9819 files now Step #5: ==36862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562a76f4b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562a7d586728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562a7d56946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562a7d56938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562a76f51652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562a76eb242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562a76eacc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562a76f43595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562a79f728c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562a79f728c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562a79f728c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562a79f728c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562a79f728c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562a79f728c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562a79f728c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562a79f728c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562a79f728c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562a79f728c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562a7c17745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562a78ed3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562a78ede5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562a78c89d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562a78c89d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562a78c8a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562a78c89944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562a78c89944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562a78c89944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562a7d56b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562a7d5747b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562a7d55c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562a7d586fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4161bcb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562a76eab43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x45,0x4d,0x47,0x65,0x6e,0x72,0x65, Step #5: REMGenre Step #5: artifact_prefix='./'; Test unit written to ./oom-4e6a10c3217395fd9848cb7868227fe0a33f2b15 Step #5: Base64: UkVNR2VucmU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1024 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4132562771 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a31eb6fd60, 0x55a31ed5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a31ed58720,0x55a320be22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4e6a10c3217395fd9848cb7868227fe0a33f2b15' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1158 processed earlier; will process 9818 files now Step #5: #1 pulse cov: 3448 ft: 3449 exec/s: 0 rss: 163Mb Step #5: ==36898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3156b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a31bced728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a31bcd046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a31bcd038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3156b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a31561942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a315613c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3156aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3186d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3186d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3186d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3186d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3186d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3186d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3186d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3186d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3186d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3186d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a31a8de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a31763a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3176455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3173f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3173f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3173f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3173f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3173f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3173f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a31bcd294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a31bcdb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a31bcc3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a31bcedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe5461a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a31561243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0x5b,0xe1,0x9e,0xbc, Step #5: (?i)[\341\236\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-030d3cfc50f8275f740b44cc521b4d7ecf27787b Step #5: Base64: KD9pKVvhnrw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1025 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4133480214 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d70e9b2d60, 0x55d70eb9b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d70eb9b720,0x55d710a252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/030d3cfc50f8275f740b44cc521b4d7ecf27787b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1160 processed earlier; will process 9816 files now Step #5: ==36934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d7054f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d70bb30728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d70bb1346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d70bb1338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d7054fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d70545c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d705456c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d7054ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d70851c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d70851c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d70851c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d70851c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d70851c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d70851c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d70851c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d70851c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d70851c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d70851c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d70a72145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d70747d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d7074885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d707233d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d707233d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d707234808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d707233944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d707233944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d707233944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d70bb1594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d70bb1e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d70bb06529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d70bb30fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd40ff53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d70545543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x2d,0x3d,0x3d,0x7e,0x2d,0x24, Step #5: ~$-==~-$ Step #5: artifact_prefix='./'; Test unit written to ./oom-ff53e6f5db39a86e6fa8ff650bf67a7e8351672b Step #5: Base64: fiQtPT1+LSQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1026 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4134314155 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a9c8c0d60, 0x556a9caa971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a9caa9720,0x556a9e9332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ff53e6f5db39a86e6fa8ff650bf67a7e8351672b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1161 processed earlier; will process 9815 files now Step #5: ==36970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a934032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a99a3e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a99a2146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a99a2138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a93409652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a9336a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a93364c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a933fb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a9642a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a9642a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a9642a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a9642a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a9642a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a9642a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a9642a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a9642a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a9642a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a9642a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a9862f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a9538b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a953965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a95141d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a95141d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a95142808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a95141944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a95141944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a95141944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a99a2394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a99a2c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a99a14529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a99a3efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f174bba3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a9336343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x81,0x90,0xe3,0x81,0xa4,0x30,0x30, Step #5: \343\201\220\343\201\24400 Step #5: artifact_prefix='./'; Test unit written to ./oom-d740314b35ac9edf328b700eb8ffc90b6dc7182a Step #5: Base64: 44GQ44GkMDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1027 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4135145545 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b857c26d60, 0x55b857e0f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b857e0f720,0x55b859c992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d740314b35ac9edf328b700eb8ffc90b6dc7182a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1162 processed earlier; will process 9814 files now Step #5: ==37006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b84e7692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b854da4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b854d8746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b854d8738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b84e76f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b84e6d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b84e6cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b84e761595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b8517908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b8517908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b8517908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b8517908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b8517908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b8517908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b8517908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b8517908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b8517908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b8517908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b85399545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8506f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8506fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8504a7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8504a7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8504a8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8504a7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8504a7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8504a7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b854d8994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b854d927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b854d7a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b854da4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4948718082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b84e6c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x44,0xb,0xa,0xa,0x44,0xb,0xa, Step #5: \013D\013\012\012D\013\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-c3911998ffa3fd8d554ca87f181af175531e35c7 Step #5: Base64: C0QLCgpECwo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1028 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4135973466 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c37808cd60, 0x55c37827571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c378275720,0x55c37a0ff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c3911998ffa3fd8d554ca87f181af175531e35c7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1163 processed earlier; will process 9813 files now Step #5: #1 pulse cov: 10582 ft: 10583 exec/s: 0 rss: 182Mb Step #5: #2 pulse cov: 11081 ft: 11881 exec/s: 0 rss: 185Mb Step #5: ==37042== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c36ebcf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c37520a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c3751ed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c3751ed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c36ebd5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c36eb3642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c36eb30c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c36ebc7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c371bf68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c371bf68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c371bf68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c371bf68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c371bf68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c371bf68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c371bf68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c371bf68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c371bf68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c371bf68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c373dfb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c370b57578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c370b625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c37090dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c37090dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c37090e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c37090d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c37090d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c37090d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c3751ef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c3751f87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c3751e0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c37520afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb1d1e19082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c36eb2f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x40,0x9,0x50,0x40, Step #5: DanM@\011P@ Step #5: artifact_prefix='./'; Test unit written to ./oom-9e5ce54c4dfe9a3eabe4b900773691598d7ca1e4 Step #5: Base64: RGFuTUAJUEA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1029 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4136918404 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557829effd60, 0x55782a0e871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55782a0e8720,0x55782bf722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9e5ce54c4dfe9a3eabe4b900773691598d7ca1e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1166 processed earlier; will process 9810 files now Step #5: ==37078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557820a422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55782707d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55782706046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55782706038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557820a48652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5578209a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5578209a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557820a3a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557823a698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557823a698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557823a698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557823a698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557823a698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557823a698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557823a698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557823a698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557823a698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557823a698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557825c6e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5578229ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5578229d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557822780d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557822780d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557822781808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557822780944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557822780944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557822780944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55782706294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55782706b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557827053529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55782707dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe0d7453082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5578209a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x49,0x32,0xf0,0x91,0xb5,0x99,0x53, Step #5: AI2\360\221\265\231S Step #5: artifact_prefix='./'; Test unit written to ./oom-d2106c95ef063ed2d0398444b748b371f78bf596 Step #5: Base64: QUky8JG1mVM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1030 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4137732726 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561366e88d60, 0x56136707171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561367071720,0x561368efb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d2106c95ef063ed2d0398444b748b371f78bf596' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1167 processed earlier; will process 9809 files now Step #5: ==37114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56135d9cb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561364006728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561363fe946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561363fe938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56135d9d1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56135d93242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56135d92cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56135d9c3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5613609f28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5613609f28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5613609f28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5613609f28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5613609f28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5613609f28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5613609f28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5613609f28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5613609f28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5613609f28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561362bf745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56135f953578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56135f95e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56135f709d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56135f709d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56135f70a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56135f709944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56135f709944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56135f709944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561363feb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561363ff47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561363fdc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561364006fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f422fea2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56135d92b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x4,0xf0,0x91,0xb1,0xb1, Step #5: \000\000\000\004\360\221\261\261 Step #5: artifact_prefix='./'; Test unit written to ./oom-0371709d0fbe1747e7dafcb23de57792f4223f0e Step #5: Base64: AAAABPCRsbE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1031 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4138556283 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564d6bf72d60, 0x564d6c15b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564d6c15b720,0x564d6dfe52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0371709d0fbe1747e7dafcb23de57792f4223f0e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1168 processed earlier; will process 9808 files now Step #5: ==37150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564d62ab52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564d690f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564d690d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564d690d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564d62abb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564d62a1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564d62a16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564d62aad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564d65adc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564d65adc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564d65adc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564d65adc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564d65adc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564d65adc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564d65adc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564d65adc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564d65adc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564d65adc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564d67ce145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564d64a3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564d64a485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564d647f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564d647f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564d647f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564d647f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564d647f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564d647f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564d690d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564d690de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564d690c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564d690f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8af2c1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564d62a1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x57,0x73,0x3a,0xe3,0x8d,0xbf,0xcd,0x84, Step #5: Ws:\343\215\277\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-2e08e3700619c4ee233aca2af4bd68cb60a9258e Step #5: Base64: V3M6442/zYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1032 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4139354013 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564924fc8d60, 0x5649251b171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5649251b1720,0x56492703b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2e08e3700619c4ee233aca2af4bd68cb60a9258e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1169 processed earlier; will process 9807 files now Step #5: #1 pulse cov: 3530 ft: 3531 exec/s: 0 rss: 163Mb Step #5: #2 pulse cov: 10941 ft: 11730 exec/s: 0 rss: 183Mb Step #5: ==37186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56491bb0b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564922146728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56492212946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56492212938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56491bb11652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56491ba7242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56491ba6cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56491bb03595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56491eb328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56491eb328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56491eb328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56491eb328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56491eb328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56491eb328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56491eb328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56491eb328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56491eb328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56491eb328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564920d3745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56491da93578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56491da9e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56491d849d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56491d849d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56491d84a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56491d849944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56491d849944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56491d849944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56492212b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5649221347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56492211c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564922146fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f94867f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56491ba6b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x59,0x7f,0x53,0x0,0xe,0x27,0x24, Step #5: $Y\177S\000\016'$ Step #5: artifact_prefix='./'; Test unit written to ./oom-14ff69121d72b125af3da4c83dcb54a84a0e1959 Step #5: Base64: JFl/UwAOJyQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1033 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4140365590 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560da89dbd60, 0x560da8bc471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560da8bc4720,0x560daaa4e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/14ff69121d72b125af3da4c83dcb54a84a0e1959' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1172 processed earlier; will process 9804 files now Step #5: ==37222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560d9f51e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560da5b59728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560da5b3c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560da5b3c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560d9f524652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560d9f48542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560d9f47fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560d9f516595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560da25458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560da25458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560da25458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560da25458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560da25458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560da25458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560da25458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560da25458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560da25458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560da25458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560da474a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560da14a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560da14b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560da125cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560da125cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560da125d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560da125c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560da125c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560da125c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560da5b3e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560da5b477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560da5b2f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560da5b59fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa964b2b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560d9f47e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x20,0x0,0x0,0x0,0x20,0x30,0x24, Step #5: $ \000\000\000 0$ Step #5: artifact_prefix='./'; Test unit written to ./oom-5a037fc3943f2d77393c74c12d882ccd5938ef00 Step #5: Base64: JCAAAAAgMCQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1034 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4141198131 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55563352ad60, 0x55563371371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555633713720,0x55563559d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5a037fc3943f2d77393c74c12d882ccd5938ef00' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1173 processed earlier; will process 9803 files now Step #5: ==37258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55562a06d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5556306a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55563068b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55563068b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55562a073652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555629fd442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555629fcec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55562a065595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55562d0948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55562d0948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55562d0948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55562d0948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55562d0948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55562d0948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55562d0948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55562d0948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55562d0948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55562d0948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55562f29945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55562bff5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55562c0005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55562bdabd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55562bdabd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55562bdac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55562bdab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55562bdab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55562bdab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55563068d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556306967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55563067e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5556306a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f684783a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555629fcd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xac,0xac,0xcd,0x83, Step #5: ws:\357\254\254\315\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-5ce62ddf6244ea9a7207e9d92c1811e8f86a0b90 Step #5: Base64: d3M676yszYM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1035 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4142018425 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55896c659d60, 0x55896c84271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55896c842720,0x55896e6cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ce62ddf6244ea9a7207e9d92c1811e8f86a0b90' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1174 processed earlier; will process 9802 files now Step #5: ==37294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55896319c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5589697d7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5589697ba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5589697ba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5589631a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55896310342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5589630fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558963194595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5589661c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5589661c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5589661c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5589661c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5589661c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5589661c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5589661c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5589661c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5589661c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5589661c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5589683c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558965124578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55896512f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558964edad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558964edad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558964edb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558964eda944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558964eda944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558964eda944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5589697bc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5589697c57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5589697ad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5589697d7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd3d29c2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5589630fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x27,0x27,0xd8,0x98,0x27,0x27,0x27, Step #5: '''\330\230''' Step #5: artifact_prefix='./'; Test unit written to ./oom-11390ae1d934f6c27044a4e1801302886ae6a897 Step #5: Base64: Jycn2JgnJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1036 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4142828566 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560e9a60ed60, 0x560e9a7f771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560e9a7f7720,0x560e9c6812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11390ae1d934f6c27044a4e1801302886ae6a897' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1175 processed earlier; will process 9801 files now Step #5: ==37330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560e911512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560e9778c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560e9776f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560e9776f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560e91157652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560e910b842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560e910b2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560e91149595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560e941788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560e941788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560e941788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560e941788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560e941788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560e941788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560e941788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560e941788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560e941788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560e941788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560e9637d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560e930d9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560e930e45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560e92e8fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560e92e8fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560e92e90808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560e92e8f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560e92e8f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560e92e8f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560e9777194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560e9777a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560e97762529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560e9778cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd6b61ca082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560e910b143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x46,0x6f,0xcc,0x80,0x2f,0xb0,0xdb, Step #5: \012Fo\314\200/\260\333 Step #5: artifact_prefix='./'; Test unit written to ./oom-e6a6c4f545a11c341aec2788f6d571db95028278 Step #5: Base64: CkZvzIAvsNs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1037 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4143643770 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559115626d60, 0x55911580f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55911580f720,0x5591176992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e6a6c4f545a11c341aec2788f6d571db95028278' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1176 processed earlier; will process 9800 files now Step #5: ==37366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55910c1692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591127a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55911278746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55911278738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55910c16f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55910c0d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55910c0cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55910c161595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55910f1908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55910f1908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55910f1908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55910f1908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55910f1908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55910f1908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55910f1908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55910f1908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55910f1908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55910f1908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55911139545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55910e0f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55910e0fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55910dea7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55910dea7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55910dea8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55910dea7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55910dea7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55910dea7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55911278994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591127927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55911277a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591127a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f641b366082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55910c0c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x3,0x2b,0x3,0x2b,0x44,0xfc,0x44, Step #5: \003\003+\003+D\374D Step #5: artifact_prefix='./'; Test unit written to ./oom-77fdd07c4016ed28936ca381bf639f3a5b1d2289 Step #5: Base64: AwMrAytE/EQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1038 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4144488267 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556738c0dd60, 0x556738df671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556738df6720,0x55673ac802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/77fdd07c4016ed28936ca381bf639f3a5b1d2289' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1177 processed earlier; will process 9799 files now Step #5: ==37402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55672f7502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556735d8b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556735d6e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556735d6e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55672f756652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55672f6b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55672f6b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55672f748595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567327778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567327778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567327778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567327778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567327778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567327778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567327778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567327778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567327778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567327778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55673497c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5567316d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5567316e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55673148ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55673148ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55673148f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55673148e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55673148e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55673148e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556735d7094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556735d797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556735d61529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556735d8bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9a3e0ef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55672f6b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x84,0xcc,0x90,0xf0,0x9d,0x85,0xad, Step #5: \315\204\314\220\360\235\205\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-2d7dc02ffc3988e274d415760042ba530ed3b1c1 Step #5: Base64: zYTMkPCdha0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1039 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4145300819 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555dec945d60, 0x555decb2e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555decb2e720,0x555dee9b82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d7dc02ffc3988e274d415760042ba530ed3b1c1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1178 processed earlier; will process 9798 files now Step #5: #1 pulse cov: 3784 ft: 3785 exec/s: 0 rss: 163Mb Step #5: ==37438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555de34882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555de9ac3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555de9aa646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555de9aa638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555de348e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555de33ef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555de33e9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555de3480595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555de64af8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555de64af8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555de64af8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555de64af8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555de64af8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555de64af8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555de64af8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555de64af8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555de64af8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555de64af8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555de86b445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555de5410578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555de541b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555de51c6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555de51c6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555de51c7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555de51c6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555de51c6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555de51c6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555de9aa894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555de9ab17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555de9a99529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555de9ac3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbe24adc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555de33e843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c, Step #5: ,,,,,,,, Step #5: artifact_prefix='./'; Test unit written to ./oom-12fe190b16c245bd5c971e574352e43e4e703edc Step #5: Base64: LCwsLCwsLCw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1040 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4146183395 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b2348fad60, 0x55b234ae371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b234ae3720,0x55b23696d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/12fe190b16c245bd5c971e574352e43e4e703edc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1180 processed earlier; will process 9796 files now Step #5: ==37474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b22b43d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b231a78728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b231a5b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b231a5b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b22b443652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b22b3a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b22b39ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b22b435595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b22e4648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b22e4648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b22e4648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b22e4648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b22e4648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b22e4648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b22e4648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b22e4648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b22e4648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b22e4648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b23066945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b22d3c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b22d3d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b22d17bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b22d17bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b22d17c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b22d17b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b22d17b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b22d17b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b231a5d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b231a667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b231a4e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b231a78fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbccc35a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b22b39d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9d,0x85,0xa5,0xcc,0xa1,0xcc,0xb8, Step #5: \360\235\205\245\314\241\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-2e907d20a266dd523575f7bf52cf1a22d49b98e1 Step #5: Base64: 8J2FpcyhzLg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1041 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4147016737 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ea9899d60, 0x560ea9a8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ea9a82720,0x560eab90c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2e907d20a266dd523575f7bf52cf1a22d49b98e1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1181 processed earlier; will process 9795 files now Step #5: ==37510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ea03dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ea6a17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ea69fa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ea69fa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ea03e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ea034342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ea033dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ea03d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ea34038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ea34038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ea34038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ea34038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ea34038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ea34038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ea34038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ea34038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ea34038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ea34038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ea560845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ea2364578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ea236f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ea211ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ea211ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ea211b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ea211a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ea211a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ea211a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ea69fc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ea6a057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ea69ed529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ea6a17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8b288fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ea033c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x62,0xd1,0x8b,0x4f, Step #5: DanMb\321\213O Step #5: artifact_prefix='./'; Test unit written to ./oom-16a4c261be65bfc25d8e594fe43bd33d5fd4d602 Step #5: Base64: RGFuTWLRi08= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1042 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4147838038 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55af7a86ed60, 0x55af7aa5771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55af7aa57720,0x55af7c8e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/16a4c261be65bfc25d8e594fe43bd33d5fd4d602' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1182 processed earlier; will process 9794 files now Step #5: ==37546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55af713b12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55af779ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55af779cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55af779cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55af713b7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55af7131842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55af71312c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55af713a9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55af743d88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55af743d88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55af743d88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55af743d88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55af743d88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55af743d88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55af743d88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55af743d88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55af743d88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55af743d88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55af765dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55af73339578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55af733445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55af730efd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55af730efd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55af730f0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55af730ef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55af730ef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55af730ef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55af779d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55af779da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55af779c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55af779ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd0da4e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55af7131143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5b,0x3a,0x5b,0x3a,0x5b,0x3a,0x0, Step #5: [[:[:[:\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-94cb60a672c59a03ce710b16435d0ffeed327415 Step #5: Base64: W1s6WzpbOgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1043 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4148639923 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f3964edd60, 0x55f3966d671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f3966d6720,0x55f3985602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/94cb60a672c59a03ce710b16435d0ffeed327415' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1183 processed earlier; will process 9793 files now Step #5: ==37582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f38d0302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f39366b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f39364e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f39364e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f38d036652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f38cf9742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f38cf91c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f38d028595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f3900578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f3900578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f3900578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f3900578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f3900578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f3900578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f3900578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f3900578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f3900578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f3900578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f39225c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f38efb8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f38efc35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f38ed6ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f38ed6ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f38ed6f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f38ed6e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f38ed6e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f38ed6e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f39365094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f3936597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f393641529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f39366bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f080c878082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f38cf9043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0xa,0x22,0x22,0x3a,0xa,0xa,0x7d, Step #5: {\012\"\":\012\012} Step #5: artifact_prefix='./'; Test unit written to ./oom-9d834bdd52dfb92dab7a415755249483d390ee81 Step #5: Base64: ewoiIjoKCn0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1044 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4149486128 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557267108d60, 0x5572672f171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5572672f1720,0x55726917b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9d834bdd52dfb92dab7a415755249483d390ee81' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1184 processed earlier; will process 9792 files now Step #5: ==37618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55725dc4b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557264286728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55726426946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55726426938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55725dc51652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55725dbb242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55725dbacc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55725dc43595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557260c728c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557260c728c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557260c728c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557260c728c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557260c728c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557260c728c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557260c728c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557260c728c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557260c728c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557260c728c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557262e7745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55725fbd3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55725fbde5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55725f989d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55725f989d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55725f98a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55725f989944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55725f989944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55725f989944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55726426b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5572642747b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55726425c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557264286fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7357632082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55725dbab43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x3f,0x3f,0x3d,0x3f,0x3f,0x3f,0x3d, Step #5: '??=???= Step #5: artifact_prefix='./'; Test unit written to ./oom-880d93554bac85a758bafe2e413ae7937a2c07bf Step #5: Base64: Jz8/PT8/Pz0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1045 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4150338814 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5628381e3d60, 0x5628383cc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5628383cc720,0x56283a2562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/880d93554bac85a758bafe2e413ae7937a2c07bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1185 processed earlier; will process 9791 files now Step #5: ==37654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56282ed262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562835361728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56283534446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56283534438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56282ed2c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56282ec8d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56282ec87c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56282ed1e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562831d4d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562831d4d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562831d4d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562831d4d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562831d4d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562831d4d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562831d4d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562831d4d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562831d4d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562831d4d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562833f5245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562830cae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562830cb95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562830a64d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562830a64d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562830a65808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562830a64944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562830a64944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562830a64944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56283534694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56283534f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562835337529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562835361fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f60eb237082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56282ec8643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x1,0x0,0xd6,0x83,0xda,0x83, Step #5: \000\000\001\000\326\203\332\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-29367275fa82bc92958d95c0176b98b4638c1589 Step #5: Base64: AAABANaD2oM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1046 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4151192610 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562a1a3a1d60, 0x562a1a58a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562a1a58a720,0x562a1c4142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/29367275fa82bc92958d95c0176b98b4638c1589' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1186 processed earlier; will process 9790 files now Step #5: ==37690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562a10ee42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562a1751f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562a1750246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562a1750238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562a10eea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562a10e4b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562a10e45c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562a10edc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562a13f0b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562a13f0b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562a13f0b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562a13f0b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562a13f0b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562a13f0b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562a13f0b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562a13f0b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562a13f0b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562a13f0b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562a1611045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562a12e6c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562a12e775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562a12c22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562a12c22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562a12c23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562a12c22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562a12c22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562a12c22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562a1750494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562a1750d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562a174f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562a1751ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f793e4a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562a10e4443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x23,0x22,0x6d,0x45,0x5c,0x4e,0x22, Step #5: [#\"mE\\N\" Step #5: artifact_prefix='./'; Test unit written to ./oom-f2b32b7f87f2b13e70dda885bccde73b2a4182ab Step #5: Base64: WyMibUVcTiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1047 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4152013247 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561997833d60, 0x561997a1c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561997a1c720,0x5619998a62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f2b32b7f87f2b13e70dda885bccde73b2a4182ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1187 processed earlier; will process 9789 files now Step #5: ==37726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56198e3762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619949b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56199499446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56199499438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56198e37c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56198e2dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56198e2d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56198e36e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56199139d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56199139d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56199139d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56199139d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56199139d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56199139d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56199139d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56199139d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56199139d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56199139d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619935a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619902fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619903095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619900b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619900b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619900b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619900b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619900b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619900b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56199499694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56199499f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561994987529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619949b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd4134f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56198e2d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9e,0xb9,0x91,0xf0,0x9e,0xb9,0x81, Step #5: \360\236\271\221\360\236\271\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-3703a269c87400440d71e46417879a0d2560e070 Step #5: Base64: 8J65kfCeuYE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1048 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4152885713 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557e64044d60, 0x557e6422d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557e6422d720,0x557e660b72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3703a269c87400440d71e46417879a0d2560e070' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1188 processed earlier; will process 9788 files now Step #5: ==37762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e5ab872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557e611c2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557e611a546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557e611a538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e5ab8d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e5aaee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e5aae8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e5ab7f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557e5dbae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557e5dbae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557e5dbae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557e5dbae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557e5dbae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557e5dbae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557e5dbae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557e5dbae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557e5dbae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557e5dbae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557e5fdb345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557e5cb0f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557e5cb1a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557e5c8c5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557e5c8c5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557e5c8c6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557e5c8c5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557e5c8c5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557e5c8c5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557e611a794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557e611b07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557e61198529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557e611c2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f41273dd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e5aae743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa, Step #5: \012\012\012\012\012\012\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-f080446304324098b74b9addc0a16960d33e1b84 Step #5: Base64: CgoKCgoKCgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1049 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4153714224 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b830ce3d60, 0x55b830ecc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b830ecc720,0x55b832d562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f080446304324098b74b9addc0a16960d33e1b84' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1189 processed earlier; will process 9787 files now Step #5: ==37798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8278262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b82de61728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b82de4446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b82de4438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b82782c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b82778d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b827787c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b82781e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b82a84d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b82a84d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b82a84d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b82a84d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b82a84d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b82a84d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b82a84d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b82a84d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b82a84d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b82a84d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b82ca5245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8297ae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8297b95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b829564d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b829564d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b829565808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b829564944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b829564944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b829564944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b82de4694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b82de4f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b82de37529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b82de61fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f21844c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b82778643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xe3,0x80,0x80,0x80,0xc0,0xff,0x7f, Step #5: +\343\200\200\200\300\377\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-8a4c30e36618dd3fc1ac30aeda058b6bf5e8772a Step #5: Base64: K+OAgIDA/38= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1050 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4154564305 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fe35c1cd60, 0x55fe35e0571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fe35e05720,0x55fe37c8f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8a4c30e36618dd3fc1ac30aeda058b6bf5e8772a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1190 processed earlier; will process 9786 files now Step #5: ==37834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fe2c75f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fe32d9a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fe32d7d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fe32d7d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fe2c765652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fe2c6c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fe2c6c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fe2c757595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fe2f7868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fe2f7868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fe2f7868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fe2f7868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fe2f7868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fe2f7868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fe2f7868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fe2f7868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fe2f7868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fe2f7868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fe3198b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fe2e6e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fe2e6f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fe2e49dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fe2e49dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fe2e49e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fe2e49d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fe2e49d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fe2e49d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fe32d7f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fe32d887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fe32d70529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fe32d9afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f70a4954082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fe2c6bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x4,0xea,0xa5,0xab,0x3a, Step #5: \000\000\000\004\352\245\253: Step #5: artifact_prefix='./'; Test unit written to ./oom-2dd9ca9aee655863726f07b7f4002e86b8f115b9 Step #5: Base64: AAAABOqlqzo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1051 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4155396336 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5562b62e4d60, 0x5562b64cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5562b64cd720,0x5562b83572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2dd9ca9aee655863726f07b7f4002e86b8f115b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1191 processed earlier; will process 9785 files now Step #5: ==37870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5562ace272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5562b3462728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5562b344546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5562b344538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5562ace2d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5562acd8e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5562acd88c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5562ace1f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5562afe4e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5562afe4e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5562afe4e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5562afe4e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5562afe4e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5562afe4e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5562afe4e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5562afe4e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5562afe4e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5562afe4e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5562b205345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5562aedaf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5562aedba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5562aeb65d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5562aeb65d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5562aeb66808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5562aeb65944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5562aeb65944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5562aeb65944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5562b344794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5562b34507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5562b3438529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5562b3462fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc260754082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5562acd8743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x23,0x38,0x38,0x38,0x38,0x38,0x3b, Step #5: 𕬸 Step #5: artifact_prefix='./'; Test unit written to ./oom-c1d856f341c00ba2a34437f229af4fa4d6599762 Step #5: Base64: JiM4ODg4ODs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1052 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4156269118 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556641245d60, 0x55664142e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55664142e720,0x5566432b82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c1d856f341c00ba2a34437f229af4fa4d6599762' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1192 processed earlier; will process 9784 files now Step #5: ==37906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556637d882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55663e3c3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55663e3a646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55663e3a638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556637d8e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556637cef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556637ce9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556637d80595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55663adaf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55663adaf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55663adaf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55663adaf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55663adaf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55663adaf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55663adaf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55663adaf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55663adaf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55663adaf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55663cfb445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556639d10578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556639d1b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556639ac6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556639ac6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556639ac7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556639ac6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556639ac6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556639ac6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55663e3a894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55663e3b17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55663e399529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55663e3c3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc58b60b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556637ce843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0xf0,0x9a,0xa1,0xa5, Step #5: (?i)\360\232\241\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-ca6545145cdabc59ed985918f5dddbdf074a5fdf Step #5: Base64: KD9pKfCaoaU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1053 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4157129860 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e742cc8d60, 0x55e742eb171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e742eb1720,0x55e744d3b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ca6545145cdabc59ed985918f5dddbdf074a5fdf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1193 processed earlier; will process 9783 files now Step #5: #1 pulse cov: 3581 ft: 3582 exec/s: 0 rss: 165Mb Step #5: ==37942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e73980b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e73fe46728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e73fe2946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e73fe2938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e739811652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e73977242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e73976cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e739803595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e73c8328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e73c8328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e73c8328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e73c8328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e73c8328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e73c8328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e73c8328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e73c8328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e73c8328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e73c8328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e73ea3745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e73b793578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e73b79e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e73b549d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e73b549d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e73b54a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e73b549944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e73b549944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e73b549944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e73fe2b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e73fe347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e73fe1c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e73fe46fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd36fff8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e73976b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x27,0x27,0x27,0x27,0x29,0x29,0x27, Step #5: '''''))' Step #5: artifact_prefix='./'; Test unit written to ./oom-40980687cffef59d14c7eee1005feb203dc17db5 Step #5: Base64: JycnJycpKSc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1054 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4158106244 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561eaffc0d60, 0x561eb01a971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561eb01a9720,0x561eb20332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/40980687cffef59d14c7eee1005feb203dc17db5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1195 processed earlier; will process 9781 files now Step #5: #1 pulse cov: 3739 ft: 3740 exec/s: 0 rss: 164Mb Step #5: ==37978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ea6b032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ead13e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ead12146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ead12138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ea6b09652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ea6a6a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ea6a64c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ea6afb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ea9b2a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ea9b2a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ea9b2a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ea9b2a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ea9b2a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ea9b2a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ea9b2a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ea9b2a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ea9b2a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ea9b2a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561eabd2f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ea8a8b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ea8a965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ea8841d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ea8841d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ea8842808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ea8841944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ea8841944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ea8841944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ead12394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ead12c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ead114529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ead13efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7effe0f4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ea6a6343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0xf0,0x9e,0x84,0x9e, Step #5: (?i)\360\236\204\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-025781f21ad76926a4589994c9c7d04a30d21dfa Step #5: Base64: KD9pKfCehJ4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1055 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4158999136 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556130017d60, 0x55613020071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556130200720,0x55613208a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/025781f21ad76926a4589994c9c7d04a30d21dfa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1197 processed earlier; will process 9779 files now Step #5: ==38014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556126b5a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55612d195728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55612d17846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55612d17838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556126b60652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556126ac142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556126abbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556126b52595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556129b818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556129b818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556129b818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556129b818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556129b818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556129b818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556129b818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556129b818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556129b818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556129b818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55612bd8645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556128ae2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556128aed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556128898d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556128898d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556128899808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556128898944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556128898944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556128898944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55612d17a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55612d1837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55612d16b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55612d195fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f42b1f2e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556126aba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcc,0x9a,0xcc,0x9f,0xd6,0xb7,0xcc,0xb8, Step #5: \314\232\314\237\326\267\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-6d1db84008fc39d374027e044a3a392bff6cc384 Step #5: Base64: zJrMn9a3zLg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1056 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4159807646 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5588c0ceed60, 0x5588c0ed771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5588c0ed7720,0x5588c2d612c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6d1db84008fc39d374027e044a3a392bff6cc384' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1198 processed earlier; will process 9778 files now Step #5: ==38050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5588b78312d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5588bde6c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5588bde4f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5588bde4f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5588b7837652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5588b779842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5588b7792c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5588b7829595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5588ba8588c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5588ba8588c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5588ba8588c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5588ba8588c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5588ba8588c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5588ba8588c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5588ba8588c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5588ba8588c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5588ba8588c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5588ba8588c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5588bca5d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5588b97b9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5588b97c45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5588b956fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5588b956fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5588b9570808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5588b956f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5588b956f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5588b956f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5588bde5194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5588bde5a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5588bde42529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5588bde6cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6b36eb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5588b779143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x7b,0x66,0x37,0x66,0x7d, Step #5: \"\\u{f7f} Step #5: artifact_prefix='./'; Test unit written to ./oom-46bb9995c8863a164b9dd7633172314f6e95fcdb Step #5: Base64: Ilx1e2Y3Zn0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1057 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4160640062 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55774888ad60, 0x557748a7371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557748a73720,0x55774a8fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/46bb9995c8863a164b9dd7633172314f6e95fcdb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1199 processed earlier; will process 9777 files now Step #5: ==38086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55773f3cd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557745a08728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5577459eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5577459eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55773f3d3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55773f33442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55773f32ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55773f3c5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5577423f48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5577423f48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5577423f48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5577423f48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5577423f48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5577423f48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5577423f48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5577423f48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5577423f48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5577423f48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5577445f945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557741355578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5577413605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55774110bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55774110bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55774110c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55774110b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55774110b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55774110b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5577459ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5577459f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5577459de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557745a08fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f885be3c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55773f32d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xb,0x60,0xf3,0xa2,0x80,0xb6,0xbf, Step #5: `\013`\363\242\200\266\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-60b39f4d36bd9986348883f91a4de0314cda8493 Step #5: Base64: YAtg86KAtr8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1058 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4161638606 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d13b96bd60, 0x55d13bb5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d13bb54720,0x55d13d9de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/60b39f4d36bd9986348883f91a4de0314cda8493' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1200 processed earlier; will process 9776 files now Step #5: ==38122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1324ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d138ae9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d138acc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d138acc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1324b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d13241542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d13240fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1324a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1354d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1354d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1354d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1354d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1354d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1354d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1354d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1354d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1354d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1354d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d1376da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d134436578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1344415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d1341ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d1341ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d1341ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d1341ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d1341ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d1341ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d138ace94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d138ad77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d138abf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d138ae9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f588ca6b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d13240e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x74,0x72,0x65,0x61,0x6d,0x69,0x69, Step #5: streamii Step #5: artifact_prefix='./'; Test unit written to ./oom-e192c2e2ab838cdb1d5230c2485fe3158436fd66 Step #5: Base64: c3RyZWFtaWk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1059 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4162453064 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55711f963d60, 0x55711fb4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55711fb4c720,0x5571219d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e192c2e2ab838cdb1d5230c2485fe3158436fd66' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1201 processed earlier; will process 9775 files now Step #5: ==38158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571164a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55711cae1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55711cac446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55711cac438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571164ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55711640d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557116407c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55711649e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571194cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571194cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571194cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571194cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571194cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571194cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571194cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571194cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571194cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571194cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55711b6d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55711842e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571184395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571181e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571181e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571181e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571181e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571181e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571181e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55711cac694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55711cacf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55711cab7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55711cae1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8f32b76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55711640643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x84,0xcd,0x84,0xf0,0x9d,0x85,0xad, Step #5: \315\204\315\204\360\235\205\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-5c09656ddec5b7321f5768fdba3f3d9495ab5698 Step #5: Base64: zYTNhPCdha0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1060 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4163269316 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558fc25c3d60, 0x558fc27ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558fc27ac720,0x558fc46362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c09656ddec5b7321f5768fdba3f3d9495ab5698' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1202 processed earlier; will process 9774 files now Step #5: ==38194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558fb91062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558fbf741728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558fbf72446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558fbf72438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558fb910c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558fb906d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558fb9067c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558fb90fe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558fbc12d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558fbc12d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558fbc12d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558fbc12d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558fbc12d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558fbc12d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558fbc12d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558fbc12d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558fbc12d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558fbc12d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558fbe33245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558fbb08e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558fbb0995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558fbae44d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558fbae44d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558fbae45808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558fbae44944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558fbae44944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558fbae44944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558fbf72694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558fbf72f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558fbf717529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558fbf741fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f2715b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558fb906643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x23,0x34,0xf0,0xa4,0x86,0x8a,0x3c, Step #5: \360\244\206\212< Step #5: artifact_prefix='./'; Test unit written to ./oom-1a35fec3e4915afac4ecd4915c8820a92d22336d Step #5: Base64: JiM08KSGijw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1061 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4164159906 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564741ef3d60, 0x5647420dc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5647420dc720,0x564743f662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a35fec3e4915afac4ecd4915c8820a92d22336d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1203 processed earlier; will process 9773 files now Step #5: ==38230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564738a362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56473f071728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56473f05446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56473f05438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564738a3c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56473899d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564738997c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564738a2e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56473ba5d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56473ba5d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56473ba5d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56473ba5d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56473ba5d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56473ba5d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56473ba5d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56473ba5d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56473ba5d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56473ba5d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56473dc6245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56473a9be578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56473a9c95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56473a774d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56473a774d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56473a775808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56473a774944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56473a774944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56473a774944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56473f05694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56473f05f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56473f047529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56473f071fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2fbfd34082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56473899643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x2d,0x2d,0x28,0x2d,0x2d,0x42,0x47, Step #5: s--(--BG Step #5: artifact_prefix='./'; Test unit written to ./oom-b69df6201a12f123648c3334eebae1dc7a6e1ca8 Step #5: Base64: cy0tKC0tQkc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1062 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4165019039 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d9a3b45d60, 0x55d9a3d2e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d9a3d2e720,0x55d9a5bb82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b69df6201a12f123648c3334eebae1dc7a6e1ca8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1204 processed earlier; will process 9772 files now Step #5: #1 pulse cov: 3672 ft: 3673 exec/s: 0 rss: 164Mb Step #5: #2 pulse cov: 3968 ft: 4244 exec/s: 0 rss: 165Mb Step #5: ==38266== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d99a6882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d9a0cc3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d9a0ca646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d9a0ca638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d99a68e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d99a5ef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d99a5e9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d99a680595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d99d6af8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d99d6af8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d99d6af8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d99d6af8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d99d6af8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d99d6af8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d99d6af8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d99d6af8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d99d6af8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d99d6af8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d99f8b445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d99c610578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d99c61b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d99c3c6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d99c3c6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d99c3c7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d99c3c6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d99c3c6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d99c3c6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d9a0ca894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d9a0cb17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d9a0c99529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d9a0cc3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f44753b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d99a5e843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x7c,0x7c,0x25,0x7c,0x7c,0x25,0x7c, Step #5: %||%||%| Step #5: artifact_prefix='./'; Test unit written to ./oom-995823bffd3012f082dcb328acb277e05e905c95 Step #5: Base64: JXx8JXx8JXw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1063 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4166200373 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560a28e32d60, 0x560a2901b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560a2901b720,0x560a2aea52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/995823bffd3012f082dcb328acb277e05e905c95' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1207 processed earlier; will process 9769 files now Step #5: ==38302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560a1f9752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560a25fb0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560a25f9346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560a25f9338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560a1f97b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560a1f8dc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560a1f8d6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560a1f96d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560a2299c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560a2299c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560a2299c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560a2299c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560a2299c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560a2299c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560a2299c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560a2299c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560a2299c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560a2299c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560a24ba145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560a218fd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560a219085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560a216b3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560a216b3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560a216b4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560a216b3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560a216b3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560a216b3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560a25f9594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560a25f9e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560a25f86529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560a25fb0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd79dd3c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560a1f8d543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5e,0x0,0x2d,0xef,0xbf,0xa3,0x5d, Step #5: [^\000-\357\277\243] Step #5: artifact_prefix='./'; Test unit written to ./oom-3be1e8a4fea5c5d7c4cc03ecf59625f5649db196 Step #5: Base64: W14ALe+/o10= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1064 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4167168965 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ff6f3fd60, 0x558ff712871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ff7128720,0x558ff8fb22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3be1e8a4fea5c5d7c4cc03ecf59625f5649db196' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1208 processed earlier; will process 9768 files now Step #5: ==38338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558feda822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ff40bd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ff40a046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ff40a038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558feda88652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558fed9e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558fed9e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558feda7a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ff0aa98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ff0aa98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ff0aa98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ff0aa98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ff0aa98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ff0aa98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ff0aa98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ff0aa98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ff0aa98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ff0aa98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558ff2cae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558fefa0a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558fefa155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558fef7c0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558fef7c0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558fef7c1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558fef7c0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558fef7c0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558fef7c0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ff40a294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ff40ab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ff4093529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ff40bdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f731e525082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558fed9e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xb,0x60,0xf3,0xa0,0x80,0xb6,0xbf, Step #5: `\013`\363\240\200\266\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-4f03fdf36f0f32a59eeecdf8ce7276d025097405 Step #5: Base64: YAtg86CAtr8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1065 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4168525420 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ce5aeebd60, 0x55ce5b0d471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ce5b0d4720,0x55ce5cf5e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f03fdf36f0f32a59eeecdf8ce7276d025097405' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1209 processed earlier; will process 9767 files now Step #5: ==38374== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ce51a2e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ce58069728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ce5804c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ce5804c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ce51a34652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ce5199542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ce5198fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ce51a26595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ce54a558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ce54a558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ce54a558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ce54a558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ce54a558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ce54a558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ce54a558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ce54a558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ce54a558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ce54a558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ce56c5a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ce539b6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ce539c15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ce5376cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ce5376cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ce5376d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ce5376c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ce5376c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ce5376c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ce5804e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ce580577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ce5803f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ce58069fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f645398e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ce5198e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x3d,0xb,0x60,0xa,0x3d,0xa,0x60, Step #5: t=\013`\012=\012` Step #5: artifact_prefix='./'; Test unit written to ./oom-078b272e5820958eb805098fe13118a0e0b01d88 Step #5: Base64: dD0LYAo9CmA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1066 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4169715973 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562b7574cd60, 0x562b7593571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562b75935720,0x562b777bf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/078b272e5820958eb805098fe13118a0e0b01d88' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1210 processed earlier; will process 9766 files now Step #5: ==38410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562b6c28f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562b728ca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562b728ad46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562b728ad38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562b6c295652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562b6c1f642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562b6c1f0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562b6c287595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562b6f2b68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562b6f2b68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562b6f2b68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562b6f2b68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562b6f2b68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562b6f2b68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562b6f2b68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562b6f2b68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562b6f2b68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562b6f2b68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562b714bb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562b6e217578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562b6e2225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562b6dfcdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562b6dfcdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562b6dfce808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562b6dfcd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562b6dfcd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562b6dfcd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562b728af94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562b728b87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562b728a0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562b728cafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff213daa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562b6c1ef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0x58,0x58,0x2e,0x2e,0x69,0x46,0x30, Step #5: XXX..iF0 Step #5: artifact_prefix='./'; Test unit written to ./oom-611f4213bca1005f3890a1c1baeae8ab5fd654b9 Step #5: Base64: WFhYLi5pRjA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1067 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4170626587 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb8d239d60, 0x55fb8d42271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb8d422720,0x55fb8f2ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/611f4213bca1005f3890a1c1baeae8ab5fd654b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1211 processed earlier; will process 9765 files now Step #5: ==38446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb83d7c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb8a3b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb8a39a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb8a39a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb83d82652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb83ce342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb83cddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb83d74595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb86da38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb86da38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb86da38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb86da38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb86da38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb86da38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb86da38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb86da38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb86da38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb86da38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb88fa845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb85d04578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb85d0f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb85abad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb85abad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb85abb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb85aba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb85aba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb85aba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb8a39c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb8a3a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb8a38d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb8a3b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb00b486082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb83cdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0x27,0xe1,0x80,0xb9, Step #5: \016ws:'\341\200\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-189f9b77775d272e01aee361f0310d399cf2fa4c Step #5: Base64: DndzOifhgLk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1068 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4171559315 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e23f8e9d60, 0x55e23fad271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e23fad2720,0x55e24195c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/189f9b77775d272e01aee361f0310d399cf2fa4c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1212 processed earlier; will process 9764 files now Step #5: ==38482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e23642c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e23ca67728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e23ca4a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e23ca4a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e236432652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e23639342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e23638dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e236424595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e2394538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e2394538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e2394538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e2394538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e2394538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e2394538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e2394538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e2394538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e2394538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e2394538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e23b65845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e2383b4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e2383bf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e23816ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e23816ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e23816b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e23816a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e23816a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e23816a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e23ca4c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e23ca557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e23ca3d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e23ca67fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff0dd01d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e23638c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x52,0x4d,0x42,0x5f,0x4d,0x42,0x5f, Step #5: _RMB_MB_ Step #5: artifact_prefix='./'; Test unit written to ./oom-364f80548cc797c0250469a9ed14b81ce6961943 Step #5: Base64: X1JNQl9NQl8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1069 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4172476668 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5645f2cddd60, 0x5645f2ec671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5645f2ec6720,0x5645f4d502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/364f80548cc797c0250469a9ed14b81ce6961943' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1213 processed earlier; will process 9763 files now Step #5: ==38518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5645e98202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5645efe5b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5645efe3e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5645efe3e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5645e9826652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5645e978742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5645e9781c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5645e9818595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5645ec8478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5645ec8478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5645ec8478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5645ec8478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5645ec8478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5645ec8478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5645ec8478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5645ec8478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5645ec8478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5645ec8478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5645eea4c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5645eb7a8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5645eb7b35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5645eb55ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5645eb55ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5645eb55f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5645eb55e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5645eb55e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5645eb55e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5645efe4094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5645efe497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5645efe31529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5645efe5bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2aeeb1a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5645e978043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x24,0x6e,0x0,0x24,0x6f,0x0,0x0, Step #5: :$n\000$o\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-c61611c68cc5b3790a74ee9293428de87596a314 Step #5: Base64: OiRuACRvAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1070 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4173368788 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5646182d4d60, 0x5646184bd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5646184bd720,0x56461a3472c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c61611c68cc5b3790a74ee9293428de87596a314' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1214 processed earlier; will process 9762 files now Step #5: ==38554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56460ee172d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564615452728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56461543546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56461543538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56460ee1d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56460ed7e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56460ed78c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56460ee0f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564611e3e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564611e3e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564611e3e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564611e3e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564611e3e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564611e3e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564611e3e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564611e3e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564611e3e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564611e3e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56461404345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564610d9f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564610daa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564610b55d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564610b55d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564610b56808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564610b55944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564610b55944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564610b55944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56461543794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5646154407b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564615428529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564615452fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2c78b8c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56460ed7743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x59,0x7f,0x7f,0x0,0xe,0x27,0x24, Step #5: $Y\177\177\000\016'$ Step #5: artifact_prefix='./'; Test unit written to ./oom-098edb04d6739c062ecbb39e383872f90a28e61e Step #5: Base64: JFl/fwAOJyQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1071 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4174262836 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564bbf2bed60, 0x564bbf4a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564bbf4a7720,0x564bc13312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/098edb04d6739c062ecbb39e383872f90a28e61e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1215 processed earlier; will process 9761 files now Step #5: ==38590== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564bb5e012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564bbc43c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564bbc41f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564bbc41f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564bb5e07652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564bb5d6842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564bb5d62c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564bb5df9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564bb8e288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564bb8e288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564bb8e288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564bb8e288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564bb8e288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564bb8e288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564bb8e288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564bb8e288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564bb8e288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564bb8e288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564bbb02d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564bb7d89578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564bb7d945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564bb7b3fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564bb7b3fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564bb7b40808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564bb7b3f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564bb7b3f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564bb7b3f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564bbc42194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564bbc42a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564bbc412529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564bbc43cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd0878ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564bb5d6143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x2a,0x27,0x2a,0x74,0x6d,0x78,0x58, Step #5: B*'*tmxX Step #5: artifact_prefix='./'; Test unit written to ./oom-b6de84f9b21a8f4d3fa44625ed523326c019cc3c Step #5: Base64: QionKnRteFg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1072 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4175180948 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ccfa86bd60, 0x55ccfaa5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ccfaa54720,0x55ccfc8de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6de84f9b21a8f4d3fa44625ed523326c019cc3c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1216 processed earlier; will process 9760 files now Step #5: ==38626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ccf13ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ccf79e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ccf79cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ccf79cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ccf13b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ccf131542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ccf130fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ccf13a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ccf43d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ccf43d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ccf43d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ccf43d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ccf43d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ccf43d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ccf43d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ccf43d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ccf43d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ccf43d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ccf65da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ccf3336578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ccf33415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ccf30ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ccf30ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ccf30ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ccf30ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ccf30ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ccf30ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ccf79ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ccf79d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ccf79bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ccf79e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4361fb8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ccf130e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x57,0x73,0x3a,0xc8,0xb0,0xcc,0xb8, Step #5: \016Ws:\310\260\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-97c1662ac56ab15cb757b629dc10ba43621e5619 Step #5: Base64: DldzOsiwzLg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1073 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4176108878 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ebd30fd60, 0x562ebd4f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ebd4f8720,0x562ebf3822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/97c1662ac56ab15cb757b629dc10ba43621e5619' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1217 processed earlier; will process 9759 files now Step #5: ==38662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562eb3e522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562eba48d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562eba47046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562eba47038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562eb3e58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562eb3db942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562eb3db3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562eb3e4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562eb6e798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562eb6e798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562eb6e798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562eb6e798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562eb6e798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562eb6e798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562eb6e798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562eb6e798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562eb6e798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562eb6e798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562eb907e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562eb5dda578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562eb5de55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562eb5b90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562eb5b90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562eb5b91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562eb5b90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562eb5b90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562eb5b90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562eba47294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562eba47b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562eba463529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562eba48dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7535fc4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562eb3db243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x3a,0xf0,0x9e,0xa3,0x87, Step #5: (?i:\360\236\243\207 Step #5: artifact_prefix='./'; Test unit written to ./oom-4209dc9b46d2cd74b1d97499c09264fe82e9fb98 Step #5: Base64: KD9pOvCeo4c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1074 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4177041524 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5571ea41dd60, 0x5571ea60671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5571ea606720,0x5571ec4902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4209dc9b46d2cd74b1d97499c09264fe82e9fb98' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1218 processed earlier; will process 9758 files now Step #5: ==38698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571e0f602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5571e759b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5571e757e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5571e757e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571e0f66652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5571e0ec742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5571e0ec1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5571e0f58595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571e3f878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571e3f878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571e3f878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571e3f878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571e3f878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571e3f878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571e3f878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571e3f878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571e3f878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571e3f878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5571e618c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5571e2ee8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571e2ef35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571e2c9ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571e2c9ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571e2c9f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571e2c9e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571e2c9e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571e2c9e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5571e758094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571e75897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5571e7571529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5571e759bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7eff7ed5c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5571e0ec043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0xa,0x64,0xa,0x60,0xe,0x60,0xe, Step #5: d\012d\012`\016`\016 Step #5: artifact_prefix='./'; Test unit written to ./oom-aea50aff24bb3845bc662690c42f87d5af1b64f0 Step #5: Base64: ZApkCmAOYA4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1075 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4178190847 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f5c21f5d60, 0x55f5c23de71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f5c23de720,0x55f5c42682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aea50aff24bb3845bc662690c42f87d5af1b64f0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1219 processed earlier; will process 9757 files now Step #5: ==38734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f5b8d382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f5bf373728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f5bf35646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f5bf35638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f5b8d3e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f5b8c9f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f5b8c99c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f5b8d30595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f5bbd5f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f5bbd5f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f5bbd5f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f5bbd5f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f5bbd5f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f5bbd5f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f5bbd5f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f5bbd5f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f5bbd5f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f5bbd5f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f5bdf6445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f5bacc0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f5baccb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f5baa76d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f5baa76d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f5baa77808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f5baa76944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f5baa76944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f5baa76944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f5bf35894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f5bf3617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f5bf349529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f5bf373fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1636053082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f5b8c9843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x20,0x3f,0x20,0xf0,0x91,0x87,0x80, Step #5: ? ? \360\221\207\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-680d697912f0e3c87e57df004b14a395ea11b48d Step #5: Base64: PyA/IPCRh4A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1076 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4179129418 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56237bcf7d60, 0x56237bee071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56237bee0720,0x56237dd6a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/680d697912f0e3c87e57df004b14a395ea11b48d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1220 processed earlier; will process 9756 files now Step #5: ==38770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56237283a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562378e75728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562378e5846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562378e5838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562372840652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5623727a142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56237279bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562372832595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623758618c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623758618c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623758618c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623758618c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623758618c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623758618c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623758618c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623758618c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623758618c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623758618c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562377a6645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5623747c2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5623747cd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562374578d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562374578d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562374579808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562374578944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562374578944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562374578944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562378e5a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562378e637b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562378e4b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562378e75fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd1b1023082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56237279a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x61,0x73,0x2a,0x6d,0x1,0xfd,0xd7, Step #5: \000as*m\001\375\327 Step #5: artifact_prefix='./'; Test unit written to ./oom-1743da04d23e57e8cfe95ece0a9e0336b2840be1 Step #5: Base64: AGFzKm0B/dc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1077 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4180020368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556ce3428d60, 0x556ce361171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556ce3611720,0x556ce549b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1743da04d23e57e8cfe95ece0a9e0336b2840be1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1221 processed earlier; will process 9755 files now Step #5: ==38806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556cd9f6b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556ce05a6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556ce058946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556ce058938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556cd9f71652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556cd9ed242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556cd9eccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556cd9f63595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556cdcf928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556cdcf928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556cdcf928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556cdcf928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556cdcf928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556cdcf928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556cdcf928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556cdcf928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556cdcf928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556cdcf928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556cdf19745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556cdbef3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556cdbefe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556cdbca9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556cdbca9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556cdbcaa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556cdbca9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556cdbca9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556cdbca9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556ce058b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556ce05947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556ce057c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556ce05a6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa2098fe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556cd9ecb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x68,0xa,0x31,0x20,0x39,0xa,0x31, Step #5: Ph\0121 9\0121 Step #5: artifact_prefix='./'; Test unit written to ./oom-ff5ebcb59429a2e3fb270ee7b7ed45f60d6ea0c6 Step #5: Base64: UGgKMSA5CjE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1078 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4180964094 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5558416b3d60, 0x55584189c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55584189c720,0x5558437262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ff5ebcb59429a2e3fb270ee7b7ed45f60d6ea0c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1222 processed earlier; will process 9754 files now Step #5: ==38842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5558381f62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55583e831728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55583e81446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55583e81438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5558381fc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55583815d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555838157c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5558381ee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55583b21d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55583b21d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55583b21d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55583b21d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55583b21d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55583b21d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55583b21d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55583b21d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55583b21d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55583b21d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55583d42245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55583a17e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55583a1895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555839f34d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555839f34d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555839f35808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555839f34944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555839f34944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555839f34944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55583e81694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55583e81f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55583e807529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55583e831fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc92bea6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55583815643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x74,0x63,0x66,0xff,0x0,0x0,0x0, Step #5: ttcf\377\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4079042cbc93b11b606ca0bde086f3ae276864b0 Step #5: Base64: dHRjZv8AAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1079 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4181854758 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c1fa02ed60, 0x55c1fa21771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c1fa217720,0x55c1fc0a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4079042cbc93b11b606ca0bde086f3ae276864b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1223 processed earlier; will process 9753 files now Step #5: ==38878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c1f0b712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c1f71ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c1f718f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c1f718f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c1f0b77652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c1f0ad842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c1f0ad2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c1f0b69595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1f3b988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1f3b988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1f3b988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1f3b988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1f3b988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1f3b988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1f3b988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1f3b988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1f3b988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1f3b988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c1f5d9d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c1f2af9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c1f2b045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c1f28afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c1f28afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c1f28b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c1f28af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c1f28af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c1f28af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c1f719194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c1f719a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c1f7182529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c1f71acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc19e1ac082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c1f0ad143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c, Step #5: ?\\\\\\\\\\\\\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-026707bf8b0a2dc0ccbb6ff3822c918ead30a03e Step #5: Base64: P1xcXFxcXFw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1080 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4182522717 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d10d672d60, 0x55d10d85b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d10d85b720,0x55d10f6e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/026707bf8b0a2dc0ccbb6ff3822c918ead30a03e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1224 processed earlier; will process 9752 files now Step #5: #1 pulse cov: 3597 ft: 3598 exec/s: 0 rss: 164Mb Step #5: ==38914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1041b52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d10a7f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d10a7d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d10a7d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1041bb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d10411c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d104116c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1041ad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1071dc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1071dc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1071dc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1071dc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1071dc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1071dc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1071dc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1071dc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1071dc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1071dc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d1093e145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d10613d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1061485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d105ef3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d105ef3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d105ef4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d105ef3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d105ef3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d105ef3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d10a7d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d10a7de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d10a7c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d10a7f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1df2474082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d10411543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd8,0xad,0xd8,0x98,0x3f,0xff,0x8,0x30, Step #5: \330\255\330\230?\377\0100 Step #5: artifact_prefix='./'; Test unit written to ./oom-be929faeba7b756ad666c25208fbb716cac5b0ab Step #5: Base64: 2K3YmD//CDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1081 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4183187139 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c332addd60, 0x55c332cc671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c332cc6720,0x55c334b502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be929faeba7b756ad666c25208fbb716cac5b0ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1226 processed earlier; will process 9750 files now Step #5: ==38950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c3296202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c32fc5b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c32fc3e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c32fc3e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c329626652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c32958742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c329581c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c329618595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c32c6478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c32c6478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c32c6478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c32c6478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c32c6478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c32c6478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c32c6478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c32c6478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c32c6478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c32c6478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c32e84c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c32b5a8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c32b5b35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c32b35ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c32b35ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c32b35f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c32b35e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c32b35e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c32b35e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c32fc4094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c32fc497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c32fc31529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c32fc5bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a0d91f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c32958043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xa,0x60,0xf3,0xa0,0x80,0xb6,0x58, Step #5: `\012`\363\240\200\266X Step #5: artifact_prefix='./'; Test unit written to ./oom-1f24f45fcf6d394ba36fdf6bc86748c0f311be2d Step #5: Base64: YApg86CAtlg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1082 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4184396472 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cb56513d60, 0x55cb566fc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cb566fc720,0x55cb585862c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f24f45fcf6d394ba36fdf6bc86748c0f311be2d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1227 processed earlier; will process 9749 files now Step #5: ==38986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cb4d0562d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cb53691728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cb5367446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cb5367438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cb4d05c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cb4cfbd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cb4cfb7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cb4d04e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cb5007d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cb5007d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cb5007d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cb5007d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cb5007d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cb5007d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cb5007d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cb5007d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cb5007d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cb5007d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cb5228245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cb4efde578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cb4efe95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cb4ed94d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cb4ed94d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cb4ed95808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cb4ed94944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cb4ed94944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cb4ed94944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cb5367694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cb5367f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cb53667529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cb53691fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f55d68a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cb4cfb643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x4,0xf0,0x91,0x83,0xb1, Step #5: \000\000\000\004\360\221\203\261 Step #5: artifact_prefix='./'; Test unit written to ./oom-a362823c835509edc13f1e4c2bf08e4f6bc86221 Step #5: Base64: AAAABPCRg7E= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1083 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4185509054 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560423a62d60, 0x560423c4b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560423c4b720,0x560425ad52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a362823c835509edc13f1e4c2bf08e4f6bc86221' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1228 processed earlier; will process 9748 files now Step #5: #1 pulse cov: 6451 ft: 6451 exec/s: 0 rss: 178Mb Step #5: ==39022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56041a5a52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560420be0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560420bc346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560420bc338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56041a5ab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56041a50c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56041a506c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56041a59d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56041d5cc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56041d5cc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56041d5cc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56041d5cc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56041d5cc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56041d5cc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56041d5cc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56041d5cc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56041d5cc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56041d5cc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56041f7d145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56041c52d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56041c5385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56041c2e3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56041c2e3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56041c2e4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56041c2e3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56041c2e3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56041c2e3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560420bc594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560420bce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560420bb6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560420be0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0594baa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56041a50543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xcd,0xbc,0x3e,0x3c,0xcd,0xbb,0x3e, Step #5: <\315\274><\315\273> Step #5: artifact_prefix='./'; Test unit written to ./oom-8450fbd904d021a90d454729c00c31db19adb53d Step #5: Base64: PM28PjzNuz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1084 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4186555877 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c25a19d60, 0x557c25c0271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c25c02720,0x557c27a8c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8450fbd904d021a90d454729c00c31db19adb53d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1230 processed earlier; will process 9746 files now Step #5: ==39058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c1c55c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c22b97728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c22b7a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c22b7a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c1c562652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c1c4c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c1c4bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c1c554595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c1f5838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c1f5838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c1f5838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c1f5838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c1f5838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c1f5838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c1f5838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c1f5838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c1f5838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c1f5838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c2178845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c1e4e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c1e4ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c1e29ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c1e29ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c1e29b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c1e29a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c1e29a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c1e29a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c22b7c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c22b857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c22b6d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c22b97fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7546be1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c1c4bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24, Step #5: $$$$$$$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-b8c435e13f9248ad695f0901d6dc3f46b71c9d9b Step #5: Base64: JCQkJCQkJCQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1085 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4187156432 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d945861d60, 0x55d945a4a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d945a4a720,0x55d9478d42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8c435e13f9248ad695f0901d6dc3f46b71c9d9b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1231 processed earlier; will process 9745 files now Step #5: ==39094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d93c3a42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d9429df728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d9429c246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d9429c238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d93c3aa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d93c30b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d93c305c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d93c39c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d93f3cb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d93f3cb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d93f3cb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d93f3cb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d93f3cb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d93f3cb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d93f3cb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d93f3cb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d93f3cb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d93f3cb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d9415d045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d93e32c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d93e3375a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d93e0e2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d93e0e2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d93e0e3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d93e0e2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d93e0e2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d93e0e2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d9429c494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d9429cd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d9429b5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d9429dffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcb2658c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d93c30443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0x5b,0xe1,0x92,0xbc, Step #5: (?i)[\341\222\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-08709b0e19cc0d1de9a34169f31c28b12ad08c9b Step #5: Base64: KD9pKVvhkrw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1086 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4187648708 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5614a0ab4d60, 0x5614a0c9d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5614a0c9d720,0x5614a2b272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/08709b0e19cc0d1de9a34169f31c28b12ad08c9b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1232 processed earlier; will process 9744 files now Step #5: ==39130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614975f72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56149dc32728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56149dc1546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56149dc1538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614975fd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56149755e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561497558c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614975ef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56149a61e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56149a61e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56149a61e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56149a61e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56149a61e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56149a61e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56149a61e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56149a61e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56149a61e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56149a61e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56149c82345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56149957f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56149958a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561499335d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561499335d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561499336808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561499335944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561499335944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561499335944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56149dc1794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56149dc207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56149dc08529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56149dc32fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8d46b78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56149755743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x6c,0x63,0x4f,0x4d,0x4d,0x20,0x4c, Step #5: .lcOMM L Step #5: artifact_prefix='./'; Test unit written to ./oom-c05dc745672d33a0a2224a2dddb4e82b7420783f Step #5: Base64: LmxjT01NIEw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1087 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4188142467 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d7ed30d60, 0x558d7ef1971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d7ef19720,0x558d80da32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c05dc745672d33a0a2224a2dddb4e82b7420783f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1233 processed earlier; will process 9743 files now Step #5: ==39166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d758732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d7beae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d7be9146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d7be9138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d75879652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d757da42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d757d4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d7586b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d7889a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d7889a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d7889a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d7889a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d7889a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d7889a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d7889a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d7889a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d7889a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d7889a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d7aa9f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d777fb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d778065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d775b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d775b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d775b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d775b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d775b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d775b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d7be9394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d7be9c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d7be84529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d7beaefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff77cc62082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d757d343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x34,0x37,0x33,0x33,0x2e,0xc6,0x25, Step #5: 04733.\306% Step #5: artifact_prefix='./'; Test unit written to ./oom-5df52d30c58e1cf97811a65b8fef5a511806398c Step #5: Base64: MDQ3MzMuxiU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1088 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4188637573 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562bb2726d60, 0x562bb290f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562bb290f720,0x562bb47992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5df52d30c58e1cf97811a65b8fef5a511806398c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1234 processed earlier; will process 9742 files now Step #5: ==39202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ba92692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562baf8a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562baf88746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562baf88738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ba926f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ba91d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ba91cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ba9261595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562bac2908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562bac2908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562bac2908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562bac2908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562bac2908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562bac2908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562bac2908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562bac2908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562bac2908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562bac2908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562bae49545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562bab1f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562bab1fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562baafa7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562baafa7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562baafa8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562baafa7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562baafa7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562baafa7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562baf88994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562baf8927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562baf87a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562baf8a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f12a95a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ba91c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x7a,0x61,0x0,0x68,0x6d,0x74,0x78, Step #5: iza\000hmtx Step #5: artifact_prefix='./'; Test unit written to ./oom-f0150c9657b72420a56c2893e8a059ea6159d63b Step #5: Base64: aXphAGhtdHg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1089 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4189163039 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5650fb461d60, 0x5650fb64a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5650fb64a720,0x5650fd4d42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f0150c9657b72420a56c2893e8a059ea6159d63b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1235 processed earlier; will process 9741 files now Step #5: ==39238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5650f1fa42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5650f85df728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5650f85c246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5650f85c238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5650f1faa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5650f1f0b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5650f1f05c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5650f1f9c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5650f4fcb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5650f4fcb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5650f4fcb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5650f4fcb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5650f4fcb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5650f4fcb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5650f4fcb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5650f4fcb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5650f4fcb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5650f4fcb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5650f71d045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5650f3f2c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5650f3f375a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5650f3ce2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5650f3ce2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5650f3ce3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5650f3ce2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5650f3ce2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5650f3ce2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5650f85c494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5650f85cd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5650f85b5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5650f85dffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1032c81082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5650f1f0443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x3c,0x0,0x0,0xd6,0xaa, Step #5: \000\000\000<\000\000\326\252 Step #5: artifact_prefix='./'; Test unit written to ./oom-3cd7e5452ed3ca3ed1bd23ed5fc1be277f19cf3d Step #5: Base64: AAAAPAAA1qo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1090 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4189645865 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dae9d8ad60, 0x55dae9f7371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dae9f73720,0x55daebdfd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3cd7e5452ed3ca3ed1bd23ed5fc1be277f19cf3d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1236 processed earlier; will process 9740 files now Step #5: ==39274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dae08cd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dae6f08728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dae6eeb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dae6eeb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dae08d3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dae083442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dae082ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dae08c5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dae38f48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dae38f48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dae38f48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dae38f48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dae38f48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dae38f48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dae38f48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dae38f48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dae38f48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dae38f48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dae5af945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dae2855578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dae28605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dae260bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dae260bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dae260c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dae260b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dae260b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dae260b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dae6eed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dae6ef67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dae6ede529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dae6f08fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa14948082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dae082d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x0,0x9,0x0,0x9,0x3,0x9,0x80, Step #5: \002\000\011\000\011\003\011\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-aeea04c6c9129baf72315b8d4ecbac555caeb467 Step #5: Base64: AgAJAAkDCYA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1091 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4190121224 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56061066cd60, 0x56061085571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560610855720,0x5606126df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aeea04c6c9129baf72315b8d4ecbac555caeb467' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1237 processed earlier; will process 9739 files now Step #5: ==39310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606071af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56060d7ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56060d7cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56060d7cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606071b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56060711642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560607110c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606071a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56060a1d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56060a1d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56060a1d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56060a1d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56060a1d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56060a1d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56060a1d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56060a1d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56060a1d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56060a1d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56060c3db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560609137578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5606091425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560608eedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560608eedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560608eee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560608eed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560608eed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560608eed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56060d7cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56060d7d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56060d7c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56060d7eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd7aab3a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56060710f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x9,0x3f,0x2a,0x2a,0x27,0xff,0x0, Step #5: =\011?**'\377\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-6c59fbac4e689b8f0c2c3a7d138984c5373036bb Step #5: Base64: PQk/Kion/wA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1092 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4190588213 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562c2421bd60, 0x562c2440471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562c24404720,0x562c2628e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6c59fbac4e689b8f0c2c3a7d138984c5373036bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1238 processed earlier; will process 9738 files now Step #5: #1 pulse cov: 3434 ft: 3435 exec/s: 0 rss: 163Mb Step #5: #2 pulse cov: 3819 ft: 4002 exec/s: 0 rss: 165Mb Step #5: ==39346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562c1ad5e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562c21399728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562c2137c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562c2137c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562c1ad64652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562c1acc542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562c1acbfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562c1ad56595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562c1dd858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562c1dd858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562c1dd858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562c1dd858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562c1dd858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562c1dd858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562c1dd858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562c1dd858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562c1dd858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562c1dd858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562c1ff8a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562c1cce6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562c1ccf15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562c1ca9cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562c1ca9cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562c1ca9d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562c1ca9c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562c1ca9c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562c1ca9c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562c2137e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562c213877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562c2136f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562c21399fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f455ae5a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562c1acbe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x13,0x2b,0x7e,0x74,0x6e,0x65,0x6e,0x2c, Step #5: \023+~tnen, Step #5: artifact_prefix='./'; Test unit written to ./oom-fc6a9c523b046274546f3cc0b6f101b232e7b2c4 Step #5: Base64: Eyt+dG5lbiw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1093 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4191169663 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ddd41ebd60, 0x55ddd43d471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ddd43d4720,0x55ddd625e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc6a9c523b046274546f3cc0b6f101b232e7b2c4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1241 processed earlier; will process 9735 files now Step #5: ==39382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ddcad2e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ddd1369728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ddd134c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ddd134c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ddcad34652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ddcac9542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ddcac8fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ddcad26595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ddcdd558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ddcdd558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ddcdd558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ddcdd558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ddcdd558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ddcdd558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ddcdd558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ddcdd558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ddcdd558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ddcdd558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ddcff5a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ddcccb6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ddcccc15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ddcca6cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ddcca6cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ddcca6d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ddcca6c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ddcca6c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ddcca6c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ddd134e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ddd13577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ddd133f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ddd1369fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f31b579b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ddcac8e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0xa,0x3d,0xa,0x4f, Step #5: DanM\012=\012O Step #5: artifact_prefix='./'; Test unit written to ./oom-01dc65f55424d54fa4caab236fc5055b65578466 Step #5: Base64: RGFuTQo9Ck8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1094 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4191670329 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ddc893d60, 0x560ddca7c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ddca7c720,0x560dde9062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/01dc65f55424d54fa4caab236fc5055b65578466' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1242 processed earlier; will process 9734 files now Step #5: ==39418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560dd33d62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560dd9a11728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560dd99f446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560dd99f438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560dd33dc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560dd333d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560dd3337c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560dd33ce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560dd63fd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560dd63fd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560dd63fd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560dd63fd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560dd63fd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560dd63fd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560dd63fd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560dd63fd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560dd63fd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560dd63fd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560dd860245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560dd535e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560dd53695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560dd5114d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560dd5114d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560dd5115808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560dd5114944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560dd5114944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560dd5114944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560dd99f694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560dd99ff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560dd99e7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560dd9a11fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3111b37082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560dd333643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x9,0x2b,0xa,0x9,0x2b,0xeb,0x7e, Step #5: +\012\011+\012\011+\353~ Step #5: artifact_prefix='./'; Test unit written to ./oom-b05bad4faac1f7272c3468a5720a22c7700e0c1b Step #5: Base64: KwoJKwoJK+t+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1095 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4192157609 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d3e06bd60, 0x556d3e25471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d3e254720,0x556d400de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b05bad4faac1f7272c3468a5720a22c7700e0c1b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1243 processed earlier; will process 9733 files now Step #5: ==39454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d34bae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d3b1e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d3b1cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d3b1cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d34bb4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d34b1542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d34b0fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d34ba6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d37bd58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d37bd58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d37bd58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d37bd58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d37bd58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d37bd58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d37bd58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d37bd58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d37bd58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d37bd58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d39dda45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d36b36578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d36b415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d368ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d368ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d368ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d368ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d368ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d368ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d3b1ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d3b1d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d3b1bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d3b1e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f338008d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d34b0e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x71,0x2d,0x2d,0x3e,0x3c,0x21,0x2d,0x2d, Step #5: 2 Step #5: artifact_prefix='./'; Test unit written to ./oom-27f6fdb62f23c07d7d811c9ece711aa4300942a3 Step #5: Base64: MDo2OjcuMC0tPjI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1355 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 24024232 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5609ba62bd60, 0x5609ba81471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5609ba814720,0x5609bc69e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/27f6fdb62f23c07d7d811c9ece711aa4300942a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1546 processed earlier; will process 9430 files now Step #5: ==48814== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609b116e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5609b77a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5609b778c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5609b778c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5609b1174652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5609b10d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5609b10cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5609b1166595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609b41958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609b41958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609b41958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609b41958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609b41958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609b41958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609b41958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609b41958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609b41958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609b41958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5609b639a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609b30f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609b31015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5609b2eacd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5609b2eacd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5609b2ead808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5609b2eac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5609b2eac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5609b2eac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5609b778e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5609b77977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5609b777f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5609b77a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd313167082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5609b10ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x7d,0x5d,0xa,0x2c,0x5b,0xf0,0x90,0xb2,0x81,0x3d, Step #5: [}]\012,[\360\220\262\201= Step #5: artifact_prefix='./'; Test unit written to ./oom-7fbb3779a1d6ee1c7b4dad91edf4a1ca7c46d7ea Step #5: Base64: W31dCixb8JCygT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1356 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 24496738 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5629a5b25d60, 0x5629a5d0e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5629a5d0e720,0x5629a7b982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7fbb3779a1d6ee1c7b4dad91edf4a1ca7c46d7ea' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1547 processed earlier; will process 9429 files now Step #5: ==48850== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56299c6682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5629a2ca3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5629a2c8646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5629a2c8638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56299c66e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56299c5cf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56299c5c9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56299c660595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56299f68f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56299f68f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56299f68f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56299f68f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56299f68f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56299f68f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56299f68f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56299f68f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56299f68f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56299f68f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5629a189445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56299e5f0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56299e5fb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56299e3a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56299e3a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56299e3a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56299e3a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56299e3a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56299e3a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5629a2c8894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5629a2c917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5629a2c79529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5629a2ca3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9626ea0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56299c5c843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x25,0x60,0x16,0x0,0x3b,0x0,0x23,0x60,0x31,0xdb, Step #5: \000%`\026\000;\000#`1\333 Step #5: artifact_prefix='./'; Test unit written to ./oom-1e4d0caa89fdb39377bb7be456864632c628aba3 Step #5: Base64: ACVgFgA7ACNgMds= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1357 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 25097226 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a986a9d60, 0x555a9889271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a98892720,0x555a9a71c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1e4d0caa89fdb39377bb7be456864632c628aba3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1548 processed earlier; will process 9428 files now Step #5: ==48886== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a8f1ec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a95827728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a9580a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a9580a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a8f1f2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a8f15342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a8f14dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a8f1e4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a922138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a922138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a922138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a922138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a922138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a922138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a922138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a922138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a922138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a922138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a9441845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a91174578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a9117f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a90f2ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a90f2ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a90f2b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a90f2a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a90f2a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a90f2a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a9580c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a958157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a957fd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a95827fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb7f5437082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a8f14c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x12,0x0,0x12,0x0,0x12,0x0,0x12,0x0,0x12,0x0,0x12, Step #5: \022\000\022\000\022\000\022\000\022\000\022 Step #5: artifact_prefix='./'; Test unit written to ./oom-c10e1c946f988a5d4f8d6a6b4ebab5667d4c351a Step #5: Base64: EgASABIAEgASABI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1358 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 25569297 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55730b1c0d60, 0x55730b3a971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55730b3a9720,0x55730d2332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c10e1c946f988a5d4f8d6a6b4ebab5667d4c351a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1549 processed earlier; will process 9427 files now Step #5: ==48922== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557301d032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55730833e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55730832146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55730832138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557301d09652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557301c6a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557301c64c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557301cfb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557304d2a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557304d2a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557304d2a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557304d2a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557304d2a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557304d2a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557304d2a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557304d2a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557304d2a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557304d2a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557306f2f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557303c8b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557303c965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557303a41d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557303a41d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557303a42808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557303a41944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557303a41944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557303a41944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55730832394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55730832c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557308314529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55730833efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2aa58ca082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557301c6343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0x70,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: \016ws:p\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-039f0b924cff5e7da4b527f850cf589ffc88ef1c Step #5: Base64: DndzOnDNhM2EzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1359 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 26048780 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cd8afccd60, 0x55cd8b1b571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cd8b1b5720,0x55cd8d03f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/039f0b924cff5e7da4b527f850cf589ffc88ef1c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1550 processed earlier; will process 9426 files now Step #5: ==48958== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cd81b0f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cd8814a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cd8812d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cd8812d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cd81b15652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cd81a7642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cd81a70c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cd81b07595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cd84b368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cd84b368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cd84b368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cd84b368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cd84b368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cd84b368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cd84b368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cd84b368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cd84b368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cd84b368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cd86d3b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cd83a97578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cd83aa25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cd8384dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cd8384dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cd8384e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cd8384d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cd8384d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cd8384d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cd8812f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cd881387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cd88120529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cd8814afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f12e4803082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cd81a6f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x7a,0xcc,0xbf,0xcc,0xbf,0xcc,0xbf,0xcc,0xbe, Step #5: Step #5: Step #5: #0 0x557d985b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557d9ebf3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557d9ebd646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557d9ebd638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557d985be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557d9851f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557d98519c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557d985b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557d9b5df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557d9b5df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557d9b5df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557d9b5df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557d9b5df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557d9b5df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557d9b5df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557d9b5df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557d9b5df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557d9b5df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557d9d7e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557d9a540578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557d9a54b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557d9a2f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557d9a2f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557d9a2f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557d9a2f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557d9a2f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557d9a2f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557d9ebd894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557d9ebe17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557d9ebc9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557d9ebf3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff604075082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557d9851843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0x8c,0xe,0x27,0x9,0x0,0xa,0xe,0x27,0x9,0x32, Step #5: \334\214\016'\011\000\012\016'\0112 Step #5: artifact_prefix='./'; Test unit written to ./oom-e96d75d9ae4eb9576b86b12593ee5bbd8c59f135 Step #5: Base64: 3IwOJwkACg4nCTI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1361 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 27104503 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561bb265ad60, 0x561bb284371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561bb2843720,0x561bb46cd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e96d75d9ae4eb9576b86b12593ee5bbd8c59f135' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1553 processed earlier; will process 9423 files now Step #5: #1 pulse cov: 3657 ft: 3658 exec/s: 0 rss: 167Mb Step #5: ==49030== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ba919d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561baf7d8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561baf7bb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561baf7bb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ba91a3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ba910442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ba90fec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ba9195595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561bac1c48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561bac1c48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561bac1c48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561bac1c48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561bac1c48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561bac1c48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561bac1c48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561bac1c48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561bac1c48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561bac1c48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561bae3c945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561bab125578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561bab1305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561baaedbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561baaedbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561baaedc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561baaedb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561baaedb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561baaedb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561baf7bd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561baf7c67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561baf7ae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561baf7d8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f343b9c2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ba90fd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x21,0xdc,0xbd,0x21,0x21,0xdc,0xbd,0x21,0xdc,0xbd, Step #5: \001!\334\275!!\334\275!\334\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-7faceefed483d05bc32d1bf124f836299105b478 Step #5: Base64: ASHcvSEh3L0h3L0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1362 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 27644351 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c769d99d60, 0x55c769f8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c769f82720,0x55c76be0c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7faceefed483d05bc32d1bf124f836299105b478' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1555 processed earlier; will process 9421 files now Step #5: #1 pulse cov: 6585 ft: 6585 exec/s: 0 rss: 180Mb Step #5: #2 pulse cov: 6695 ft: 8175 exec/s: 0 rss: 181Mb Step #5: ==49066== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c7608dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c766f17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c766efa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c766efa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c7608e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c76084342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c76083dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c7608d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c7639038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c7639038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c7639038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c7639038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c7639038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c7639038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c7639038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c7639038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c7639038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c7639038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c765b0845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c762864578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c76286f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c76261ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c76261ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c76261b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c76261a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c76261a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c76261a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c766efc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c766f057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c766eed529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c766f17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4638215082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c76083c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x0,0x0,0x49,0x0,0x49,0x0,0x0,0x0,0x0,0x80, Step #5: \013\000\000I\000I\000\000\000\000\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-553334a500fa740007cd2eabad615a368f7f0808 Step #5: Base64: CwAASQBJAAAAAIA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1363 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 28219071 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55849e446d60, 0x55849e62f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55849e62f720,0x5584a04b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/553334a500fa740007cd2eabad615a368f7f0808' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1558 processed earlier; will process 9418 files now Step #5: #1 pulse cov: 3727 ft: 3728 exec/s: 0 rss: 166Mb Step #5: ==49102== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558494f892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55849b5c4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55849b5a746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55849b5a738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558494f8f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558494ef042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558494eeac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558494f81595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558497fb08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558497fb08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558497fb08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558497fb08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558497fb08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558497fb08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558497fb08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558497fb08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558497fb08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558497fb08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55849a1b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558496f11578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558496f1c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558496cc7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558496cc7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558496cc8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558496cc7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558496cc7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558496cc7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55849b5a994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55849b5b27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55849b59a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55849b5c4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f47622fd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558494ee943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f, Step #5: ws:\315\217\315\217\315\217\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-3aa741ead5430d9da34787539d707ddebfeea57e Step #5: Base64: d3M6zY/Nj82PzY8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1364 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 28743851 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561a0489bd60, 0x561a04a8471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561a04a84720,0x561a0690e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3aa741ead5430d9da34787539d707ddebfeea57e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1560 processed earlier; will process 9416 files now Step #5: ==49138== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5619fb3de2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561a01a19728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561a019fc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561a019fc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5619fb3e4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5619fb34542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5619fb33fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5619fb3d6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619fe4058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619fe4058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619fe4058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619fe4058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619fe4058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619fe4058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619fe4058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619fe4058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619fe4058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619fe4058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561a0060a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619fd366578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619fd3715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619fd11cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619fd11cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619fd11d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619fd11c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619fd11c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619fd11c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561a019fe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561a01a077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561a019ef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561a01a19fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0897156082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5619fb33e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x44,0x5f,0x44,0x41,0x20,0x43,0x44,0x5f,0x44,0x41, Step #5: CD_DA CD_DA Step #5: artifact_prefix='./'; Test unit written to ./oom-688d03034f681f4d6b1431d0f18afc072b224e54 Step #5: Base64: Q0RfREEgQ0RfREE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1365 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 29219941 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557e5c6f8d60, 0x557e5c8e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557e5c8e1720,0x557e5e76b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/688d03034f681f4d6b1431d0f18afc072b224e54' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1561 processed earlier; will process 9415 files now Step #5: ==49174== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e5323b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557e59876728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557e5985946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557e5985938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e53241652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e531a242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e5319cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e53233595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557e562628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557e562628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557e562628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557e562628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557e562628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557e562628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557e562628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557e562628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557e562628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557e562628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557e5846745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557e551c3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557e551ce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557e54f79d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557e54f79d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557e54f7a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557e54f79944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557e54f79944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557e54f79944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557e5985b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557e598647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557e5984c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557e59876fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd0b7463082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e5319b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x5f,0x73,0x74,0xcd,0x8e,0x72,0x65,0x61,0x6d,0x62, Step #5: A_st\315\216reamb Step #5: artifact_prefix='./'; Test unit written to ./oom-4342d697f0c4a03406ca6b875025b6d1a748b8ec Step #5: Base64: QV9zdM2OcmVhbWI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1366 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 29696319 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a226419d60, 0x55a22660271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a226602720,0x55a22848c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4342d697f0c4a03406ca6b875025b6d1a748b8ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1562 processed earlier; will process 9414 files now Step #5: ==49210== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a21cf5c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a223597728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a22357a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a22357a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a21cf62652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a21cec342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a21cebdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a21cf54595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a21ff838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a21ff838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a21ff838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a21ff838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a21ff838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a21ff838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a21ff838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a21ff838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a21ff838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a21ff838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a22218845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a21eee4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a21eeef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a21ec9ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a21ec9ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a21ec9b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a21ec9a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a21ec9a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a21ec9a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a22357c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2235857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a22356d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a223597fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3ebb1cf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a21cebc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x3d,0x0,0x3a,0x3d,0x0,0x3a,0x3d,0x0,0x3a,0x3d, Step #5: :=\000:=\000:=\000:= Step #5: artifact_prefix='./'; Test unit written to ./oom-117b38c7efee1a8551e8f90bb8d21afb1c237aa2 Step #5: Base64: Oj0AOj0AOj0AOj0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1367 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 30165608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa02289d60, 0x55aa0247271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa02472720,0x55aa042fc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/117b38c7efee1a8551e8f90bb8d21afb1c237aa2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1563 processed earlier; will process 9413 files now Step #5: ==49246== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a9f8dcc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a9ff407728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a9ff3ea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a9ff3ea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a9f8dd2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a9f8d3342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a9f8d2dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a9f8dc4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a9fbdf38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a9fbdf38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a9fbdf38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a9fbdf38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a9fbdf38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a9fbdf38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a9fbdf38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a9fbdf38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a9fbdf38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a9fbdf38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a9fdff845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a9fad54578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a9fad5f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a9fab0ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a9fab0ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a9fab0b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a9fab0a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a9fab0a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a9fab0a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a9ff3ec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a9ff3f57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a9ff3dd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a9ff407fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff5f44be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a9f8d2c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xa,0x5c,0xd,0xa,0x5c,0xd,0xa,0x22,0xd,0xa, Step #5: \015\012\\\015\012\\\015\012\"\015\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-305ba968f7e227d63f428eca0e2b99a19a89d505 Step #5: Base64: DQpcDQpcDQoiDQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1368 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 30639915 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5631bae55d60, 0x5631bb03e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5631bb03e720,0x5631bcec82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/305ba968f7e227d63f428eca0e2b99a19a89d505' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1564 processed earlier; will process 9412 files now Step #5: ==49282== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5631b19982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5631b7fd3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5631b7fb646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5631b7fb638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5631b199e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5631b18ff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5631b18f9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5631b1990595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5631b49bf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5631b49bf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5631b49bf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5631b49bf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5631b49bf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5631b49bf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5631b49bf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5631b49bf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5631b49bf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5631b49bf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5631b6bc445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5631b3920578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5631b392b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5631b36d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5631b36d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5631b36d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5631b36d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5631b36d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5631b36d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5631b7fb894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5631b7fc17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5631b7fa9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5631b7fd3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1e286df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5631b18f843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x40,0x0,0x0,0xf,0xf,0xd,0x42,0xf,0x24,0x5b, Step #5: $@\000\000\017\017\015B\017$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-1a4e1150bdd7723b01f5f150e63f110b871719aa Step #5: Base64: JEAAAA8PDUIPJFs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1369 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 31120501 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559868364d60, 0x55986854d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55986854d720,0x55986a3d72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a4e1150bdd7723b01f5f150e63f110b871719aa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1565 processed earlier; will process 9411 files now Step #5: ==49318== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55985eea72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5598654e2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5598654c546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5598654c538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55985eead652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55985ee0e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55985ee08c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55985ee9f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559861ece8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559861ece8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559861ece8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559861ece8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559861ece8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559861ece8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559861ece8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559861ece8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559861ece8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559861ece8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5598640d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559860e2f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559860e3a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559860be5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559860be5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559860be6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559860be5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559860be5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559860be5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5598654c794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5598654d07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5598654b8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5598654e2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd9f289d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55985ee0743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x25,0x31,0xe2,0x80,0x8d,0xf3,0xa0,0x80,0x81,0x32, Step #5: i%1\342\200\215\363\240\200\2012 Step #5: artifact_prefix='./'; Test unit written to ./oom-92f7b6cd13e36fa0ef9a9c75b18c8d39c30c0b60 Step #5: Base64: aSUx4oCN86CAgTI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1370 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 31602080 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d3149b1d60, 0x55d314b9a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d314b9a720,0x55d316a242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92f7b6cd13e36fa0ef9a9c75b18c8d39c30c0b60' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1566 processed earlier; will process 9410 files now Step #5: ==49354== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d30b4f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d311b2f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d311b1246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d311b1238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d30b4fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d30b45b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d30b455c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d30b4ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d30e51b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d30e51b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d30e51b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d30e51b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d30e51b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d30e51b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d30e51b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d30e51b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d30e51b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d30e51b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d31072045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d30d47c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d30d4875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d30d232d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d30d232d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d30d233808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d30d232944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d30d232944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d30d232944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d311b1494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d311b1d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d311b05529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d311b2ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7246f49082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d30b45443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x6e,0x3a,0x6f,0x75,0x3d,0x53,0x55,0x44,0x4f,0x47, Step #5: dn:ou=SUDOG Step #5: artifact_prefix='./'; Test unit written to ./oom-645ee9c8268e4983279ba6bbb29aaca28eefeb0d Step #5: Base64: ZG46b3U9U1VET0c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1371 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 32074189 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa65293d60, 0x55aa6547c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa6547c720,0x55aa673062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/645ee9c8268e4983279ba6bbb29aaca28eefeb0d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1567 processed earlier; will process 9409 files now Step #5: ==49390== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa5bdd62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa62411728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa623f446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa623f438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa5bddc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa5bd3d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa5bd37c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa5bdce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa5edfd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa5edfd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa5edfd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa5edfd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa5edfd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa5edfd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa5edfd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa5edfd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa5edfd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa5edfd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa6100245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa5dd5e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa5dd695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa5db14d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa5db14d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa5db15808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa5db14944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa5db14944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa5db14944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa623f694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa623ff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa623e7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa62411fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97efa52082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa5bd3643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x1,0x5c,0x26,0x5c,0x22,0x22,0x22,0x22,0x22,0x22, Step #5: \"\001\\&\\\"\"\"\"\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-ebef3705330d1285b9826a2ae693a382f61db7f3 Step #5: Base64: IgFcJlwiIiIiIiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1372 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 32549095 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5586836f7d60, 0x5586838e071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5586838e0720,0x55868576a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ebef3705330d1285b9826a2ae693a382f61db7f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1568 processed earlier; will process 9408 files now Step #5: ==49426== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55867a23a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558680875728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55868085846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55868085838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55867a240652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55867a1a142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55867a19bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55867a232595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55867d2618c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55867d2618c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55867d2618c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55867d2618c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55867d2618c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55867d2618c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55867d2618c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55867d2618c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55867d2618c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55867d2618c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55867f46645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55867c1c2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55867c1cd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55867bf78d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55867bf78d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55867bf79808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55867bf78944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55867bf78944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55867bf78944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55868085a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5586808637b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55868084b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558680875fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd8a840b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55867a19a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x2f,0x6a,0xcc,0xbd,0xcc,0xbe,0xcc,0xbd,0xcc,0xbd, Step #5: Step #5: Step #5: #0 0x56250238b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625089c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625089a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625089a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562502391652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625022f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625022ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562502383595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625053b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625053b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625053b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625053b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625053b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625053b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625053b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625053b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625053b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625053b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625075b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562504313578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56250431e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5625040c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5625040c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5625040ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5625040c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5625040c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5625040c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625089ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625089b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56250899c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625089c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7ec69d1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625022eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x40,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xb,0x60, Step #5: `@\000\000\000\000\000\000\000\013` Step #5: artifact_prefix='./'; Test unit written to ./oom-295b5f9e4c012049be83c9ef945aaa86dff0d8e0 Step #5: Base64: YEAAAAAAAAAAC2A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1374 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 33620380 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5637368f7d60, 0x563736ae071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563736ae0720,0x56373896a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/295b5f9e4c012049be83c9ef945aaa86dff0d8e0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1570 processed earlier; will process 9406 files now Step #5: ==49498== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56372d43a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563733a75728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563733a5846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563733a5838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56372d440652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56372d3a142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56372d39bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56372d432595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5637304618c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5637304618c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5637304618c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5637304618c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5637304618c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5637304618c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5637304618c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5637304618c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5637304618c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5637304618c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56373266645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56372f3c2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56372f3cd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56372f178d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56372f178d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56372f179808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56372f178944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56372f178944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56372f178944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563733a5a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563733a637b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563733a4b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563733a75fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f03eb0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56372d39a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3b,0x54,0x61,0x72,0x67,0x65,0x74,0x3a,0x3b,0x30,0x3b, Step #5: ;Target:;0; Step #5: artifact_prefix='./'; Test unit written to ./oom-1f1ed6319dc6665708c2b6e335f9464f73c823df Step #5: Base64: O1RhcmdldDo7MDs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1375 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 34092352 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564ae8df8d60, 0x564ae8fe171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564ae8fe1720,0x564aeae6b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f1ed6319dc6665708c2b6e335f9464f73c823df' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1571 processed earlier; will process 9405 files now Step #5: ==49534== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564adf93b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ae5f76728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ae5f5946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ae5f5938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564adf941652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564adf8a242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564adf89cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564adf933595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564ae29628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564ae29628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564ae29628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564ae29628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564ae29628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564ae29628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564ae29628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564ae29628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564ae29628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564ae29628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564ae4b6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564ae18c3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564ae18ce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564ae1679d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564ae1679d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ae167a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564ae1679944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564ae1679944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564ae1679944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ae5f5b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ae5f647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ae5f4c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ae5f76fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78e3d44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564adf89b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x0,0xa,0x30,0x30,0x21,0xdc,0xbd,0x21,0xdc,0xbd, Step #5: \001\000\01200!\334\275!\334\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-2f27d301d7a993c44b1c5090d40317e928d3fd33 Step #5: Base64: AQAKMDAh3L0h3L0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1376 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 34564583 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55948b5add60, 0x55948b79671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55948b796720,0x55948d6202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f27d301d7a993c44b1c5090d40317e928d3fd33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1572 processed earlier; will process 9404 files now Step #5: ==49570== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5594820f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55948872b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55948870e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55948870e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5594820f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55948205742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559482051c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5594820e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5594851178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5594851178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5594851178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5594851178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5594851178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5594851178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5594851178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5594851178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5594851178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5594851178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55948731c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559484078578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5594840835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559483e2ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559483e2ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559483e2f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559483e2e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559483e2e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559483e2e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55948871094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5594887197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559488701529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55948872bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1c7201c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55948205043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2c,0xe,0x34,0x0,0x0,0x25,0x0,0xf,0xf,0xf,0x2d, Step #5: ,\0164\000\000%\000\017\017\017- Step #5: artifact_prefix='./'; Test unit written to ./oom-a8ff712a597f3d0bd9ff1abbf300e513fb073895 Step #5: Base64: LA40AAAlAA8PDy0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1377 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 35036985 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561eb59a6d60, 0x561eb5b8f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561eb5b8f720,0x561eb7a192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a8ff712a597f3d0bd9ff1abbf300e513fb073895' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1573 processed earlier; will process 9403 files now Step #5: #1 pulse cov: 3582 ft: 3583 exec/s: 0 rss: 165Mb Step #5: ==49606== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561eac4e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561eb2b24728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561eb2b0746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561eb2b0738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561eac4ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561eac45042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561eac44ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561eac4e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561eaf5108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561eaf5108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561eaf5108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561eaf5108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561eaf5108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561eaf5108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561eaf5108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561eaf5108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561eaf5108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561eaf5108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561eb171545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561eae471578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561eae47c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561eae227d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561eae227d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561eae228808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561eae227944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561eae227944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561eae227944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561eb2b0994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561eb2b127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561eb2afa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561eb2b24fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa30123b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561eac44943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xbb,0x0,0x0,0x0,0x0,0x0,0x0,0xbb,0xcc,0x44, Step #5: \336\273\000\000\000\000\000\000\273\314D Step #5: artifact_prefix='./'; Test unit written to ./oom-602b67798ef323c04e35d307fde674020564e223 Step #5: Base64: 3rsAAAAAAAC7zEQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1378 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 35549659 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f2e6bdad60, 0x55f2e6dc371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f2e6dc3720,0x55f2e8c4d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/602b67798ef323c04e35d307fde674020564e223' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1575 processed earlier; will process 9401 files now Step #5: #1 pulse cov: 3711 ft: 3712 exec/s: 0 rss: 167Mb Step #5: ==49642== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f2dd71d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f2e3d58728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f2e3d3b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f2e3d3b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f2dd723652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f2dd68442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f2dd67ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f2dd715595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f2e07448c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f2e07448c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f2e07448c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f2e07448c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f2e07448c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f2e07448c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f2e07448c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f2e07448c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f2e07448c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f2e07448c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f2e294945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f2df6a5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f2df6b05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f2df45bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f2df45bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f2df45c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f2df45b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f2df45b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f2df45b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f2e3d3d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f2e3d467b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f2e3d2e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f2e3d58fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f11453d1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f2dd67d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x57,0x73,0x3a,0xf0,0x91,0x92,0xbb,0xf0,0x91,0x96,0xbf, Step #5: Ws:\360\221\222\273\360\221\226\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-cdb1667fc174d5ecaabe5adabd25a22d2a88e115 Step #5: Base64: V3M68JGSu/CRlr8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1379 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 36082299 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605e7a16d60, 0x5605e7bff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605e7bff720,0x5605e9a892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cdb1667fc174d5ecaabe5adabd25a22d2a88e115' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1577 processed earlier; will process 9399 files now Step #5: ==49678== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605de5592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605e4b94728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605e4b7746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605e4b7738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605de55f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605de4c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605de4bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605de551595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605e15808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605e15808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605e15808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605e15808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605e15808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605e15808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605e15808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605e15808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605e15808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605e15808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605e378545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605e04e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605e04ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605e0297d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605e0297d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605e0298808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605e0297944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605e0297944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605e0297944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605e4b7994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605e4b827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605e4b6a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605e4b94fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd238877082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605de4b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0x27,0xa,0x2a,0x2a,0x42,0x42,0xa,0xa,0x4,0xa, Step #5: c'\012**BB\012\012\004\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-f111670bb4e65bf3a8d1dd83058ffa0a1b15d0fa Step #5: Base64: YycKKipCQgoKBAo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1380 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 36569702 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5580297aad60, 0x55802999371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558029993720,0x55802b81d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f111670bb4e65bf3a8d1dd83058ffa0a1b15d0fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1578 processed earlier; will process 9398 files now Step #5: #1 pulse cov: 3666 ft: 3667 exec/s: 0 rss: 167Mb Step #5: ==49714== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5580202ed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558026928728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55802690b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55802690b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5580202f3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55802025442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55802024ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5580202e5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5580233148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5580233148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5580233148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5580233148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5580233148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5580233148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5580233148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5580233148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5580233148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5580233148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55802551945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558022275578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5580222805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55802202bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55802202bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55802202c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55802202b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55802202b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55802202b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55802690d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5580269167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5580268fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558026928fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0df4fd4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55802024d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xf0,0x91,0xa6,0xb1,0xf0,0x91,0xa4,0xb0, Step #5: ws:\360\221\246\261\360\221\244\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-b6b41949ce056cc5aae684a5e85442510877e7ee Step #5: Base64: d3M68JGmsfCRpLA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1381 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 37089721 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db961aad60, 0x55db9639371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db96393720,0x55db9821d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6b41949ce056cc5aae684a5e85442510877e7ee' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1580 processed earlier; will process 9396 files now Step #5: #1 pulse cov: 3498 ft: 3499 exec/s: 0 rss: 167Mb Step #5: ==49750== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55db8cced2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db93328728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db9330b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db9330b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55db8ccf3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55db8cc5442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55db8cc4ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55db8cce5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55db8fd148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55db8fd148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55db8fd148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55db8fd148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55db8fd148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55db8fd148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55db8fd148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55db8fd148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55db8fd148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55db8fd148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db91f1945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55db8ec75578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55db8ec805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55db8ea2bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55db8ea2bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55db8ea2c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55db8ea2b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55db8ea2b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55db8ea2b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db9330d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db933167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db932fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db93328fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb30160d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55db8cc4d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xcd,0x8f,0xa,0x2d,0xcd,0x8f,0xa,0x2d,0xcd,0x8f, Step #5: -\315\217\012-\315\217\012-\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-cd56834b9bed5e4e5626de830c41d7c227420e22 Step #5: Base64: Lc2PCi3NjwotzY8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1382 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 37612901 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b9e339d60, 0x563b9e52271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b9e522720,0x563ba03ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cd56834b9bed5e4e5626de830c41d7c227420e22' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1582 processed earlier; will process 9394 files now Step #5: ==49786== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563b94e7c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b9b4b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b9b49a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b9b49a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563b94e82652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563b94de342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563b94dddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563b94e74595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b97ea38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b97ea38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b97ea38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b97ea38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b97ea38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b97ea38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b97ea38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b97ea38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b97ea38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b97ea38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b9a0a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b96e04578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b96e0f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b96bbad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b96bbad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b96bbb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b96bba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b96bba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b96bba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b9b49c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b9b4a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b9b48d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b9b4b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f56c71d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563b94ddc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x0,0x40,0x40,0x7f,0x7f,0x7f,0xc6, Step #5: ID3\003\000@@\177\177\177\306 Step #5: artifact_prefix='./'; Test unit written to ./oom-b7325a21639597abe5846153bc9304ffbe2dce3b Step #5: Base64: SUQzAwBAQH9/f8Y= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1383 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 38093859 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562981fdad60, 0x5629821c371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5629821c3720,0x56298404d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b7325a21639597abe5846153bc9304ffbe2dce3b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1583 processed earlier; will process 9393 files now Step #5: ==49822== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562978b1d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56297f158728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56297f13b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56297f13b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562978b23652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562978a8442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562978a7ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562978b15595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56297bb448c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56297bb448c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56297bb448c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56297bb448c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56297bb448c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56297bb448c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56297bb448c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56297bb448c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56297bb448c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56297bb448c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56297dd4945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56297aaa5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56297aab05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56297a85bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56297a85bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56297a85c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56297a85b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56297a85b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56297a85b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56297f13d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56297f1467b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56297f12e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56297f158fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4d8742a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562978a7d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0x3a,0x20,0x7b,0x5b,0xf0,0x90,0x95,0x84,0x5d,0x7d, Step #5: ): {[\360\220\225\204]} Step #5: artifact_prefix='./'; Test unit written to ./oom-6431b2f9e97cd9199f4803702ffddc2da11b2b90 Step #5: Base64: KToge1vwkJWEXX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1384 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 38567434 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b2e6e78d60, 0x55b2e706171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b2e7061720,0x55b2e8eeb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6431b2f9e97cd9199f4803702ffddc2da11b2b90' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1584 processed earlier; will process 9392 files now Step #5: ==49858== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b2dd9bb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b2e3ff6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b2e3fd946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b2e3fd938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b2dd9c1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b2dd92242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b2dd91cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b2dd9b3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b2e09e28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b2e09e28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b2e09e28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b2e09e28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b2e09e28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b2e09e28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b2e09e28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b2e09e28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b2e09e28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b2e09e28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b2e2be745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b2df943578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b2df94e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b2df6f9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b2df6f9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b2df6fa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b2df6f9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b2df6f9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b2df6f9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b2e3fdb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b2e3fe47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b2e3fcc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b2e3ff6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f861d8ff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b2dd91b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x81,0x90,0xe3,0x81,0x90,0xe3,0x81,0x90,0x6d,0x0, Step #5: \343\201\220\343\201\220\343\201\220m\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-9a8f23acc2046d9a83b8e1d6df4d028eccf30e80 Step #5: Base64: 44GQ44GQ44GQbQA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1385 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 39038288 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb322a3d60, 0x55fb3248c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb3248c720,0x55fb343162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9a8f23acc2046d9a83b8e1d6df4d028eccf30e80' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1585 processed earlier; will process 9391 files now Step #5: #1 pulse cov: 3601 ft: 3602 exec/s: 0 rss: 165Mb Step #5: ==49894== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb28de62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb2f421728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb2f40446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb2f40438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb28dec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb28d4d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb28d47c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb28dde595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb2be0d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb2be0d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb2be0d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb2be0d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb2be0d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb2be0d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb2be0d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb2be0d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb2be0d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb2be0d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb2e01245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb2ad6e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb2ad795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb2ab24d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb2ab24d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb2ab25808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb2ab24944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb2ab24944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb2ab24944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb2f40694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb2f40f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb2f3f7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb2f421fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f98dce78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb28d4643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3b,0x20,0xa,0x3b,0x20,0xa,0x3b,0x20,0xa,0x3b,0x20, Step #5: ; \012; \012; \012; Step #5: artifact_prefix='./'; Test unit written to ./oom-5c5449c2340be99b23d64773df2329bae254b618 Step #5: Base64: OyAKOyAKOyAKOyA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1386 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 39583067 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5627d6582d60, 0x5627d676b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5627d676b720,0x5627d85f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c5449c2340be99b23d64773df2329bae254b618' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1587 processed earlier; will process 9389 files now Step #5: #1 pulse cov: 3763 ft: 3764 exec/s: 0 rss: 165Mb Step #5: ==49930== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5627cd0c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5627d3700728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5627d36e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5627d36e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5627cd0cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5627cd02c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5627cd026c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5627cd0bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627d00ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627d00ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627d00ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627d00ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627d00ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627d00ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627d00ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627d00ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627d00ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627d00ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5627d22f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5627cf04d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5627cf0585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5627cee03d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5627cee03d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5627cee04808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5627cee03944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5627cee03944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5627cee03944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5627d36e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627d36ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5627d36d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5627d3700fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f467e2a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5627cd02543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x53,0x3a,0xe3,0x8d,0x96,0xe3,0x8c,0x96,0xcd,0x84, Step #5: wS:\343\215\226\343\214\226\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-a853ddf2e0bd85d8c721e265191ca89892f53087 Step #5: Base64: d1M6442W44yWzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1387 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 40109214 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f3c5845d60, 0x55f3c5a2e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f3c5a2e720,0x55f3c78b82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a853ddf2e0bd85d8c721e265191ca89892f53087' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1589 processed earlier; will process 9387 files now Step #5: #1 pulse cov: 3628 ft: 3629 exec/s: 0 rss: 168Mb Step #5: ==49966== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f3bc3882d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f3c29c3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f3c29a646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f3c29a638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f3bc38e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f3bc2ef42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f3bc2e9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f3bc380595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f3bf3af8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f3bf3af8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f3bf3af8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f3bf3af8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f3bf3af8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f3bf3af8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f3bf3af8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f3bf3af8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f3bf3af8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f3bf3af8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f3c15b445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f3be310578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f3be31b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f3be0c6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f3be0c6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f3be0c7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f3be0c6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f3be0c6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f3be0c6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f3c29a894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f3c29b17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f3c2999529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f3c29c3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a76f88082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f3bc2e843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xb9,0x83,0x79,0x79,0x0,0xa,0x0,0xca,0xb8,0xa, Step #5: \340\271\203yy\000\012\000\312\270\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-012c5dcdfca4fa96ee45066d7ed8292764e5bef2 Step #5: Base64: 4LmDeXkACgDKuAo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1388 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 40639159 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7f071fd60, 0x55b7f090871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7f0908720,0x55b7f27922c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/012c5dcdfca4fa96ee45066d7ed8292764e5bef2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1591 processed earlier; will process 9385 files now Step #5: ==50002== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7e72622d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7ed89d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7ed88046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7ed88038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7e7268652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7e71c942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7e71c3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7e725a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7ea2898c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7ea2898c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7ea2898c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7ea2898c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7ea2898c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7ea2898c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7ea2898c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7ea2898c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7ea2898c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7ea2898c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7ec48e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7e91ea578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7e91f55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7e8fa0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7e8fa0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7e8fa1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7e8fa0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7e8fa0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7e8fa0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7ed88294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7ed88b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7ed873529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7ed89dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9c8f789082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7e71c243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x80,0xdb,0x80,0x39,0x39,0x39,0x39,0x39,0x39,0x39, Step #5: \333\200\333\2009999999 Step #5: artifact_prefix='./'; Test unit written to ./oom-6174de347db62ea92a2d07273a2fff3838d51a46 Step #5: Base64: 24DbgDk5OTk5OTk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1389 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 41119029 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563ee6ce4d60, 0x563ee6ecd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563ee6ecd720,0x563ee8d572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6174de347db62ea92a2d07273a2fff3838d51a46' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1592 processed earlier; will process 9384 files now Step #5: ==50038== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563edd8272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563ee3e62728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563ee3e4546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563ee3e4538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563edd82d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563edd78e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563edd788c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563edd81f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563ee084e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563ee084e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563ee084e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563ee084e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563ee084e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563ee084e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563ee084e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563ee084e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563ee084e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563ee084e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563ee2a5345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563edf7af578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563edf7ba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563edf565d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563edf565d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563edf566808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563edf565944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563edf565944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563edf565944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563ee3e4794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563ee3e507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563ee3e38529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563ee3e62fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f65893fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563edd78743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x28,0x24,0x28,0x0,0x28,0x24,0x28, Step #5: \000\000\000\000($(\000($( Step #5: artifact_prefix='./'; Test unit written to ./oom-771c6d822678e64ed1cef49718f1bf3b29c9b95b Step #5: Base64: AAAAACgkKAAoJCg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1390 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 41604008 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555d453b0d60, 0x555d4559971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555d45599720,0x555d474232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/771c6d822678e64ed1cef49718f1bf3b29c9b95b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1593 processed earlier; will process 9383 files now Step #5: ==50074== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555d3bef32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555d4252e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555d4251146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555d4251138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555d3bef9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555d3be5a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555d3be54c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555d3beeb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555d3ef1a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555d3ef1a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555d3ef1a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555d3ef1a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555d3ef1a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555d3ef1a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555d3ef1a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555d3ef1a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555d3ef1a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555d3ef1a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555d4111f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555d3de7b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555d3de865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555d3dc31d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555d3dc31d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555d3dc32808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555d3dc31944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555d3dc31944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555d3dc31944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555d4251394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555d4251c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555d42504529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555d4252efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2780d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555d3be5343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4f,0x57,0x4e,0x45,0x52,0x3d,0x22,0xef,0xb8,0xae,0x22, Step #5: OWNER=\"\357\270\256\" Step #5: artifact_prefix='./'; Test unit written to ./oom-1ff144b027595ae52197461dc1819d3668fc9398 Step #5: Base64: T1dORVI9Iu+4riI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1391 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 42074772 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555591d75d60, 0x555591f5e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555591f5e720,0x555593de82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1ff144b027595ae52197461dc1819d3668fc9398' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1594 processed earlier; will process 9382 files now Step #5: #1 pulse cov: 3655 ft: 3656 exec/s: 0 rss: 167Mb Step #5: ==50110== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5555888b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55558eef3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55558eed646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55558eed638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5555888be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55558881f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555588819c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5555888b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55558b8df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55558b8df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55558b8df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55558b8df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55558b8df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55558b8df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55558b8df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55558b8df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55558b8df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55558b8df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55558dae445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55558a840578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55558a84b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55558a5f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55558a5f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55558a5f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55558a5f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55558a5f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55558a5f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55558eed894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55558eee17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55558eec9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55558eef3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fea5bfb1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55558881843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x8,0x22,0xcc,0xad,0xcc,0xad,0xcc,0x9d,0xcc, Step #5: HU\010\"\314\255\314\255\314\235\314 Step #5: artifact_prefix='./'; Test unit written to ./oom-a07fdc22427ee015bbc53f882fc3a5af206d123c Step #5: Base64: SFUIIsytzK3Mncw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1392 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 42604253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cc22facd60, 0x55cc2319571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cc23195720,0x55cc2501f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a07fdc22427ee015bbc53f882fc3a5af206d123c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1596 processed earlier; will process 9380 files now Step #5: #1 pulse cov: 3663 ft: 3664 exec/s: 0 rss: 167Mb Step #5: ==50146== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cc19aef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cc2012a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cc2010d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cc2010d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cc19af5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cc19a5642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cc19a50c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cc19ae7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cc1cb168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cc1cb168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cc1cb168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cc1cb168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cc1cb168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cc1cb168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cc1cb168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cc1cb168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cc1cb168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cc1cb168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cc1ed1b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cc1ba77578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cc1ba825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cc1b82dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cc1b82dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cc1b82e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cc1b82d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cc1b82d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cc1b82d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cc2010f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cc201187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cc20100529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cc2012afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1a5b5fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cc19a4f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x61,0x2e,0x2e,0x3e,0x3c,0x2f,0x61,0x2e,0xf3,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-afc0d8efc44cdbe40c6535bebb59178d046cf2c9 Step #5: Base64: PGEuLj48L2Eu8z4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1393 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 43118189 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b82d4a4d60, 0x55b82d68d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b82d68d720,0x55b82f5172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/afc0d8efc44cdbe40c6535bebb59178d046cf2c9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1598 processed earlier; will process 9378 files now Step #5: ==50182== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b823fe72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b82a622728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b82a60546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b82a60538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b823fed652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b823f4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b823f48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b823fdf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b82700e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b82700e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b82700e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b82700e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b82700e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b82700e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b82700e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b82700e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b82700e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b82700e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b82921345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b825f6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b825f7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b825d25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b825d25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b825d26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b825d25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b825d25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b825d25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b82a60794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b82a6107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b82a5f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b82a622fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb239844082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b823f4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0x3a,0x20,0x7b,0x5b,0xf0,0x9e,0x80,0x81,0x5d,0x7d, Step #5: ): {[\360\236\200\201]} Step #5: artifact_prefix='./'; Test unit written to ./oom-137ec4f620d3af0c9bb7a4e7d45fcf8ed604844f Step #5: Base64: KToge1vwnoCBXX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1394 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 43591715 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5568d8d07d60, 0x5568d8ef071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5568d8ef0720,0x5568dad7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/137ec4f620d3af0c9bb7a4e7d45fcf8ed604844f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1599 processed earlier; will process 9377 files now Step #5: ==50218== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5568cf84a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5568d5e85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5568d5e6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5568d5e6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5568cf850652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5568cf7b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5568cf7abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5568cf842595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5568d28718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5568d28718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5568d28718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5568d28718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5568d28718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5568d28718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5568d28718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5568d28718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5568d28718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5568d28718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5568d4a7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5568d17d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5568d17dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568d1588d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568d1588d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568d1589808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568d1588944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568d1588944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568d1588944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5568d5e6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5568d5e737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5568d5e5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5568d5e85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c0bd35082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5568cf7aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x5c,0x5f,0x5c,0x5f,0x20,0x1,0xde,0xad,0xbe,0xef, Step #5: \000\\_\\_ \001\336\255\276\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-3bc215bf2ea32fd7e575407c3a4e0bb88bee8e50 Step #5: Base64: AFxfXF8gAd6tvu8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1395 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 44062363 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558acd709d60, 0x558acd8f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558acd8f2720,0x558acf77c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3bc215bf2ea32fd7e575407c3a4e0bb88bee8e50' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1600 processed earlier; will process 9376 files now Step #5: #1 pulse cov: 3659 ft: 3660 exec/s: 0 rss: 165Mb Step #5: ==50254== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558ac424c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558aca887728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558aca86a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558aca86a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ac4252652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ac41b342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ac41adc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ac4244595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ac72738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ac72738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ac72738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ac72738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ac72738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ac72738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ac72738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ac72738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ac72738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ac72738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558ac947845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558ac61d4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558ac61df5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558ac5f8ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558ac5f8ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558ac5f8b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558ac5f8a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558ac5f8a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558ac5f8a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558aca86c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558aca8757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558aca85d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558aca887fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbfe207b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ac41ac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x3a,0x20,0xf5,0x3a,0x20,0x3a, Step #5: - - -: \365: : Step #5: artifact_prefix='./'; Test unit written to ./oom-4a07f050bdc31ca9da786b72cd487fe19ff59e22 Step #5: Base64: LSAtIC06IPU6IDo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1396 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 44579072 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560fc0f6d60, 0x5560fc2df71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560fc2df720,0x5560fe1692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a07f050bdc31ca9da786b72cd487fe19ff59e22' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1602 processed earlier; will process 9374 files now Step #5: ==50290== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560f2c392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560f9274728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560f925746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560f925738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560f2c3f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560f2ba042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560f2b9ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560f2c31595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560f5c608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560f5c608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560f5c608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560f5c608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560f5c608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560f5c608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560f5c608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560f5c608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560f5c608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560f5c608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560f7e6545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560f4bc1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560f4bcc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560f4977d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560f4977d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560f4978808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560f4977944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560f4977944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560f4977944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560f925994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560f92627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560f924a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560f9274fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f776cd42082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560f2b9943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x8,0x4e,0x3f,0x25,0xd,0x25,0x25,0xd,0x25,0x25, Step #5: %\010N?%\015%%\015%% Step #5: artifact_prefix='./'; Test unit written to ./oom-fb96cf3926706c1fc0512dbb9cbd7f644e7dd297 Step #5: Base64: JQhOPyUNJSUNJSU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1397 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 45051930 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56086df33d60, 0x56086e11c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56086e11c720,0x56086ffa62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb96cf3926706c1fc0512dbb9cbd7f644e7dd297' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1603 processed earlier; will process 9373 files now Step #5: #1 pulse cov: 3888 ft: 3889 exec/s: 0 rss: 167Mb Step #5: #2 pulse cov: 4023 ft: 4297 exec/s: 0 rss: 168Mb Step #5: ==50326== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560864a762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56086b0b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56086b09446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56086b09438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560864a7c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5608649dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5608649d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560864a6e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560867a9d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560867a9d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560867a9d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560867a9d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560867a9d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560867a9d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560867a9d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560867a9d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560867a9d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560867a9d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560869ca245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608669fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560866a095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608667b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608667b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608667b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608667b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608667b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608667b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56086b09694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56086b09f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56086b087529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56086b0b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fed535e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5608649d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c,0xa,0xa,0x0,0x71,0x26,0x2a,0xc2,0xad,0x2a,0xdb, Step #5: L\012\012\000q&*\302\255*\333 Step #5: artifact_prefix='./'; Test unit written to ./oom-98cb28ea96b55683ff807d4faff0976140ba06b2 Step #5: Base64: TAoKAHEmKsKtKts= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1398 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 45604861 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556431b14d60, 0x556431cfd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556431cfd720,0x556433b872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/98cb28ea96b55683ff807d4faff0976140ba06b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1606 processed earlier; will process 9370 files now Step #5: #1 pulse cov: 3641 ft: 3642 exec/s: 0 rss: 166Mb Step #5: ==50362== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564286572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55642ec92728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55642ec7546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55642ec7538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55642865d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564285be42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564285b8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55642864f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55642b67e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55642b67e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55642b67e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55642b67e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55642b67e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55642b67e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55642b67e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55642b67e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55642b67e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55642b67e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55642d88345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55642a5df578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55642a5ea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55642a395d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55642a395d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55642a396808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55642a395944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55642a395944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55642a395944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55642ec7794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55642ec807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55642ec68529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55642ec92fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faee4828082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564285b743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0xa,0x22,0x5f,0x7,0x22,0x22,0x2,0xa,0x60,0x60, Step #5: _\012\"_\007\"\"\002\012`` Step #5: artifact_prefix='./'; Test unit written to ./oom-e0f7e7a25b8ff41b353ec6c0383fa80a7f274de0 Step #5: Base64: XwoiXwciIgIKYGA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1399 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 46252672 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558dde6bbd60, 0x558dde8a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558dde8a4720,0x558de072e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e0f7e7a25b8ff41b353ec6c0383fa80a7f274de0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1608 processed earlier; will process 9368 files now Step #5: ==50398== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558dd51fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ddb839728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ddb81c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ddb81c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558dd5204652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558dd516542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558dd515fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558dd51f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558dd82258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558dd82258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558dd82258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558dd82258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558dd82258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558dd82258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558dd82258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558dd82258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558dd82258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558dd82258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558dda42a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558dd7186578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558dd71915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558dd6f3cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558dd6f3cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558dd6f3d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558dd6f3c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558dd6f3c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558dd6f3c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ddb81e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ddb8277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ddb80f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ddb839fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1c22f1d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558dd515e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x3c,0x0,0x61,0x0,0x2f,0x0,0x3e,0x0,0x3c,0xd9, Step #5: \000<\000a\000/\000>\000<\331 Step #5: artifact_prefix='./'; Test unit written to ./oom-9692456dc0c1b1cc946d42722284b720e5b733d5 Step #5: Base64: ADwAYQAvAD4APNk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1400 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 46739328 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d5f8948d60, 0x55d5f8b3171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d5f8b31720,0x55d5fa9bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9692456dc0c1b1cc946d42722284b720e5b733d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1609 processed earlier; will process 9367 files now Step #5: ==50434== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d5ef48b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d5f5ac6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d5f5aa946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d5f5aa938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d5ef491652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d5ef3f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d5ef3ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d5ef483595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d5f24b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d5f24b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d5f24b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d5f24b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d5f24b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d5f24b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d5f24b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d5f24b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d5f24b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d5f24b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d5f46b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d5f1413578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d5f141e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d5f11c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d5f11c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d5f11ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d5f11c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d5f11c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d5f11c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d5f5aab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d5f5ab47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d5f5a9c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d5f5ac6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe5c583e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d5ef3eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd9,0x96,0xe1,0x9f,0x31,0x0,0x0,0x0,0x2a,0x23,0x3, Step #5: \331\226\341\2371\000\000\000*#\003 Step #5: artifact_prefix='./'; Test unit written to ./oom-1a5ea4af87ef55b1de14797e5aa0dfa713826388 Step #5: Base64: 2ZbhnzEAAAAqIwM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1401 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 47220987 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556db51c4d60, 0x556db53ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556db53ad720,0x556db72372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a5ea4af87ef55b1de14797e5aa0dfa713826388' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1610 processed earlier; will process 9366 files now Step #5: ==50470== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556dabd072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556db2342728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556db232546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556db232538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556dabd0d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556dabc6e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556dabc68c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556dabcff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556daed2e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556daed2e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556daed2e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556daed2e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556daed2e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556daed2e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556daed2e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556daed2e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556daed2e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556daed2e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556db0f3345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556dadc8f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556dadc9a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556dada45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556dada45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556dada46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556dada45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556dada45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556dada45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556db232794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556db23307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556db2318529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556db2342fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb795efa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556dabc6743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0xa0,0x30,0x30,0x9,0x0,0xe0,0xa0,0xa5,0x30,0x30, Step #5: \302\24000\011\000\340\240\24500 Step #5: artifact_prefix='./'; Test unit written to ./oom-633f2a41af3b8b9c69d965c603abdc7541010583 Step #5: Base64: wqAwMAkA4KClMDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1402 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 47696462 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b9f953d60, 0x556b9fb3c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b9fb3c720,0x556ba19c62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/633f2a41af3b8b9c69d965c603abdc7541010583' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1611 processed earlier; will process 9365 files now Step #5: #1 pulse cov: 3781 ft: 3782 exec/s: 0 rss: 166Mb Step #5: ==50506== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b964962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b9cad1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b9cab446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b9cab438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b9649c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b963fd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b963f7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b9648e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b994bd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b994bd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b994bd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b994bd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b994bd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b994bd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b994bd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b994bd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b994bd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b994bd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b9b6c245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b9841e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b984295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b981d4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b981d4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b981d5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b981d4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b981d4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b981d4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b9cab694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b9cabf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b9caa7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b9cad1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3d58abe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b963f643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xe0,0xba,0xba,0xe4,0xba,0xba,0xe0,0xba,0xba,0x36, Step #5: \"\340\272\272\344\272\272\340\272\2726 Step #5: artifact_prefix='./'; Test unit written to ./oom-bfc70fe39945cb5f55cc104663194f85a7afa71d Step #5: Base64: IuC6uuS6uuC6ujY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1403 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 48225015 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55820d096d60, 0x55820d27f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55820d27f720,0x55820f1092c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bfc70fe39945cb5f55cc104663194f85a7afa71d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1613 processed earlier; will process 9363 files now Step #5: #1 pulse cov: 10252 ft: 10253 exec/s: 0 rss: 186Mb Step #5: ==50542== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558203bd92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55820a214728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55820a1f746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55820a1f738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558203bdf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558203b4042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558203b3ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558203bd1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558206c008c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558206c008c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558206c008c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558206c008c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558206c008c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558206c008c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558206c008c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558206c008c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558206c008c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558206c008c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558208e0545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558205b61578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558205b6c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558205917d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558205917d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558205918808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558205917944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558205917944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558205917944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55820a1f994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55820a2027b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55820a1ea529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55820a214fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27ec142082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558203b3943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x53,0x45,0x4c,0x65,0x63,0x74,0x29,0x46,0x6f,0x72, Step #5: (SELect)For Step #5: artifact_prefix='./'; Test unit written to ./oom-d42e4aad641f1483036d9d9abf702c7602a2ec49 Step #5: Base64: KFNFTGVjdClGb3I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1404 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 48771669 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56531fe0dd60, 0x56531fff671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56531fff6720,0x565321e802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d42e4aad641f1483036d9d9abf702c7602a2ec49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1615 processed earlier; will process 9361 files now Step #5: #1 pulse cov: 3568 ft: 3569 exec/s: 0 rss: 167Mb Step #5: #2 pulse cov: 15908 ft: 16716 exec/s: 0 rss: 201Mb Step #5: ==50578== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653169502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56531cf8b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56531cf6e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56531cf6e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565316956652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5653168b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5653168b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565316948595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653199778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653199778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653199778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653199778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653199778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653199778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653199778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653199778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653199778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653199778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56531bb7c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5653188d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653188e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56531868ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56531868ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56531868f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56531868e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56531868e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56531868e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56531cf7094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56531cf797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56531cf61529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56531cf8bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5619603082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5653168b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0xcc,0x93,0xf0,0x91,0x93,0x82,0xf0,0x91,0x93,0x83, Step #5: x\314\223\360\221\223\202\360\221\223\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-e47f47627f05cc79af663e8d2d7a0895b88c83fb Step #5: Base64: eMyT8JGTgvCRk4M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1405 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 49491576 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a1b5935d60, 0x55a1b5b1e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a1b5b1e720,0x55a1b79a82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e47f47627f05cc79af663e8d2d7a0895b88c83fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1618 processed earlier; will process 9358 files now Step #5: #1 pulse cov: 3474 ft: 3475 exec/s: 0 rss: 167Mb Step #5: ==50614== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a1ac4782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a1b2ab3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a1b2a9646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a1b2a9638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a1ac47e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1ac3df42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1ac3d9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a1ac470595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1af49f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1af49f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1af49f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1af49f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1af49f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1af49f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1af49f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1af49f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1af49f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1af49f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a1b16a445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a1ae400578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a1ae40b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a1ae1b6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a1ae1b6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a1ae1b7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a1ae1b6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a1ae1b6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a1ae1b6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a1b2a9894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a1b2aa17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a1b2a89529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a1b2ab3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8cab601082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1ac3d843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x70,0x0,0x0,0x0,0x5,0x64,0x65,0x66,0x61,0x71, Step #5: \000p\000\000\000\005defaq Step #5: artifact_prefix='./'; Test unit written to ./oom-b8849817018aefadfbdc77fcbda2c29cf8e7fcd9 Step #5: Base64: AHAAAAAFZGVmYXE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1406 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 50017585 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556f70ae8d60, 0x556f70cd171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556f70cd1720,0x556f72b5b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8849817018aefadfbdc77fcbda2c29cf8e7fcd9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1620 processed earlier; will process 9356 files now Step #5: ==50650== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556f6762b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556f6dc66728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556f6dc4946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556f6dc4938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556f67631652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556f6759242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556f6758cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556f67623595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556f6a6528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556f6a6528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556f6a6528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556f6a6528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556f6a6528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556f6a6528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556f6a6528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556f6a6528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556f6a6528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556f6a6528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556f6c85745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556f695b3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556f695be5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556f69369d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556f69369d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556f6936a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556f69369944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556f69369944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556f69369944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556f6dc4b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556f6dc547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556f6dc3c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556f6dc66fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efc0e9e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556f6758b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x31,0x2c,0x33,0x33,0x35,0x34,0x36,0x32,0x33,0x35, Step #5: -1,33546235 Step #5: artifact_prefix='./'; Test unit written to ./oom-964e86bb231cb5e895b4f8c67d3b6ace10c3a06f Step #5: Base64: LTEsMzM1NDYyMzU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1407 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 50490429 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5599189f5d60, 0x559918bde71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559918bde720,0x55991aa682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/964e86bb231cb5e895b4f8c67d3b6ace10c3a06f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1621 processed earlier; will process 9355 files now Step #5: ==50686== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55990f5382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559915b73728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559915b5646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559915b5638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55990f53e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55990f49f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55990f499c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55990f530595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55991255f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55991255f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55991255f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55991255f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55991255f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55991255f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55991255f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55991255f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55991255f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55991255f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55991476445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5599114c0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599114cb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559911276d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559911276d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559911277808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559911276944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559911276944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559911276944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559915b5894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559915b617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559915b49529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559915b73fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0b89f3d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55990f49843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x27,0x27,0xd8,0x98,0x27,0xd8,0x98,0x27,0x27,0x27, Step #5: '''\330\230'\330\230''' Step #5: artifact_prefix='./'; Test unit written to ./oom-fa0e77e378c8027b32751ddce9355dfb7b7a39ed Step #5: Base64: Jycn2Jgn2JgnJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1408 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 50967303 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a852a99d60, 0x55a852c8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a852c82720,0x55a854b0c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fa0e77e378c8027b32751ddce9355dfb7b7a39ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1622 processed earlier; will process 9354 files now Step #5: ==50722== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8495dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a84fc17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a84fbfa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a84fbfa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8495e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a84954342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a84953dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8495d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a84c6038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a84c6038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a84c6038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a84c6038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a84c6038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a84c6038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a84c6038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a84c6038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a84c6038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a84c6038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a84e80845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a84b564578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a84b56f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a84b31ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a84b31ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a84b31b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a84b31a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a84b31a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a84b31a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a84fbfc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a84fc057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a84fbed529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a84fc17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4879dbe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a84953c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0xe2,0x81,0xa8,0x48,0x87,0xff,0xff,0xff,0x87,0xb4, Step #5: 9\342\201\250H\207\377\377\377\207\264 Step #5: artifact_prefix='./'; Test unit written to ./oom-27195ffc064a4a7333fa68929141c5c74bbc77ff Step #5: Base64: OeKBqEiH////h7Q= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1409 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 51449958 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a96b74d60, 0x556a96d5d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a96d5d720,0x556a98be72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/27195ffc064a4a7333fa68929141c5c74bbc77ff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1623 processed earlier; will process 9353 files now Step #5: ==50758== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a8d6b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a93cf2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a93cd546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a93cd538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a8d6bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a8d61e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a8d618c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a8d6af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a906de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a906de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a906de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a906de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a906de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a906de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a906de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a906de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a906de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a906de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a928e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a8f63f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a8f64a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a8f3f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a8f3f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a8f3f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a8f3f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a8f3f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a8f3f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a93cd794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a93ce07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a93cc8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a93cf2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82129f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a8d61743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x6d,0x24,0x32,0x25,0x24,0x32,0x24,0x22,0x2d, Step #5: $3m$2%$2$\"- Step #5: artifact_prefix='./'; Test unit written to ./oom-387f4fb4b10434653dcf8d772d905853aa919767 Step #5: Base64: JDNtJDIlJDIkIi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1410 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 51937226 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a0e3a4d60, 0x555a0e58d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a0e58d720,0x555a104172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/387f4fb4b10434653dcf8d772d905853aa919767' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1624 processed earlier; will process 9352 files now Step #5: ==50794== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a04ee72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a0b522728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a0b50546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a0b50538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a04eed652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a04e4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a04e48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a04edf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a07f0e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a07f0e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a07f0e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a07f0e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a07f0e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a07f0e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a07f0e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a07f0e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a07f0e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a07f0e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a0a11345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a06e6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a06e7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a06c25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a06c25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a06c26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a06c25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a06c25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a06c25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a0b50794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a0b5107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a0b4f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a0b522fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8b28631082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a04e4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x31,0x2b,0x31,0xb,0x33,0x2b,0x31,0x22,0x22,0x22, Step #5: \"1+1\0133+1\"\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-c9dbc2b3735c7edf50a86b7967dad7111570b646 Step #5: Base64: IjErMQszKzEiIiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1411 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 52421752 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b53084d60, 0x556b5326d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b5326d720,0x556b550f72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9dbc2b3735c7edf50a86b7967dad7111570b646' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1625 processed earlier; will process 9351 files now Step #5: ==50830== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b49bc72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b50202728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b501e546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b501e538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b49bcd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b49b2e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b49b28c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b49bbf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b4cbee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b4cbee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b4cbee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b4cbee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b4cbee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b4cbee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b4cbee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b4cbee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b4cbee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b4cbee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b4edf345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b4bb4f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b4bb5a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b4b905d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b4b905d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b4b906808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b4b905944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b4b905944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b4b905944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b501e794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b501f07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b501d8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b50202fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa028bf6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b49b2743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x30,0x30,0x30,0x30,0x30,0x30,0xd9,0x8d,0x30,0x30, Step #5: B000000\331\21500 Step #5: artifact_prefix='./'; Test unit written to ./oom-9b9c80a15839b507961bfd5bd0c14a8987f2eac1 Step #5: Base64: QjAwMDAwMNmNMDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1412 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 52905103 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e9a3d58d60, 0x55e9a3f4171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e9a3f41720,0x55e9a5dcb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9b9c80a15839b507961bfd5bd0c14a8987f2eac1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1626 processed earlier; will process 9350 files now Step #5: ==50866== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e99a89b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e9a0ed6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e9a0eb946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e9a0eb938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e99a8a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e99a80242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e99a7fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e99a893595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e99d8c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e99d8c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e99d8c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e99d8c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e99d8c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e99d8c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e99d8c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e99d8c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e99d8c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e99d8c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e99fac745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e99c823578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e99c82e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e99c5d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e99c5d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e99c5da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e99c5d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e99c5d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e99c5d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e9a0ebb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e9a0ec47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e9a0eac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e9a0ed6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f77158c2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e99a7fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x23,0x22,0x5d,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x22, Step #5: [#\"]\\P\\P\\P\" Step #5: artifact_prefix='./'; Test unit written to ./oom-ddaf873579d01315e5c5b6e29bbc1712307dd9a2 Step #5: Base64: WyMiXVxQXFBcUCI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1413 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 53381353 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d843501d60, 0x55d8436ea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d8436ea720,0x55d8455742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ddaf873579d01315e5c5b6e29bbc1712307dd9a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1627 processed earlier; will process 9349 files now Step #5: ==50902== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d83a0442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d84067f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d84066246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d84066238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d83a04a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d839fab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d839fa5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d83a03c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d83d06b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d83d06b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d83d06b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d83d06b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d83d06b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d83d06b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d83d06b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d83d06b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d83d06b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d83d06b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d83f27045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d83bfcc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d83bfd75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d83bd82d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d83bd82d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d83bd83808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d83bd82944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d83bd82944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d83bd82944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d84066494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d84066d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d840655529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d84067ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1dd6872082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d839fa443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d,0x54,0x6f,0x34,0x64,0x52,0x49,0x45,0x61,0x64,0x61, Step #5: mTo4dRIEada Step #5: artifact_prefix='./'; Test unit written to ./oom-dd3804669a4b4996aee30a0569453d9a8b214503 Step #5: Base64: bVRvNGRSSUVhZGE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1414 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 53864980 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56490cd46d60, 0x56490cf2f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56490cf2f720,0x56490edb92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dd3804669a4b4996aee30a0569453d9a8b214503' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1628 processed earlier; will process 9348 files now Step #5: ==50938== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5649038892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564909ec4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564909ea746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564909ea738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56490388f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5649037f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5649037eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564903881595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5649068b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5649068b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5649068b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5649068b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5649068b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5649068b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5649068b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5649068b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5649068b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5649068b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564908ab545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564905811578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56490581c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5649055c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5649055c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5649055c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5649055c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5649055c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5649055c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564909ea994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564909eb27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564909e9a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564909ec4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc33d684082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5649037e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x0,0x60,0x0,0xff,0x0,0x0,0x1,0x1,0x73,0x2b, Step #5: `\000`\000\377\000\000\001\001s+ Step #5: artifact_prefix='./'; Test unit written to ./oom-1a31e11651048dcec900f10b04d4f8608d600397 Step #5: Base64: YABgAP8AAAEBcys= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1415 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 54471896 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d8feeadd60, 0x55d8ff09671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d8ff096720,0x55d900f202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a31e11651048dcec900f10b04d4f8608d600397' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1629 processed earlier; will process 9347 files now Step #5: #1 pulse cov: 3730 ft: 3731 exec/s: 0 rss: 167Mb Step #5: ==50974== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d8f59f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d8fc02b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d8fc00e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d8fc00e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d8f59f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d8f595742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d8f5951c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d8f59e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d8f8a178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d8f8a178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d8f8a178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d8f8a178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d8f8a178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d8f8a178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d8f8a178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d8f8a178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d8f8a178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d8f8a178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d8fac1c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d8f7978578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d8f79835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d8f772ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d8f772ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d8f772f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d8f772e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d8f772e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d8f772e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d8fc01094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d8fc0197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d8fc001529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d8fc02bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc6807da082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d8f595043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x24,0xf3, Step #5: $\000\000\000\000\000\000\000\000$\363 Step #5: artifact_prefix='./'; Test unit written to ./oom-bdfdda5295c757ae5946531aa77f78b22b68fd66 Step #5: Base64: JAAAAAAAAAAAJPM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1416 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 54988912 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b2000f8d60, 0x55b2002e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b2002e1720,0x55b20216b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bdfdda5295c757ae5946531aa77f78b22b68fd66' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1631 processed earlier; will process 9345 files now Step #5: ==51010== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b1f6c3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b1fd276728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b1fd25946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b1fd25938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b1f6c41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b1f6ba242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b1f6b9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b1f6c33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1f9c628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1f9c628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1f9c628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1f9c628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1f9c628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1f9c628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1f9c628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1f9c628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1f9c628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1f9c628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b1fbe6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b1f8bc3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1f8bce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b1f8979d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b1f8979d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b1f897a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b1f8979944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b1f8979944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b1f8979944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b1fd25b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1fd2647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b1fd24c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b1fd276fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5d6024b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b1f6b9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xbb,0x0,0x0,0x0,0x0,0x0,0x0,0xbb,0xcc,0x44, Step #5: \326\273\000\000\000\000\000\000\273\314D Step #5: artifact_prefix='./'; Test unit written to ./oom-6583cc83733d84ff5bd6e7933b8f5e51db9d7f8d Step #5: Base64: 1rsAAAAAAAC7zEQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1417 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 55459441 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5630a2c7bd60, 0x5630a2e6471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5630a2e64720,0x5630a4cee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6583cc83733d84ff5bd6e7933b8f5e51db9d7f8d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1632 processed earlier; will process 9344 files now Step #5: #1 pulse cov: 10571 ft: 10572 exec/s: 0 rss: 186Mb Step #5: ==51046== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5630997be2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56309fdf9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56309fddc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56309fddc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5630997c4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56309972542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56309971fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5630997b6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56309c7e58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56309c7e58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56309c7e58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56309c7e58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56309c7e58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56309c7e58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56309c7e58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56309c7e58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56309c7e58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56309c7e58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56309e9ea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56309b746578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56309b7515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56309b4fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56309b4fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56309b4fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56309b4fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56309b4fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56309b4fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56309fdde94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56309fde77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56309fdcf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56309fdf9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe3adc6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56309971e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x4,0x21,0xc,0x6f,0x6c,0x4,0x18,0xc,0x18,0xc, Step #5: \013\004!\014ol\004\030\014\030\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-759b615f569d9b921d61c898e1ed367ddddc2533 Step #5: Base64: CwQhDG9sBBgMGAw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1418 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 56013160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aae5fd5d60, 0x55aae61be71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aae61be720,0x55aae80482c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/759b615f569d9b921d61c898e1ed367ddddc2533' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1634 processed earlier; will process 9342 files now Step #5: ==51082== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aadcb182d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aae3153728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aae313646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aae313638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aadcb1e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aadca7f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aadca79c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aadcb10595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aadfb3f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aadfb3f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aadfb3f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aadfb3f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aadfb3f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aadfb3f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aadfb3f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aadfb3f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aadfb3f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aadfb3f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aae1d4445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aadeaa0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aadeaab5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aade856d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aade856d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aade857808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aade856944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aade856944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aade856944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aae313894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aae31417b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aae3129529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aae3153fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f38e8bbf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aadca7843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x22,0x22,0x22,0x40,0x27,0x26,0x40,0x26,0x40,0x40, Step #5: \"\"\"\"@'&@&@@ Step #5: artifact_prefix='./'; Test unit written to ./oom-1b9f4d250019492bf9dca66fc7d944220eeec563 Step #5: Base64: IiIiIkAnJkAmQEA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1419 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 56487415 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555bed115d60, 0x555bed2fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555bed2fe720,0x555bef1882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1b9f4d250019492bf9dca66fc7d944220eeec563' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1635 processed earlier; will process 9341 files now Step #5: #1 pulse cov: 3633 ft: 3634 exec/s: 0 rss: 165Mb Step #5: ==51118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555be3c582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555bea293728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555bea27646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555bea27638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555be3c5e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555be3bbf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555be3bb9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555be3c50595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555be6c7f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555be6c7f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555be6c7f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555be6c7f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555be6c7f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555be6c7f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555be6c7f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555be6c7f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555be6c7f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555be6c7f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555be8e8445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555be5be0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555be5beb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555be5996d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555be5996d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555be5997808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555be5996944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555be5996944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555be5996944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555bea27894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555bea2817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555bea269529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555bea293fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f866ccee082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555be3bb843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x22,0xa,0xd9,0x9c,0x74,0x0,0xdf,0xb3,0x69,0x66, Step #5: \002\"\012\331\234t\000\337\263if Step #5: artifact_prefix='./'; Test unit written to ./oom-2ce840e24b7d5fa8c55e080de6328abec2436fb4 Step #5: Base64: AiIK2Zx0AN+zaWY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1420 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 57015881 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5636748ffd60, 0x563674ae871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563674ae8720,0x5636769722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2ce840e24b7d5fa8c55e080de6328abec2436fb4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1637 processed earlier; will process 9339 files now Step #5: ==51154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56366b4422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563671a7d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563671a6046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563671a6038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56366b448652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56366b3a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56366b3a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56366b43a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56366e4698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56366e4698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56366e4698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56366e4698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56366e4698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56366e4698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56366e4698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56366e4698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56366e4698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56366e4698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56367066e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56366d3ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56366d3d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56366d180d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56366d180d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56366d181808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56366d180944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56366d180944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56366d180944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563671a6294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563671a6b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563671a53529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563671a7dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa151904082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56366b3a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xcd,0x80,0xcd,0x80,0xcd,0x80,0xcd,0x80, Step #5: ws:\315\200\315\200\315\200\315\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-0a95bbda17315fdd1e071affeb805d8440195665 Step #5: Base64: d3M6zYDNgM2AzYA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1421 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 57501197 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1618ccd60, 0x55e161ab571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e161ab5720,0x55e16393f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0a95bbda17315fdd1e071affeb805d8440195665' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1638 processed earlier; will process 9338 files now Step #5: ==51190== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e15840f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e15ea4a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e15ea2d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e15ea2d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e158415652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e15837642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e158370c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e158407595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e15b4368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e15b4368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e15b4368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e15b4368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e15b4368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e15b4368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e15b4368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e15b4368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e15b4368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e15b4368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e15d63b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e15a397578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e15a3a25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e15a14dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e15a14dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e15a14e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e15a14d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e15a14d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e15a14d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e15ea2f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e15ea387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e15ea20529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e15ea4afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0085e3d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e15836f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x55,0x53,0x21,0x0,0x0,0x49,0x44, Step #5: ID3\004US!\000\000ID Step #5: artifact_prefix='./'; Test unit written to ./oom-f29f12251024fe4c995233aa89303b135d834e05 Step #5: Base64: SUQzBFVTIQAASUQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1422 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 57988286 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562a99a18d60, 0x562a99c0171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562a99c01720,0x562a9ba8b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f29f12251024fe4c995233aa89303b135d834e05' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1639 processed earlier; will process 9337 files now Step #5: ==51226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562a9055b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562a96b96728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562a96b7946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562a96b7938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562a90561652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562a904c242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562a904bcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562a90553595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562a935828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562a935828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562a935828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562a935828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562a935828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562a935828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562a935828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562a935828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562a935828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562a935828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562a9578745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562a924e3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562a924ee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562a92299d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562a92299d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562a9229a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562a92299944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562a92299944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562a92299944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562a96b7b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562a96b847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562a96b6c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562a96b96fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f292659e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562a904bb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3a,0x3e,0x26,0xe2,0x85,0xa3,0x26,0xe2,0x85,0xa3, Step #5: <:>&\342\205\243&\342\205\243 Step #5: artifact_prefix='./'; Test unit written to ./oom-ca991388288d004e44f7711356cd81cead1dd20d Step #5: Base64: PDo+JuKFoybihaM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1423 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 58474299 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f4698efd60, 0x55f469ad871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f469ad8720,0x55f46b9622c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ca991388288d004e44f7711356cd81cead1dd20d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1640 processed earlier; will process 9336 files now Step #5: ==51262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f4604322d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f466a6d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f466a5046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f466a5038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f460438652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f46039942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f460393c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f46042a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f4634598c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f4634598c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f4634598c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f4634598c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f4634598c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f4634598c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f4634598c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f4634598c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f4634598c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f4634598c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f46565e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f4623ba578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f4623c55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f462170d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f462170d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f462171808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f462170944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f462170944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f462170944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f466a5294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f466a5b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f466a43529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f466a6dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efeef1d4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f46039243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x24,0x7b,0x41,0x7d,0x60,0x60,0x24,0x7b,0x7d,0x60, Step #5: `${A}``${}` Step #5: artifact_prefix='./'; Test unit written to ./oom-7c36ae7ebf11575407b1876772dc0164075acf06 Step #5: Base64: YCR7QX1gYCR7fWA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1424 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 59083615 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56270c776d60, 0x56270c95f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56270c95f720,0x56270e7e92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7c36ae7ebf11575407b1876772dc0164075acf06' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1641 processed earlier; will process 9335 files now Step #5: #1 pulse cov: 3664 ft: 3665 exec/s: 0 rss: 168Mb Step #5: ==51298== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5627032b92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5627098f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5627098d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5627098d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5627032bf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56270322042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56270321ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5627032b1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627062e08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627062e08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627062e08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627062e08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627062e08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627062e08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627062e08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627062e08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627062e08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627062e08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5627084e545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562705241578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56270524c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562704ff7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562704ff7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562704ff8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562704ff7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562704ff7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562704ff7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5627098d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627098e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5627098ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5627098f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa0ab9fc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56270321943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x7,0x0,0x0,0x0,0x3,0xef,0xbc,0x9f, Step #5: \000\000\000\007\000\000\000\003\357\274\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-293ef08d0e7a4d18497b258e5b5de6df851b7c5c Step #5: Base64: AAAABwAAAAPvvJ8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1425 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 59611675 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564140a97d60, 0x564140c8071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564140c80720,0x564142b0a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/293ef08d0e7a4d18497b258e5b5de6df851b7c5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1643 processed earlier; will process 9333 files now Step #5: ==51334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5641375da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56413dc15728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56413dbf846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56413dbf838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5641375e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56413754142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56413753bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5641375d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56413a6018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56413a6018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56413a6018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56413a6018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56413a6018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56413a6018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56413a6018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56413a6018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56413a6018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56413a6018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56413c80645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564139562578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56413956d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564139318d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564139318d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564139319808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564139318944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564139318944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564139318944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56413dbfa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56413dc037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56413dbeb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56413dc15fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e97384082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56413753a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x76,0x73,0x34,0x72,0x65,0x61,0x6d,0x50,0x50,0x50,0x50, Step #5: vs4reamPPPP Step #5: artifact_prefix='./'; Test unit written to ./oom-fad524efc079f8118e57c16c3dcd2fe12f9b024e Step #5: Base64: dnM0cmVhbVBQUFA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1426 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 60086591 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55da487d6d60, 0x55da489bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55da489bf720,0x55da4a8492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fad524efc079f8118e57c16c3dcd2fe12f9b024e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1644 processed earlier; will process 9332 files now Step #5: ==51370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55da3f3192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55da45954728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55da4593746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55da4593738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55da3f31f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55da3f28042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55da3f27ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55da3f311595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55da423408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55da423408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55da423408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55da423408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55da423408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55da423408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55da423408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55da423408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55da423408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55da423408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55da4454545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55da412a1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55da412ac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55da41057d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55da41057d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55da41058808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55da41057944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55da41057944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55da41057944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55da4593994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55da459427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55da4592a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55da45954fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1c3f9dc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55da3f27943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x61,0xd6,0x9c,0xd6,0xbd,0xd6,0x9c,0xd6,0x9c, Step #5: Step #5: Step #5: #0 0x55d1314d72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d137b12728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d137af546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d137af538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1314dd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d13143e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d131438c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1314cf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1344fe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1344fe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1344fe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1344fe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1344fe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1344fe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1344fe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1344fe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1344fe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1344fe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d13670345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d13345f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d13346a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d133215d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d133215d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d133216808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d133215944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d133215944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d133215944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d137af794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d137b007b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d137ae8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d137b12fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb527df9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d13143743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x3a,0x2f,0x2f,0xa,0xcd,0x84,0xcd,0x8f,0xcd,0x84, Step #5: o://\012\315\204\315\217\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-0987517a79e66c8e7eaf922d9e1543de64fed0fc Step #5: Base64: bzovLwrNhM2PzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1428 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 61047939 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a7a166d60, 0x557a7a34f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a7a34f720,0x557a7c1d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0987517a79e66c8e7eaf922d9e1543de64fed0fc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1646 processed earlier; will process 9330 files now Step #5: ==51442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a70ca92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a772e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a772c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a772c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a70caf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a70c1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a70c0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a70ca1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a73cd08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a73cd08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a73cd08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a73cd08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a73cd08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a73cd08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a73cd08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a73cd08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a73cd08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a73cd08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a75ed545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a72c31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a72c3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a729e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a729e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a729e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a729e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a729e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a729e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a772c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a772d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a772ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a772e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc61872a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a70c0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x42,0x7e,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1f, Step #5: \000B~\000\000\000\000\000\000\000\037 Step #5: artifact_prefix='./'; Test unit written to ./oom-b13f2ff1da9650ea8d15c2c8e9e8399c27d17810 Step #5: Base64: AEJ+AAAAAAAAAB8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1429 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 61530562 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561bc99e7d60, 0x561bc9bd071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561bc9bd0720,0x561bcba5a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b13f2ff1da9650ea8d15c2c8e9e8399c27d17810' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1647 processed earlier; will process 9329 files now Step #5: ==51478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561bc052a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561bc6b65728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561bc6b4846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561bc6b4838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561bc0530652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561bc049142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561bc048bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561bc0522595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561bc35518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561bc35518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561bc35518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561bc35518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561bc35518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561bc35518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561bc35518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561bc35518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561bc35518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561bc35518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561bc575645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561bc24b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561bc24bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561bc2268d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561bc2268d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561bc2269808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561bc2268944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561bc2268944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561bc2268944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561bc6b4a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561bc6b537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561bc6b3b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561bc6b65fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff56975a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561bc048a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x9,0x2b,0xa,0x9,0x6d,0x6d,0x6d,0x6d,0x7c, Step #5: +\012\011+\012\011mmmm| Step #5: artifact_prefix='./'; Test unit written to ./oom-32b9ca87b4e91be6bcaceb5cf9e521f91d6fa2fa Step #5: Base64: KwoJKwoJbW1tbXw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1430 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 62009754 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5574009e2d60, 0x557400bcb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557400bcb720,0x557402a552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/32b9ca87b4e91be6bcaceb5cf9e521f91d6fa2fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1648 processed earlier; will process 9328 files now Step #5: ==51514== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5573f75252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5573fdb60728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5573fdb4346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5573fdb4338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5573f752b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5573f748c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5573f7486c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5573f751d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5573fa54c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5573fa54c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5573fa54c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5573fa54c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5573fa54c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5573fa54c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5573fa54c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5573fa54c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5573fa54c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5573fa54c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5573fc75145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5573f94ad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5573f94b85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5573f9263d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5573f9263d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5573f9264808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5573f9263944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5573f9263944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5573f9263944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5573fdb4594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5573fdb4e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5573fdb36529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5573fdb60fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f67753bc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5573f748543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x5c,0x75,0x7b,0x32,0x7d,0x5c,0x75,0x7b,0x37,0x7d, Step #5: '\\u{2}\\u{7} Step #5: artifact_prefix='./'; Test unit written to ./oom-5191f9dc767b7f153640834433b22fc9aefbd77b Step #5: Base64: J1x1ezJ9XHV7N30= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1431 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 62491451 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ed7abfd60, 0x562ed7ca871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ed7ca8720,0x562ed9b322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5191f9dc767b7f153640834433b22fc9aefbd77b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1649 processed earlier; will process 9327 files now Step #5: ==51550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ece6022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562ed4c3d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562ed4c2046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562ed4c2038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ece608652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ece56942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ece563c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ece5fa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562ed16298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562ed16298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562ed16298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562ed16298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562ed16298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562ed16298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562ed16298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562ed16298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562ed16298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562ed16298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562ed382e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ed058a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ed05955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ed0340d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ed0340d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ed0341808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ed0340944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ed0340944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ed0340944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562ed4c2294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562ed4c2b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562ed4c13529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562ed4c3dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4089289082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ece56243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0xdf,0x8f,0xdf,0x97,0xd,0x0,0xdf,0x8f,0x1,0x41, Step #5: (\337\217\337\227\015\000\337\217\001A Step #5: artifact_prefix='./'; Test unit written to ./oom-815cec70f3fbb7f34c5cef88eac18a73b0729a10 Step #5: Base64: KN+P35cNAN+PAUE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1432 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 62976350 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d4f7951d60, 0x55d4f7b3a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d4f7b3a720,0x55d4f99c42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/815cec70f3fbb7f34c5cef88eac18a73b0729a10' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1650 processed earlier; will process 9326 files now Step #5: #1 pulse cov: 3846 ft: 3847 exec/s: 0 rss: 168Mb Step #5: ==51586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4ee4942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d4f4acf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d4f4ab246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d4f4ab238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4ee49a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d4ee3fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d4ee3f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4ee48c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4f14bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4f14bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4f14bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4f14bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4f14bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4f14bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4f14bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4f14bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4f14bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4f14bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d4f36c045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d4f041c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4f04275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d4f01d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d4f01d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d4f01d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d4f01d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d4f01d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d4f01d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d4f4ab494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d4f4abd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d4f4aa5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d4f4acffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6b20b3f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d4ee3f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x41,0xda,0x84,0xda,0x85,0xda,0x85,0xda,0x90, Step #5: Step #5: Step #5: #0 0x5626a325f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5626a989a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5626a987d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5626a987d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5626a3265652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5626a31c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5626a31c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5626a3257595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5626a62868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5626a62868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5626a62868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5626a62868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5626a62868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5626a62868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5626a62868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5626a62868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5626a62868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5626a62868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5626a848b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5626a51e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5626a51f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5626a4f9dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5626a4f9dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5626a4f9e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5626a4f9d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5626a4f9d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5626a4f9d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5626a987f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5626a98887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5626a9870529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5626a989afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f445b283082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5626a31bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x61,0xc2,0xb7,0xc2,0xb7,0xc2,0xb7,0xc2,0xb7, Step #5: Step #5: Step #5: #0 0x56470180e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564707e49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564707e2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564707e2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564701814652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56470177542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56470176fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564701806595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5647048358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5647048358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5647048358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5647048358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5647048358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5647048358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5647048358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5647048358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5647048358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5647048358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564706a3a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564703796578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5647037a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56470354cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56470354cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56470354d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56470354c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56470354c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56470354c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564707e2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564707e377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564707e1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564707e49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6698c28082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56470176e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x68,0x68,0x68,0x68,0x68,0x68,0x60,0x23,0x60, Step #5: +\012hhhhhh`#` Step #5: artifact_prefix='./'; Test unit written to ./oom-602d97cf6bbb2ddfa1cece468cad75279d5e48d5 Step #5: Base64: KwpoaGhoaGhgI2A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1435 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 64575198 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559864938d60, 0x559864b2171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559864b21720,0x5598669ab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/602d97cf6bbb2ddfa1cece468cad75279d5e48d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1654 processed earlier; will process 9322 files now Step #5: ==51694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55985b47b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559861ab6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559861a9946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559861a9938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55985b481652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55985b3e242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55985b3dcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55985b473595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55985e4a28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55985e4a28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55985e4a28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55985e4a28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55985e4a28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55985e4a28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55985e4a28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55985e4a28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55985e4a28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55985e4a28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5598606a745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55985d403578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55985d40e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55985d1b9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55985d1b9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55985d1ba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55985d1b9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55985d1b9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55985d1b9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559861a9b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559861aa47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559861a8c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559861ab6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fecd7ec4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55985b3db43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7,0x5c,0x24,0x5c,0x24,0xb,0x7e,0xde,0xad,0xbe,0xef, Step #5: \007\\$\\$\013~\336\255\276\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-05b3a475186b6e33d215638db031167be0afcd8a Step #5: Base64: B1wkXCQLft6tvu8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1436 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 65049200 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56434deaad60, 0x56434e09371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56434e093720,0x56434ff1d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/05b3a475186b6e33d215638db031167be0afcd8a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1655 processed earlier; will process 9321 files now Step #5: ==51730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5643449ed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56434b028728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56434b00b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56434b00b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5643449f3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56434495442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56434494ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5643449e5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564347a148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564347a148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564347a148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564347a148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564347a148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564347a148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564347a148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564347a148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564347a148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564347a148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564349c1945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564346975578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5643469805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56434672bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56434672bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56434672c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56434672b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56434672b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56434672b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56434b00d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56434b0167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56434affe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56434b028fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9eb3bda082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56434494d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x27,0x27,0x27,0x27,0x29,0x1,0x0,0x0,0xa,0x76,0x6d, Step #5: ''''')\001\000\000\012vm Step #5: artifact_prefix='./'; Test unit written to ./oom-83fff8e14fa120f75bf04e2ac136fa18f0b6a383 Step #5: Base64: JycnJycpAQAACnZt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1437 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 65524033 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c9fcffcd60, 0x55c9fd1e571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c9fd1e5720,0x55c9ff06f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/83fff8e14fa120f75bf04e2ac136fa18f0b6a383' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1656 processed earlier; will process 9320 files now Step #5: ==51766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c9f3b3f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c9fa17a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c9fa15d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c9fa15d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c9f3b45652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c9f3aa642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c9f3aa0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c9f3b37595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c9f6b668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c9f6b668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c9f6b668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c9f6b668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c9f6b668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c9f6b668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c9f6b668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c9f6b668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c9f6b668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c9f6b668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c9f8d6b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c9f5ac7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c9f5ad25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c9f587dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c9f587dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c9f587e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c9f587d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c9f587d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c9f587d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c9fa15f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c9fa1687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c9fa150529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c9fa17afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb3af39b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c9f3a9f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0x8c,0xe,0x27,0x9,0x0,0xa,0xe,0x27,0x9,0x3b,0x32, Step #5: \334\214\016'\011\000\012\016'\011;2 Step #5: artifact_prefix='./'; Test unit written to ./oom-9bce58b83f003d5932c59de5f5a7e0f83550f413 Step #5: Base64: 3IwOJwkACg4nCTsy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1438 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 66001325 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc1c623d60, 0x55dc1c80c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc1c80c720,0x55dc1e6962c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9bce58b83f003d5932c59de5f5a7e0f83550f413' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1657 processed earlier; will process 9319 files now Step #5: ==51802== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc131662d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc197a1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc1978446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc1978438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc1316c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc130cd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc130c7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc1315e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc1618d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc1618d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc1618d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc1618d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc1618d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc1618d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc1618d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc1618d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc1618d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc1618d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc1839245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc150ee578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc150f95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc14ea4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc14ea4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc14ea5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc14ea4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc14ea4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc14ea4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc1978694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc1978f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc19777529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc197a1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9690c87082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc130c643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0xc2,0x85,0x29,0xc2,0x85,0x29,0xc2,0x85,0x29,0xc2,0x85, Step #5: )\302\205)\302\205)\302\205)\302\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-32149f3bb1c1fb9d39e8a2942a6cdc43d41cb72f Step #5: Base64: KcKFKcKFKcKFKcKF Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1439 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 66483051 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ae110acd60, 0x55ae1129571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ae11295720,0x55ae1311f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/32149f3bb1c1fb9d39e8a2942a6cdc43d41cb72f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1658 processed earlier; will process 9318 files now Step #5: ==51838== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ae07bef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ae0e22a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ae0e20d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ae0e20d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ae07bf5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ae07b5642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ae07b50c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ae07be7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ae0ac168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ae0ac168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ae0ac168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ae0ac168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ae0ac168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ae0ac168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ae0ac168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ae0ac168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ae0ac168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ae0ac168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ae0ce1b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ae09b77578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ae09b825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ae0992dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ae0992dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ae0992e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ae0992d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ae0992d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ae0992d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ae0e20f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ae0e2187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ae0e200529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ae0e22afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc3b6bb9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ae07b4f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x31,0xf0,0x94,0x92,0xa0,0xf3,0xa0,0x81,0x8a,0xd7,0x3d, Step #5: B1\360\224\222\240\363\240\201\212\327= Step #5: artifact_prefix='./'; Test unit written to ./oom-238d9c9b68f7d7e511890d031d5309d90219175b Step #5: Base64: QjHwlJKg86CBitc9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1440 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 66966960 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619babaed60, 0x5619bad9771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619bad97720,0x5619bcc212c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/238d9c9b68f7d7e511890d031d5309d90219175b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1659 processed earlier; will process 9317 files now Step #5: #1 pulse cov: 10642 ft: 10643 exec/s: 0 rss: 183Mb Step #5: ==51874== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5619b16f12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619b7d2c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619b7d0f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619b7d0f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5619b16f7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5619b165842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5619b1652c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5619b16e9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619b47188c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619b47188c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619b47188c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619b47188c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619b47188c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619b47188c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619b47188c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619b47188c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619b47188c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619b47188c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619b691d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619b3679578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619b36845a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619b342fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619b342fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619b3430808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619b342f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619b342f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619b342f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619b7d1194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619b7d1a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619b7d02529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619b7d2cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb4005e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5619b165143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xcd,0xbc,0x3e,0x3c,0xcd,0xbc,0x3e,0x3c,0xcd,0xbc,0x3e, Step #5: <\315\274><\315\274><\315\274> Step #5: artifact_prefix='./'; Test unit written to ./oom-a2eff445fc4d11f4018da96be8489d2185032dc7 Step #5: Base64: PM28PjzNvD48zbw+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1441 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 67511104 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555853975d60, 0x555853b5e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555853b5e720,0x5558559e82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2eff445fc4d11f4018da96be8489d2185032dc7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1661 processed earlier; will process 9315 files now Step #5: ==51910== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55584a4b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555850af3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555850ad646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555850ad638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55584a4be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55584a41f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55584a419c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55584a4b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55584d4df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55584d4df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55584d4df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55584d4df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55584d4df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55584d4df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55584d4df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55584d4df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55584d4df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55584d4df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55584f6e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55584c440578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55584c44b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55584c1f6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55584c1f6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55584c1f7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55584c1f6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55584c1f6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55584c1f6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555850ad894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555850ae17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555850ac9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555850af3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f13ae129082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55584a41843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x24,0x74,0x24,0x74,0xc8,0x96,0x39,0xc8,0x96,0x39,0x0, Step #5: \013$t$t\310\2269\310\2269\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-70fbe15a9268d7d04a2dd601238f937136f13e91 Step #5: Base64: CyR0JHTIljnIljkA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1442 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 67993631 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5638e55e7d60, 0x5638e57d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5638e57d0720,0x5638e765a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70fbe15a9268d7d04a2dd601238f937136f13e91' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1662 processed earlier; will process 9314 files now Step #5: ==51946== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5638dc12a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5638e2765728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5638e274846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5638e274838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5638dc130652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5638dc09142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5638dc08bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5638dc122595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5638df1518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5638df1518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5638df1518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5638df1518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5638df1518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5638df1518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5638df1518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5638df1518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5638df1518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5638df1518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5638e135645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5638de0b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5638de0bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5638dde68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5638dde68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5638dde69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5638dde68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5638dde68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5638dde68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5638e274a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5638e27537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5638e273b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5638e2765fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9a805c2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5638dc08a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcc,0x9b,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xae,0xd5,0xc8, Step #5: \314\233\000\000\000\000\000\000\000\256\325\310 Step #5: artifact_prefix='./'; Test unit written to ./oom-8b9263584704fef03b91abd51ea8a5fbbfb621b5 Step #5: Base64: zJsAAAAAAAAArtXI Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1443 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 68471855 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f3a1bcbd60, 0x55f3a1db471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f3a1db4720,0x55f3a3c3e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8b9263584704fef03b91abd51ea8a5fbbfb621b5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1663 processed earlier; will process 9313 files now Step #5: ==51982== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f39870e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f39ed49728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f39ed2c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f39ed2c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f398714652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f39867542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f39866fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f398706595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f39b7358c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f39b7358c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f39b7358c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f39b7358c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f39b7358c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f39b7358c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f39b7358c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f39b7358c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f39b7358c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f39b7358c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f39d93a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f39a696578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f39a6a15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f39a44cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f39a44cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f39a44d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f39a44c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f39a44c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f39a44c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f39ed2e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f39ed377b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f39ed1f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f39ed49fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f01c58ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f39866e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x50,0xa,0xd,0x48,0xa,0xd,0x4a,0xa,0xd,0x48,0x8b, Step #5: HP\012\015H\012\015J\012\015H\213 Step #5: artifact_prefix='./'; Test unit written to ./oom-557427dce607abd1effa4930f8b010470e3c2f41 Step #5: Base64: SFAKDUgKDUoKDUiL Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1444 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 68950262 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606af756d60, 0x5606af93f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606af93f720,0x5606b17c92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/557427dce607abd1effa4930f8b010470e3c2f41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1664 processed earlier; will process 9312 files now Step #5: ==52018== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606a62992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5606ac8d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5606ac8b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5606ac8b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606a629f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5606a620042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5606a61fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606a6291595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5606a92c08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5606a92c08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5606a92c08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5606a92c08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5606a92c08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5606a92c08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5606a92c08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5606a92c08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5606a92c08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5606a92c08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606ab4c545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5606a8221578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5606a822c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5606a7fd7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5606a7fd7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5606a7fd8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5606a7fd7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5606a7fd7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5606a7fd7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5606ac8b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606ac8c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5606ac8aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5606ac8d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e8a4a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5606a61f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x64,0xf0,0x91,0xa4,0xbd,0xf0,0x90,0xa4,0xb0, Step #5: ws:d\360\221\244\275\360\220\244\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-61297663c108f0c8f969b82eb85d9f83eed57d9a Step #5: Base64: d3M6ZPCRpL3wkKSw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1445 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 69434744 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a4e044bd60, 0x55a4e063471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a4e0634720,0x55a4e24be2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/61297663c108f0c8f969b82eb85d9f83eed57d9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1665 processed earlier; will process 9311 files now Step #5: #1 pulse cov: 3559 ft: 3560 exec/s: 0 rss: 166Mb Step #5: ==52054== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4d6f8e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a4dd5c9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a4dd5ac46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a4dd5ac38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4d6f94652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a4d6ef542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a4d6eefc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a4d6f86595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4d9fb58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4d9fb58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4d9fb58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4d9fb58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4d9fb58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4d9fb58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4d9fb58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4d9fb58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4d9fb58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4d9fb58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a4dc1ba45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a4d8f16578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4d8f215a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4d8cccd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4d8cccd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4d8ccd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4d8ccc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4d8ccc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4d8ccc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a4dd5ae94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a4dd5b77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a4dd59f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a4dd5c9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4271a6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a4d6eee43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x45,0x3a,0x45,0x3a,0x3e,0x3c,0x2f,0x45,0x3a,0x45,0x3a, Step #5: Step #5: Step #5: #0 0x561caf02a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561cb5665728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561cb564846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561cb564838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561caf030652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561caef9142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561caef8bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561caf022595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561cb20518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561cb20518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561cb20518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561cb20518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561cb20518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561cb20518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561cb20518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561cb20518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561cb20518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561cb20518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561cb425645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561cb0fb2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561cb0fbd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561cb0d68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561cb0d68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561cb0d69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561cb0d68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561cb0d68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561cb0d68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561cb564a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561cb56537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561cb563b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561cb5665fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb8fd146082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561caef8a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x73,0x65,0x70,0x61,0x72,0x61,0x74,0x69,0x6f,0x4e,0xff, Step #5: /separatioN\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-975d73d515f3b59ad892f9be468d4e13028626b5 Step #5: Base64: L3NlcGFyYXRpb07/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1447 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 70436963 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ae4dd27d60, 0x55ae4df1071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ae4df10720,0x55ae4fd9a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/975d73d515f3b59ad892f9be468d4e13028626b5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1668 processed earlier; will process 9308 files now Step #5: ==52126== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ae4486a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ae4aea5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ae4ae8846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ae4ae8838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ae44870652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ae447d142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ae447cbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ae44862595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ae478918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ae478918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ae478918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ae478918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ae478918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ae478918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ae478918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ae478918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ae478918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ae478918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ae49a9645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ae467f2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ae467fd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ae465a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ae465a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ae465a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ae465a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ae465a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ae465a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ae4ae8a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ae4ae937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ae4ae7b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ae4aea5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5d8ba44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ae447ca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x88,0xf0,0x91,0x97,0x80,0xf0,0x91,0x97,0x80,0xcc,0x8f, Step #5: \315\210\360\221\227\200\360\221\227\200\314\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-f111c8fc1374dc7869c4fc5f719adea6c8433af2 Step #5: Base64: zYjwkZeA8JGXgMyP Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1448 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 70921738 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5616e2ae2d60, 0x5616e2ccb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5616e2ccb720,0x5616e4b552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f111c8fc1374dc7869c4fc5f719adea6c8433af2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1669 processed earlier; will process 9307 files now Step #5: ==52162== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616d96252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5616dfc60728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5616dfc4346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5616dfc4338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616d962b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616d958c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616d9586c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616d961d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616dc64c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616dc64c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616dc64c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616dc64c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616dc64c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616dc64c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616dc64c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616dc64c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616dc64c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616dc64c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5616de85145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616db5ad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616db5b85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616db363d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616db363d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616db364808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616db363944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616db363944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616db363944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5616dfc4594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5616dfc4e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5616dfc36529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5616dfc60fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee69b2c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616d958543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x5c,0xa,0x24,0x5c,0xa,0x24,0x6e,0xa,0x24,0x6e,0xa, Step #5: $\\\012$\\\012$n\012$n\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-82c40ece00c6b531efe880c5bb7a4c327161d854 Step #5: Base64: JFwKJFwKJG4KJG4K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1449 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 71400925 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558336916d60, 0x558336aff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558336aff720,0x5583389892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/82c40ece00c6b531efe880c5bb7a4c327161d854' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1670 processed earlier; will process 9306 files now Step #5: ==52198== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55832d4592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558333a94728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558333a7746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558333a7738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55832d45f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55832d3c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55832d3bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55832d451595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583304808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583304808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583304808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583304808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583304808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583304808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583304808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583304808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583304808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583304808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55833268545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55832f3e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55832f3ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55832f197d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55832f197d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55832f198808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55832f197944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55832f197944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55832f197944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558333a7994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558333a827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558333a6a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558333a94fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f41b2685082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55832d3b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x53,0x4d,0x2d,0x38,0x37,0xcd,0xbb,0x3e,0x3c,0x2f,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-37b93191172568c9aa2f6994fc46affb3f15deb0 Step #5: Base64: PFNNLTg3zbs+PC8+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1450 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 71883357 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5612cab2cd60, 0x5612cad1571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5612cad15720,0x5612ccb9f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/37b93191172568c9aa2f6994fc46affb3f15deb0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1671 processed earlier; will process 9305 files now Step #5: #1 pulse cov: 3557 ft: 3558 exec/s: 0 rss: 167Mb Step #5: ==52234== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612c166f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5612c7caa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5612c7c8d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5612c7c8d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612c1675652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5612c15d642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5612c15d0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612c1667595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612c46968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612c46968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612c46968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612c46968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612c46968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612c46968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612c46968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612c46968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612c46968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612c46968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5612c689b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5612c35f7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612c36025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612c33add3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612c33add3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612c33ae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612c33ad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612c33ad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612c33ad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5612c7c8f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5612c7c987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5612c7c80529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5612c7caafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4f362f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5612c15cf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x11,0xe4,0x88,0xb9,0xce,0x93,0x1,0x43,0x4f,0x1, Step #5: ID\021\344\210\271\316\223\001CO\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-b8ce22a121b125b5172a6f5739273e3efdd23715 Step #5: Base64: SUQR5Ii5zpMBQ08B Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1451 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 72396061 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e6f76f9d60, 0x55e6f78e271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e6f78e2720,0x55e6f976c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8ce22a121b125b5172a6f5739273e3efdd23715' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1673 processed earlier; will process 9303 files now Step #5: ==52270== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e6ee23c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e6f4877728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e6f485a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e6f485a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e6ee242652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e6ee1a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e6ee19dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e6ee234595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e6f12638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e6f12638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e6f12638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e6f12638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e6f12638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e6f12638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e6f12638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e6f12638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e6f12638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e6f12638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e6f346845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e6f01c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e6f01cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e6eff7ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e6eff7ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e6eff7b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e6eff7a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e6eff7a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e6eff7a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e6f485c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e6f48657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e6f484d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e6f4877fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd21b84d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e6ee19c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x1e,0x48,0x1e,0x1e,0x1e,0x1e,0xf6,0xc3, Step #5: ID3\004\036H\036\036\036\036\366\303 Step #5: artifact_prefix='./'; Test unit written to ./oom-64d732ec1054d4f9ede039f906e72aac771ad802 Step #5: Base64: SUQzBB5IHh4eHvbD Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1452 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 72895937 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e936a84d60, 0x55e936c6d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e936c6d720,0x55e938af72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64d732ec1054d4f9ede039f906e72aac771ad802' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1674 processed earlier; will process 9302 files now Step #5: #1 pulse cov: 3624 ft: 3625 exec/s: 0 rss: 165Mb Step #5: ==52306== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e92d5c72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e933c02728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e933be546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e933be538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e92d5cd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e92d52e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e92d528c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e92d5bf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9305ee8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9305ee8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9305ee8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9305ee8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9305ee8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9305ee8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9305ee8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9305ee8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9305ee8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9305ee8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e9327f345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e92f54f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e92f55a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e92f305d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e92f305d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e92f306808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e92f305944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e92f305944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e92f305944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e933be794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e933bf07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e933bd8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e933c02fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6d6823c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e92d52743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x3a,0x3f,0xe0,0xbd,0xb4,0xe0,0xbd,0xbb,0xe0,0xbc,0xb5, Step #5: A:?\340\275\264\340\275\273\340\274\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-3fd673d4715aca736824ce14161a160308098b49 Step #5: Base64: QTo/4L204L274Ly1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1453 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 73411527 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56153b708d60, 0x56153b8f171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56153b8f1720,0x56153d77b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3fd673d4715aca736824ce14161a160308098b49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1676 processed earlier; will process 9300 files now Step #5: ==52342== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56153224b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561538886728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56153886946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56153886938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561532251652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615321b242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615321acc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561532243595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615352728c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615352728c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615352728c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615352728c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615352728c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615352728c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615352728c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615352728c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615352728c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615352728c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56153747745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5615341d3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615341de5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561533f89d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561533f89d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561533f8a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561533f89944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561533f89944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561533f89944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56153886b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5615388747b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56153885c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561538886fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6b27d3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615321ab43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9, Step #5: \342\200\251\342\200\251\342\200\251\342\200\251 Step #5: artifact_prefix='./'; Test unit written to ./oom-0615b427120cc3094b64a926ef12ecbf35587982 Step #5: Base64: 4oCp4oCp4oCp4oCp Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1454 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 73878773 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559f0b34dd60, 0x559f0b53671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559f0b536720,0x559f0d3c02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0615b427120cc3094b64a926ef12ecbf35587982' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1677 processed earlier; will process 9299 files now Step #5: ==52378== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559f01e902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559f084cb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559f084ae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559f084ae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559f01e96652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559f01df742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559f01df1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559f01e88595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559f04eb78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559f04eb78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559f04eb78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559f04eb78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559f04eb78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559f04eb78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559f04eb78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559f04eb78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559f04eb78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559f04eb78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559f070bc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559f03e18578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559f03e235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559f03bced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559f03bced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559f03bcf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559f03bce944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559f03bce944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559f03bce944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559f084b094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559f084b97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559f084a1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559f084cbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe43520a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559f01df043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x43,0x46,0x46,0x63,0x6f,0x63,0x6f,0x6e,0x75,0x74, Step #5: = CFFcoconut Step #5: artifact_prefix='./'; Test unit written to ./oom-a60c74963c2cdfb5d52e151ed2f3c730b39b9f6d Step #5: Base64: PSBDRkZjb2NvbnV0 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1455 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 74356051 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e695553d60, 0x55e69573c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e69573c720,0x55e6975c62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a60c74963c2cdfb5d52e151ed2f3c730b39b9f6d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1678 processed earlier; will process 9298 files now Step #5: ==52414== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e68c0962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e6926d1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e6926b446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e6926b438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e68c09c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e68bffd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e68bff7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e68c08e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e68f0bd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e68f0bd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e68f0bd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e68f0bd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e68f0bd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e68f0bd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e68f0bd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e68f0bd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e68f0bd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e68f0bd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e6912c245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e68e01e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e68e0295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e68ddd4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e68ddd4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e68ddd5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e68ddd4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e68ddd4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e68ddd4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e6926b694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e6926bf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e6926a7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e6926d1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f50a4b93082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e68bff643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0xd8,0x83,0x50,0x7b,0xa,0x29,0x7b,0x39,0x31,0x36,0x7d, Step #5: (\330\203P{\012){916} Step #5: artifact_prefix='./'; Test unit written to ./oom-547a8b7c9f046f1ea78406d87f33b26665ccee9a Step #5: Base64: KNiDUHsKKXs5MTZ9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1456 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 74835308 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a65055cd60, 0x55a65074571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a650745720,0x55a6525cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/547a8b7c9f046f1ea78406d87f33b26665ccee9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1679 processed earlier; will process 9297 files now Step #5: ==52450== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a64709f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a64d6da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a64d6bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a64d6bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a6470a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a64700642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a647000c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a647097595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a64a0c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a64a0c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a64a0c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a64a0c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a64a0c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a64a0c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a64a0c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a64a0c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a64a0c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a64a0c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a64c2cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a649027578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a6490325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a648dddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a648dddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a648dde808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a648ddd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a648ddd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a648ddd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a64d6bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a64d6c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a64d6b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a64d6dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff930309082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a646fff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11,0x0,0x24,0x2a,0x11,0x0,0x24,0x2a,0x2a,0xe7,0x2a,0xe7, Step #5: \021\000$*\021\000$**\347*\347 Step #5: artifact_prefix='./'; Test unit written to ./oom-b72818753c12efc356406cb9afd7363867932fdf Step #5: Base64: EQAkKhEAJCoq5yrn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1457 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 75307106 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e5a6db4d60, 0x55e5a6f9d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e5a6f9d720,0x55e5a8e272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b72818753c12efc356406cb9afd7363867932fdf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1680 processed earlier; will process 9296 files now Step #5: ==52486== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e59d8f72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e5a3f32728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e5a3f1546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e5a3f1538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e59d8fd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e59d85e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e59d858c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e59d8ef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e5a091e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e5a091e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e5a091e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e5a091e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e5a091e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e5a091e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e5a091e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e5a091e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e5a091e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e5a091e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e5a2b2345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e59f87f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e59f88a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e59f635d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e59f635d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e59f636808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e59f635944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e59f635944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e59f635944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e5a3f1794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e5a3f207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e5a3f08529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e5a3f32fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f468f8be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e59d85743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x55,0x55,0xdb,0x82,0x39,0x2d,0x2b,0xdb,0x80,0x39,0x2d,0x3e, Step #5: UU\333\2029-+\333\2009-> Step #5: artifact_prefix='./'; Test unit written to ./oom-70338f060623301489baa46354a024dab2f4ccf9 Step #5: Base64: VVXbgjktK9uAOS0+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1458 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 75789748 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c11da72d60, 0x55c11dc5b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c11dc5b720,0x55c11fae52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70338f060623301489baa46354a024dab2f4ccf9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1681 processed earlier; will process 9295 files now Step #5: #1 pulse cov: 3682 ft: 3683 exec/s: 0 rss: 168Mb Step #5: ==52522== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c1145b52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c11abf0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c11abd346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c11abd338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c1145bb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c11451c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c114516c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c1145ad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1175dc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1175dc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1175dc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1175dc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1175dc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1175dc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1175dc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1175dc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1175dc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1175dc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c1197e145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c11653d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c1165485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c1162f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c1162f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c1162f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c1162f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c1162f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c1162f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c11abd594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c11abde7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c11abc6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c11abf0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc103d5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c11451543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40,0x7b,0x22,0x22,0x3a,0x2d,0x30,0x38,0x45,0x30,0x31,0x2e, Step #5: @{\"\":-08E01. Step #5: artifact_prefix='./'; Test unit written to ./oom-545b48dd33e76decda24753e14fbb4ebb20663db Step #5: Base64: QHsiIjotMDhFMDEu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1459 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 76306386 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c96cc5d60, 0x557c96eae71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c96eae720,0x557c98d382c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/545b48dd33e76decda24753e14fbb4ebb20663db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1683 processed earlier; will process 9293 files now Step #5: ==52558== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c8d8082d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c93e43728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c93e2646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c93e2638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c8d80e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c8d76f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c8d769c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c8d800595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c9082f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c9082f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c9082f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c9082f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c9082f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c9082f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c9082f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c9082f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c9082f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c9082f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c92a3445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c8f790578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c8f79b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c8f546d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c8f546d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c8f547808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c8f546944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c8f546944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c8f546944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c93e2894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c93e317b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c93e19529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c93e43fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4ceed36082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c8d76843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x3c,0x3f,0x3c,0x3f,0x3c,0x3f,0x3e,0x49,0x52,0x70, Step #5: IRp Step #5: artifact_prefix='./'; Test unit written to ./oom-76a3428fccd71174b0d2532df9e772b38b11b5b0 Step #5: Base64: PD88Pzw/PD8+SVJw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1460 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 76789660 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555622e01d60, 0x555622fea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555622fea720,0x555624e742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/76a3428fccd71174b0d2532df9e772b38b11b5b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1684 processed earlier; will process 9292 files now Step #5: #1 pulse cov: 11231 ft: 11232 exec/s: 0 rss: 184Mb Step #5: ==52594== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556199442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55561ff7f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55561ff6246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55561ff6238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55561994a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5556198ab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5556198a5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55561993c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55561c96b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55561c96b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55561c96b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55561c96b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55561c96b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55561c96b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55561c96b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55561c96b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55561c96b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55561c96b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55561eb7045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55561b8cc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55561b8d75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55561b682d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55561b682d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55561b683808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55561b682944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55561b682944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55561b682944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55561ff6494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55561ff6d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55561ff55529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55561ff7ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f50e56d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5556198a443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xba,0x9c,0xe0,0xba,0x9c,0xe0,0xba,0x9c,0xe0,0xba,0x9c, Step #5: \340\272\234\340\272\234\340\272\234\340\272\234 Step #5: artifact_prefix='./'; Test unit written to ./oom-68a112d69c13af2485e6bb27781a2d07f114782e Step #5: Base64: 4Lqc4Lqc4Lqc4Lqc Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1461 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 77341965 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5611fabd1d60, 0x5611fadba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5611fadba720,0x5611fcc442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/68a112d69c13af2485e6bb27781a2d07f114782e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1686 processed earlier; will process 9290 files now Step #5: ==52630== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5611f17142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5611f7d4f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5611f7d3246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5611f7d3238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5611f171a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5611f167b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5611f1675c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5611f170c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5611f473b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5611f473b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5611f473b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5611f473b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5611f473b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5611f473b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5611f473b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5611f473b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5611f473b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5611f473b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5611f694045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5611f369c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5611f36a75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5611f3452d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5611f3452d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5611f3453808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5611f3452944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5611f3452944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5611f3452944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5611f7d3494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5611f7d3d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5611f7d25529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5611f7d4ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8b0c35e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5611f167443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe0,0xbe,0x81,0xe0,0xbe,0x81,0xe0,0xbe,0x81, Step #5: ws:\340\276\201\340\276\201\340\276\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-68a8b23cfaee0179f2a77e412e748695f6611743 Step #5: Base64: d3M64L6B4L6B4L6B Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1462 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 77826276 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5563b6046d60, 0x5563b622f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5563b622f720,0x5563b80b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/68a8b23cfaee0179f2a77e412e748695f6611743' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1687 processed earlier; will process 9289 files now Step #5: ==52666== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5563acb892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5563b31c4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5563b31a746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5563b31a738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5563acb8f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5563acaf042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5563acaeac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5563acb81595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5563afbb08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5563afbb08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5563afbb08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5563afbb08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5563afbb08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5563afbb08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5563afbb08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5563afbb08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5563afbb08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5563afbb08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5563b1db545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5563aeb11578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5563aeb1c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5563ae8c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5563ae8c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5563ae8c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5563ae8c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5563ae8c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5563ae8c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5563b31a994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5563b31b27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5563b319a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5563b31c4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9669426082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5563acae943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x2d,0x3f,0x73,0x74,0x72,0x65,0x61,0x3f,0x6d,0x27, Step #5: \000\000-?strea?m' Step #5: artifact_prefix='./'; Test unit written to ./oom-24d416e7ed982a98dc081d063577e05b2b930f10 Step #5: Base64: AAAtP3N0cmVhP20n Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1463 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 78302525 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561daa9cfd60, 0x561daabb871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561daabb8720,0x561daca422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/24d416e7ed982a98dc081d063577e05b2b930f10' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1688 processed earlier; will process 9288 files now Step #5: ==52702== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561da15122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561da7b4d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561da7b3046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561da7b3038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561da1518652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561da147942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561da1473c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561da150a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561da45398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561da45398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561da45398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561da45398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561da45398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561da45398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561da45398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561da45398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561da45398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561da45398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561da673e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561da349a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561da34a55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561da3250d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561da3250d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561da3251808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561da3250944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561da3250944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561da3250944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561da7b3294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561da7b3b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561da7b23529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561da7b4dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe9c5eed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561da147243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0xaf,0xe2,0x80,0xaf,0xe2,0x80,0xaf,0xd4,0xaf,0xa, Step #5: \342\200\257\342\200\257\342\200\257\324\257\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-f2df2e73c5ab6c8f923c549d9fc7be07cfddc87b Step #5: Base64: 4oCv4oCv4oCv1K8K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1464 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 78775036 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ee5b414d60, 0x55ee5b5fd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ee5b5fd720,0x55ee5d4872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f2df2e73c5ab6c8f923c549d9fc7be07cfddc87b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1689 processed earlier; will process 9287 files now Step #5: ==52738== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ee51f572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ee58592728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ee5857546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ee5857538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ee51f5d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ee51ebe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ee51eb8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ee51f4f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ee54f7e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ee54f7e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ee54f7e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ee54f7e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ee54f7e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ee54f7e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ee54f7e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ee54f7e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ee54f7e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ee54f7e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ee5718345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ee53edf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ee53eea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ee53c95d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ee53c95d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ee53c96808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ee53c95944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ee53c95944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ee53c95944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ee5857794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ee585807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ee58568529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ee58592fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb270d69082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ee51eb743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x27,0x21,0x24,0x27,0x21,0x31,0x24,0x36,0x31,0x24,0x36, Step #5: $'!$'!1$61$6 Step #5: artifact_prefix='./'; Test unit written to ./oom-0f65d1be16f6d560846a04db2627ab8c9f5f71cd Step #5: Base64: JCchJCchMSQ2MSQ2 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1465 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 79251203 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5564af4f2d60, 0x5564af6db71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5564af6db720,0x5564b15652c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f65d1be16f6d560846a04db2627ab8c9f5f71cd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1690 processed earlier; will process 9286 files now Step #5: ==52774== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564a60352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564ac670728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564ac65346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564ac65338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564a603b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564a5f9c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564a5f96c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564a602d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564a905c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564a905c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564a905c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564a905c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564a905c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564a905c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564a905c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564a905c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564a905c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564a905c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564ab26145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5564a7fbd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564a7fc85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564a7d73d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564a7d73d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564a7d74808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564a7d73944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564a7d73944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564a7d73944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564ac65594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564ac65e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5564ac646529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564ac670fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f23cdcb6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564a5f9543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcc,0x9b,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xcc,0x9b,0xc8, Step #5: \314\233\000\000\000\000\000\000\000\314\233\310 Step #5: artifact_prefix='./'; Test unit written to ./oom-6e7f54b666453f0bee5e0850876c93acaf823d4e Step #5: Base64: zJsAAAAAAAAAzJvI Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1466 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 79728958 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f99a9fd60, 0x557f99c8871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f99c88720,0x557f9bb122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6e7f54b666453f0bee5e0850876c93acaf823d4e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1691 processed earlier; will process 9285 files now Step #5: ==52810== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f905e22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f96c1d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f96c0046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f96c0038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f905e8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f9054942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f90543c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f905da595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f936098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f936098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f936098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f936098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f936098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f936098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f936098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f936098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f936098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f936098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f9580e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f9256a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f925755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f92320d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f92320d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f92321808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f92320944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f92320944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f92320944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f96c0294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f96c0b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f96bf3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f96c1dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdd5a2d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f9054243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x2f,0x0,0x5a,0x0,0x2f,0x3f,0x0,0x5c,0x0,0x62,0x0, Step #5: \000/\000Z\000/?\000\\\000b\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-2af8fdcb695bb1dce536565b6dfa9e67b1d25065 Step #5: Base64: AC8AWgAvPwBcAGIA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1467 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 80201698 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d7d7e85d60, 0x55d7d806e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d7d806e720,0x55d7d9ef82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2af8fdcb695bb1dce536565b6dfa9e67b1d25065' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1692 processed earlier; will process 9284 files now Step #5: ==52846== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d7ce9c82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d7d5003728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d7d4fe646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d7d4fe638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d7ce9ce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d7ce92f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d7ce929c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d7ce9c0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d7d19ef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d7d19ef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d7d19ef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d7d19ef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d7d19ef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d7d19ef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d7d19ef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d7d19ef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d7d19ef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d7d19ef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d7d3bf445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d7d0950578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d7d095b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d7d0706d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d7d0706d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d7d0707808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d7d0706944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d7d0706944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d7d0706944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d7d4fe894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d7d4ff17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d7d4fd9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d7d5003fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f62c5d0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d7ce92843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11,0x23,0x22,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x22, Step #5: \021#\"\\P\\P\\P\\P\" Step #5: artifact_prefix='./'; Test unit written to ./oom-b1f979b4c279d165ce0b29521ee3373013ef1088 Step #5: Base64: ESMiXFBcUFxQXFAi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1468 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 80673442 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55be9e32cd60, 0x55be9e51571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55be9e515720,0x55bea039f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b1f979b4c279d165ce0b29521ee3373013ef1088' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1693 processed earlier; will process 9283 files now Step #5: ==52882== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55be94e6f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55be9b4aa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55be9b48d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55be9b48d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55be94e75652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55be94dd642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55be94dd0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55be94e67595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55be97e968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55be97e968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55be97e968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55be97e968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55be97e968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55be97e968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55be97e968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55be97e968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55be97e968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55be97e968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55be9a09b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55be96df7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55be96e025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55be96badd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55be96badd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55be96bae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55be96bad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55be96bad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55be96bad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55be9b48f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55be9b4987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55be9b480529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55be9b4aafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f26b34082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55be94dcf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0xd8,0xa5,0xdc,0xb9,0xd8,0xa5,0xdc,0xb8, Step #5: \016ws:\330\245\334\271\330\245\334\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-e9d37154b75e9850afffb1520f9fa91f78453317 Step #5: Base64: DndzOtil3LnYpdy4 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1469 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 81152444 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ac5f917d60, 0x55ac5fb0071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ac5fb00720,0x55ac6198a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e9d37154b75e9850afffb1520f9fa91f78453317' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1694 processed earlier; will process 9282 files now Step #5: ==52918== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ac5645a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ac5ca95728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ac5ca7846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ac5ca7838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ac56460652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ac563c142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ac563bbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ac56452595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ac594818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ac594818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ac594818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ac594818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ac594818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ac594818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ac594818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ac594818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ac594818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ac594818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ac5b68645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ac583e2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ac583ed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ac58198d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ac58198d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ac58199808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ac58198944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ac58198944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ac58198944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ac5ca7a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ac5ca837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ac5ca6b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ac5ca95fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f21492ae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ac563ba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0x41,0x47,0x3d,0x22,0x24,0x24,0x24,0x24,0x24,0x24,0x22, Step #5: TAG=\"$$$$$$\" Step #5: artifact_prefix='./'; Test unit written to ./oom-3a045bf86f4f7ca063f31446cab1213ae69f03a9 Step #5: Base64: VEFHPSIkJCQkJCQi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1470 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 81630633 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562887d97d60, 0x562887f8071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562887f80720,0x562889e0a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a045bf86f4f7ca063f31446cab1213ae69f03a9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1695 processed earlier; will process 9281 files now Step #5: #1 pulse cov: 3790 ft: 3791 exec/s: 0 rss: 166Mb Step #5: ==52954== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56287e8da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562884f15728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562884ef846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562884ef838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56287e8e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56287e84142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56287e83bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56287e8d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628819018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628819018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628819018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628819018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628819018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628819018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628819018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628819018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628819018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628819018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562883b0645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562880862578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56288086d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562880618d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562880618d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562880619808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562880618944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562880618944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562880618944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562884efa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562884f037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562884eeb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562884f15fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97c68e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56287e83a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x80,0x0,0xc,0xdb,0x80,0x39,0x39,0x39,0x38,0x4d,0x39, Step #5: \333\200\000\014\333\2009998M9 Step #5: artifact_prefix='./'; Test unit written to ./oom-dce4e385d18ddc178224901d739a503987744287 Step #5: Base64: 24AADNuAOTk5OE05 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1471 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 82147343 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b54d1d6d60, 0x55b54d3bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b54d3bf720,0x55b54f2492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dce4e385d18ddc178224901d739a503987744287' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1697 processed earlier; will process 9279 files now Step #5: #1 pulse cov: 6460 ft: 6460 exec/s: 0 rss: 178Mb Step #5: ==52990== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b543d192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b54a354728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b54a33746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b54a33738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b543d1f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b543c8042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b543c7ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b543d11595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b546d408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b546d408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b546d408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b546d408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b546d408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b546d408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b546d408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b546d408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b546d408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b546d408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b548f4545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b545ca1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b545cac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b545a57d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b545a57d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b545a58808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b545a57944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b545a57944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b545a57944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b54a33994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b54a3427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b54a32a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b54a354fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f454430c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b543c7943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x3a,0xd,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: r:\015- - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-4a13d9be6ef0ae395c9ed9582742b051749050d2 Step #5: Base64: cjoNLSAtIC0gLSAt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1472 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 82680495 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a9e8016d60, 0x55a9e81ff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a9e81ff720,0x55a9ea0892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a13d9be6ef0ae395c9ed9582742b051749050d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1699 processed earlier; will process 9277 files now Step #5: #1 pulse cov: 3709 ft: 3710 exec/s: 0 rss: 165Mb Step #5: #2 pulse cov: 4073 ft: 4351 exec/s: 0 rss: 166Mb Step #5: ==53026== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a9deb592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a9e5194728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a9e517746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a9e517738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a9deb5f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a9deac042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a9deabac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a9deb51595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a9e1b808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a9e1b808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a9e1b808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a9e1b808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a9e1b808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a9e1b808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a9e1b808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a9e1b808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a9e1b808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a9e1b808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a9e3d8545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a9e0ae1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a9e0aec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a9e0897d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a9e0897d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a9e0898808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a9e0897944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a9e0897944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a9e0897944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a9e517994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a9e51827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a9e516a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a9e5194fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa318a42082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a9deab943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x9,0x22,0xd6,0xa6,0xd6,0xa6,0xd6,0xa6,0xd6,0x59, Step #5: HU\011\"\326\246\326\246\326\246\326Y Step #5: artifact_prefix='./'; Test unit written to ./oom-e361527dc9cc9aef912ac813e4940423df4c333c Step #5: Base64: SFUJItam1qbWptZZ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1473 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 83234051 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5564529e9d60, 0x556452bd271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556452bd2720,0x556454a5c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e361527dc9cc9aef912ac813e4940423df4c333c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1702 processed earlier; will process 9274 files now Step #5: ==53062== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55644952c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55644fb67728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55644fb4a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55644fb4a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556449532652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55644949342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55644948dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556449524595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55644c5538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55644c5538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55644c5538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55644c5538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55644c5538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55644c5538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55644c5538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55644c5538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55644c5538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55644c5538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55644e75845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55644b4b4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55644b4bf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55644b26ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55644b26ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55644b26b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55644b26a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55644b26a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55644b26a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55644fb4c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55644fb557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55644fb3d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55644fb67fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25060b4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55644948c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x24,0x0,0x0,0x0,0x0,0x0,0x24,0x0,0x0,0x0,0x0, Step #5: \000$\000\000\000\000\000$\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-cb25ac7bf7f00351c1e764f12b0a6c91e64ec52c Step #5: Base64: ACQAAAAAACQAAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1474 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 83718836 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eeb6b63d60, 0x55eeb6d4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eeb6d4c720,0x55eeb8bd62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cb25ac7bf7f00351c1e764f12b0a6c91e64ec52c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1703 processed earlier; will process 9273 files now Step #5: ==53098== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eead6a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eeb3ce1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eeb3cc446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eeb3cc438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eead6ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eead60d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eead607c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eead69e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eeb06cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eeb06cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eeb06cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eeb06cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eeb06cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eeb06cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eeb06cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eeb06cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eeb06cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eeb06cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eeb28d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eeaf62e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eeaf6395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eeaf3e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eeaf3e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eeaf3e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eeaf3e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eeaf3e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eeaf3e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eeb3cc694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eeb3ccf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eeb3cb7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eeb3ce1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0ca0a7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eead60643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x1,0x67,0x67,0x67,0x67,0x67,0x67,0x6f, Step #5: ID3\003\001ggggggo Step #5: artifact_prefix='./'; Test unit written to ./oom-5e056f4be31aedc9191791811217140a55827c9a Step #5: Base64: SUQzAwFnZ2dnZ2dv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1475 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 84185796 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625858b1d60, 0x562585a9a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562585a9a720,0x5625879242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5e056f4be31aedc9191791811217140a55827c9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1704 processed earlier; will process 9272 files now Step #5: ==53134== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56257c3f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562582a2f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562582a1246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562582a1238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56257c3fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56257c35b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56257c355c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56257c3ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56257f41b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56257f41b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56257f41b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56257f41b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56257f41b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56257f41b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56257f41b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56257f41b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56257f41b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56257f41b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56258162045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56257e37c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56257e3875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56257e132d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56257e132d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56257e133808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56257e132944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56257e132944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56257e132944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562582a1494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562582a1d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562582a05529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562582a2ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4e13d86082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56257c35443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x23,0x24,0x1,0x3f,0x65,0x3f,0x0,0x2d,0x10,0x43,0x24, Step #5: ~#$\001?e?\000-\020C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-e8928f2690f946de8e26528e92d4f74f6ad41dd7 Step #5: Base64: fiMkAT9lPwAtEEMk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1476 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 84667173 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55716e038d60, 0x55716e22171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55716e221720,0x5571700ab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e8928f2690f946de8e26528e92d4f74f6ad41dd7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1705 processed earlier; will process 9271 files now Step #5: ==53170== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557164b7b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55716b1b6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55716b19946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55716b19938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557164b81652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557164ae242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557164adcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557164b73595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557167ba28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557167ba28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557167ba28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557167ba28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557167ba28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557167ba28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557167ba28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557167ba28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557167ba28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557167ba28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557169da745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557166b03578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557166b0e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571668b9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571668b9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571668ba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571668b9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571668b9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571668b9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55716b19b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55716b1a47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55716b18c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55716b1b6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2a08726082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557164adb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3, Step #5: ws:\340\275\263\340\275\263\340\275\263 Step #5: artifact_prefix='./'; Test unit written to ./oom-5a01f0915b5652af7744081c48fbab052c383048 Step #5: Base64: d3M64L2z4L2z4L2z Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1477 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 85145493 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56308a90dd60, 0x56308aaf671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56308aaf6720,0x56308c9802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5a01f0915b5652af7744081c48fbab052c383048' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1706 processed earlier; will process 9270 files now Step #5: ==53206== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5630814502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563087a8b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563087a6e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563087a6e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563081456652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5630813b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5630813b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563081448595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5630844778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5630844778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5630844778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5630844778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5630844778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5630844778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5630844778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5630844778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5630844778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5630844778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56308667c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5630833d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5630833e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56308318ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56308318ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56308318f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56308318e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56308318e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56308318e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563087a7094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563087a797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563087a61529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563087a8bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5627e2f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5630813b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3a,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x29,0x7c, Step #5: (?:$|$|$|$)| Step #5: artifact_prefix='./'; Test unit written to ./oom-638d066504356e1d606769469d0646fc27a6a72f Step #5: Base64: KD86JHwkfCR8JCl8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1478 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 85626981 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d324816d60, 0x55d3249ff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d3249ff720,0x55d3268892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/638d066504356e1d606769469d0646fc27a6a72f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1707 processed earlier; will process 9269 files now Step #5: ==53242== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d31b3592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d321994728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d32197746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d32197738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d31b35f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d31b2c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d31b2bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d31b351595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d31e3808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d31e3808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d31e3808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d31e3808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d31e3808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d31e3808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d31e3808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d31e3808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d31e3808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d31e3808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d32058545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d31d2e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d31d2ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d31d097d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d31d097d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d31d098808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d31d097944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d31d097944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d31d097944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d32197994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d3219827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d32196a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d321994fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0df9edc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d31b2b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x3c,0x3d,0x6d,0x3c,0x24,0x3c,0xff,0xff,0xff,0x1f,0x3c, Step #5: $<=m<$<\377\377\377\037< Step #5: artifact_prefix='./'; Test unit written to ./oom-f708fc9e4bda9ee9594fa03d6c0d3d70c9db2c9e Step #5: Base64: JDw9bTwkPP///x88 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1479 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 86106137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb68b46d60, 0x55fb68d2f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb68d2f720,0x55fb6abb92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f708fc9e4bda9ee9594fa03d6c0d3d70c9db2c9e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1708 processed earlier; will process 9268 files now Step #5: ==53278== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb5f6892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb65cc4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb65ca746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb65ca738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb5f68f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb5f5f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb5f5eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb5f681595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb626b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb626b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb626b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb626b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb626b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb626b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb626b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb626b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb626b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb626b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb648b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb61611578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb6161c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb613c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb613c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb613c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb613c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb613c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb613c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb65ca994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb65cb27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb65c9a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb65cc4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6d63b78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb5f5e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x9,0x3f,0x2a,0x27,0x3f,0x25,0x25,0x2a,0x27,0xff,0x0, Step #5: =\011?*'?%%*'\377\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-04fb5feb75299f2c472be339e9eacd3ddab790c5 Step #5: Base64: PQk/Kic/JSUqJ/8A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1480 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 86582658 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5584b5ae7d60, 0x5584b5cd071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5584b5cd0720,0x5584b7b5a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04fb5feb75299f2c472be339e9eacd3ddab790c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1709 processed earlier; will process 9267 files now Step #5: ==53314== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584ac62a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5584b2c65728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5584b2c4846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5584b2c4838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5584ac630652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5584ac59142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584ac58bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5584ac622595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584af6518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584af6518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584af6518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584af6518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584af6518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584af6518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584af6518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584af6518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584af6518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584af6518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5584b185645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5584ae5b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584ae5bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584ae368d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584ae368d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584ae369808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584ae368944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584ae368944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584ae368944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5584b2c4a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5584b2c537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5584b2c3b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5584b2c65fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdabbf2c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584ac58a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x2b,0x2b,0xa,0x6b,0x3d,0x22,0x71,0xa,0x2b,0x2b,0x2b, Step #5: +++\012k=\"q\012+++ Step #5: artifact_prefix='./'; Test unit written to ./oom-92e67356eb2785c2e07e1fd740b26cd73542dc4b Step #5: Base64: KysrCms9InEKKysr Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1481 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 87059102 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558b2729ad60, 0x558b2748371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558b27483720,0x558b2930d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92e67356eb2785c2e07e1fd740b26cd73542dc4b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1710 processed earlier; will process 9266 files now Step #5: ==53350== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b1dddd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558b24418728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558b243fb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558b243fb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b1dde3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b1dd4442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b1dd3ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b1ddd5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558b20e048c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558b20e048c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558b20e048c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558b20e048c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558b20e048c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558b20e048c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558b20e048c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558b20e048c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558b20e048c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558b20e048c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558b2300945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b1fd65578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b1fd705a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b1fb1bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b1fb1bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b1fb1c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b1fb1b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b1fb1b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b1fb1b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558b243fd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558b244067b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558b243ee529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558b24418fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f871ef26082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b1dd3d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x62,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x30,0xa, Step #5: \012b\"\"\"\"\"\"\"\"0\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-afc07de146d07dddeec3ce17428992ad5600b86b Step #5: Base64: CmIiIiIiIiIiIjAK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1482 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 87541478 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5636f509dd60, 0x5636f528671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5636f5286720,0x5636f71102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/afc07de146d07dddeec3ce17428992ad5600b86b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1711 processed earlier; will process 9265 files now Step #5: ==53386== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5636ebbe02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5636f221b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5636f21fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5636f21fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5636ebbe6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5636ebb4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5636ebb41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5636ebbd8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5636eec078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5636eec078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5636eec078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5636eec078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5636eec078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5636eec078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5636eec078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5636eec078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5636eec078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5636eec078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5636f0e0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5636edb68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5636edb735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5636ed91ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5636ed91ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5636ed91f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5636ed91e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5636ed91e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5636ed91e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5636f220094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5636f22097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5636f21f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5636f221bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f95f6336082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5636ebb4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x0,0x2,0x1,0x0,0x1,0x2,0x0,0x1,0x2,0x0,0x2, Step #5: \001\000\002\001\000\001\002\000\001\002\000\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-b111540f75c51a429ac3b2040cc6c85d14d24c45 Step #5: Base64: AQACAQABAgABAgAC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1483 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 88023286 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f6cd6aad60, 0x55f6cd89371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f6cd893720,0x55f6cf71d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b111540f75c51a429ac3b2040cc6c85d14d24c45' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1712 processed earlier; will process 9264 files now Step #5: ==53422== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f6c41ed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f6ca828728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f6ca80b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f6ca80b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f6c41f3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f6c415442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f6c414ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f6c41e5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f6c72148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f6c72148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f6c72148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f6c72148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f6c72148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f6c72148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f6c72148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f6c72148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f6c72148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f6c72148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f6c941945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f6c6175578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f6c61805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f6c5f2bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f6c5f2bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f6c5f2c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f6c5f2b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f6c5f2b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f6c5f2b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f6ca80d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f6ca8167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f6ca7fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f6ca828fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1cb8c32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f6c414d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0x22,0x8,0xa,0x6,0x2f,0x2f,0xc,0xe3,0x80,0x88, Step #5: \012\012\"\010\012\006//\014\343\200\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-fe837cadc64819056e5a67010f2236d9d6cfa481 Step #5: Base64: CgoiCAoGLy8M44CI Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1484 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 88500106 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e6d2c74d60, 0x55e6d2e5d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e6d2e5d720,0x55e6d4ce72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fe837cadc64819056e5a67010f2236d9d6cfa481' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1713 processed earlier; will process 9263 files now Step #5: ==53458== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e6c97b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e6cfdf2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e6cfdd546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e6cfdd538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e6c97bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e6c971e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e6c9718c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e6c97af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e6cc7de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e6cc7de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e6cc7de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e6cc7de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e6cc7de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e6cc7de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e6cc7de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e6cc7de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e6cc7de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e6cc7de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e6ce9e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e6cb73f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e6cb74a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e6cb4f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e6cb4f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e6cb4f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e6cb4f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e6cb4f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e6cb4f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e6cfdd794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e6cfde07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e6cfdc8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e6cfdf2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc59c198082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e6c971743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45,0x32,0x2e,0x31,0x31,0xea,0xa7,0x99,0x37,0x5c,0xab,0x5f, Step #5: E2.11\352\247\2317\\\253_ Step #5: artifact_prefix='./'; Test unit written to ./oom-1204bb6c1e3ee1544d1991db68e8a790f4a3084d Step #5: Base64: RTIuMTHqp5k3XKtf Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1485 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 88973233 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606321a4d60, 0x56063238d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56063238d720,0x5606342172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1204bb6c1e3ee1544d1991db68e8a790f4a3084d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1714 processed earlier; will process 9262 files now Step #5: ==53494== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560628ce72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56062f322728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56062f30546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56062f30538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560628ced652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560628c4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560628c48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560628cdf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56062bd0e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56062bd0e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56062bd0e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56062bd0e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56062bd0e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56062bd0e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56062bd0e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56062bd0e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56062bd0e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56062bd0e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56062df1345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56062ac6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56062ac7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56062aa25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56062aa25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56062aa26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56062aa25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56062aa25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56062aa25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56062f30794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56062f3107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56062f2f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56062f322fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9ea0031082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560628c4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x40,0x0,0x2f,0x0,0xf,0xf,0xd,0x42,0xf,0x24,0x5b, Step #5: $@\000/\000\017\017\015B\017$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-be4ab3eeae17bef96f2db141d7bfab7efad502a1 Step #5: Base64: JEAALwAPDw1CDyRb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1486 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 89452678 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f37e66ed60, 0x55f37e85771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f37e857720,0x55f3806e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be4ab3eeae17bef96f2db141d7bfab7efad502a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1715 processed earlier; will process 9261 files now Step #5: ==53530== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f3751b12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f37b7ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f37b7cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f37b7cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f3751b7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f37511842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f375112c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f3751a9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f3781d88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f3781d88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f3781d88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f3781d88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f3781d88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f3781d88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f3781d88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f3781d88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f3781d88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f3781d88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f37a3dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f377139578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f3771445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f376eefd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f376eefd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f376ef0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f376eef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f376eef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f376eef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f37b7d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f37b7da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f37b7c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f37b7ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc91405082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f37511143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x34,0x45,0x37,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f, Step #5: .4E7________ Step #5: artifact_prefix='./'; Test unit written to ./oom-471645fa00a7ef0a301a4020b9a15e38cfaf28b1 Step #5: Base64: LjRFN19fX19fX19f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1487 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 89931446 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e791a7d60, 0x559e7939071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e79390720,0x559e7b21a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/471645fa00a7ef0a301a4020b9a15e38cfaf28b1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1716 processed earlier; will process 9260 files now Step #5: ==53566== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e6fcea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e76325728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e7630846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e7630838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e6fcf0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e6fc5142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e6fc4bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e6fce2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e72d118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e72d118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e72d118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e72d118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e72d118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e72d118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e72d118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e72d118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e72d118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e72d118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e74f1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e71c72578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e71c7d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e71a28d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e71a28d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e71a29808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e71a28944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e71a28944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e71a28944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e7630a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e763137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e762fb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e76325fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f467d21f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e6fc4a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x3d,0x2d,0x2f,0x2a,0x47,0x49,0x4e,0xd6, Step #5: x---=-/*GIN\326 Step #5: artifact_prefix='./'; Test unit written to ./oom-b6a4a3b6466af92e54183e6c8e93186ce2a66222 Step #5: Base64: eC0tLT0tLypHSU7W Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1488 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 90408420 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cea3521d60, 0x55cea370a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cea370a720,0x55cea55942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6a4a3b6466af92e54183e6c8e93186ce2a66222' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1717 processed earlier; will process 9259 files now Step #5: ==53602== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ce9a0642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cea069f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cea068246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cea068238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ce9a06a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ce99fcb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ce99fc5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ce9a05c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ce9d08b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ce9d08b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ce9d08b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ce9d08b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ce9d08b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ce9d08b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ce9d08b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ce9d08b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ce9d08b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ce9d08b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ce9f29045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ce9bfec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ce9bff75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ce9bda2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ce9bda2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ce9bda3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ce9bda2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ce9bda2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ce9bda2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cea068494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cea068d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cea0675529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cea069ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb155536082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ce99fc443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x26,0xa,0x31,0x0,0x1e,0xd8,0xae,0x2d,0x0,0x0,0x25, Step #5: i&\0121\000\036\330\256-\000\000% Step #5: artifact_prefix='./'; Test unit written to ./oom-4002dc4e7a19df9ce4fe949cd4e56f8f9922e665 Step #5: Base64: aSYKMQAe2K4tAAAl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1489 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 90881126 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b840122d60, 0x55b84030b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b84030b720,0x55b8421952c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4002dc4e7a19df9ce4fe949cd4e56f8f9922e665' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1718 processed earlier; will process 9258 files now Step #5: ==53638== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b836c652d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b83d2a0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b83d28346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b83d28338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b836c6b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b836bcc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b836bc6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b836c5d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b839c8c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b839c8c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b839c8c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b839c8c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b839c8c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b839c8c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b839c8c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b839c8c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b839c8c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b839c8c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b83be9145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b838bed578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b838bf85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8389a3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8389a3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8389a4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8389a3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8389a3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8389a3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b83d28594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b83d28e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b83d276529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b83d2a0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe197fc1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b836bc543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5c,0x70,0x4c,0xdb,0x9a,0x2d,0xf1,0x8e,0x9d,0xa3,0x5d, Step #5: [\\pL\333\232-\361\216\235\243] Step #5: artifact_prefix='./'; Test unit written to ./oom-cedeb8b4baddf2c49df33d437af417c233d4f206 Step #5: Base64: W1xwTNuaLfGOnaNd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1490 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 91355389 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556e1470bd60, 0x556e148f471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556e148f4720,0x556e1677e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cedeb8b4baddf2c49df33d437af417c233d4f206' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1719 processed earlier; will process 9257 files now Step #5: ==53674== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556e0b24e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556e11889728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556e1186c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556e1186c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556e0b254652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556e0b1b542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556e0b1afc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556e0b246595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556e0e2758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556e0e2758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556e0e2758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556e0e2758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556e0e2758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556e0e2758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556e0e2758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556e0e2758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556e0e2758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556e0e2758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556e1047a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556e0d1d6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556e0d1e15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556e0cf8cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556e0cf8cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556e0cf8d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556e0cf8c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556e0cf8c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556e0cf8c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556e1186e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556e118777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556e1185f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556e11889fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd46de56082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556e0b1ae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x26,0x2b,0x73,0x63,0xd,0x74,0x20,0xe2,0x80,0xae,0xd2,0x84, Step #5: &+sc\015t \342\200\256\322\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-c1624df2e259e8dc7d703ec7277e3940e0cae85f Step #5: Base64: JitzYw10IOKArtKE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1491 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 91841791 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e317fded60, 0x55e3181c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e3181c7720,0x55e31a0512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c1624df2e259e8dc7d703ec7277e3940e0cae85f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1720 processed earlier; will process 9256 files now Step #5: ==53710== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e30eb212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e31515c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e31513f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e31513f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e30eb27652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e30ea8842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e30ea82c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e30eb19595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e311b488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e311b488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e311b488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e311b488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e311b488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e311b488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e311b488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e311b488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e311b488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e311b488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e313d4d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e310aa9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e310ab45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e31085fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e31085fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e310860808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e31085f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e31085f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e31085f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e31514194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e31514a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e315132529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e31515cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78bed4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e30ea8143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x22,0x22,0x22,0x40,0x27,0x26,0x11,0x22,0xbd,0x8e,0x28, Step #5: \"\"\"\"@'&\021\"\275\216( Step #5: artifact_prefix='./'; Test unit written to ./oom-36df83c384c53d74f0f69cf995d5d92dfefb7f19 Step #5: Base64: IiIiIkAnJhEivY4o Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1492 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 92328541 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561b1ba7ad60, 0x561b1bc6371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561b1bc63720,0x561b1daed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/36df83c384c53d74f0f69cf995d5d92dfefb7f19' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1721 processed earlier; will process 9255 files now Step #5: #1 pulse cov: 3895 ft: 3896 exec/s: 0 rss: 167Mb Step #5: ==53746== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561b125bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561b18bf8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561b18bdb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561b18bdb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561b125c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561b1252442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561b1251ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561b125b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561b155e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561b155e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561b155e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561b155e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561b155e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561b155e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561b155e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561b155e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561b155e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561b155e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561b177e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561b14545578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561b145505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561b142fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561b142fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561b142fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561b142fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561b142fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561b142fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561b18bdd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561b18be67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561b18bce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561b18bf8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f721cba4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561b1251d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe1,0x80,0x88,0xe1,0xa4,0xb9,0xe2,0x80,0x8c, Step #5: ws:\341\200\210\341\244\271\342\200\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-1862750965ebbdd406dbd26e3d67b999fac14107 Step #5: Base64: d3M64YCI4aS54oCM Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1493 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 92874081 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ffbd47ad60, 0x55ffbd66371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ffbd663720,0x55ffbf4ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1862750965ebbdd406dbd26e3d67b999fac14107' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1723 processed earlier; will process 9253 files now Step #5: #1 pulse cov: 3406 ft: 3407 exec/s: 0 rss: 168Mb Step #5: #2 pulse cov: 3847 ft: 4007 exec/s: 0 rss: 169Mb Step #5: ==53782== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ffb3fbd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ffba5f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ffba5db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ffba5db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ffb3fc3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ffb3f2442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ffb3f1ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ffb3fb5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ffb6fe48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ffb6fe48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ffb6fe48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ffb6fe48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ffb6fe48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ffb6fe48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ffb6fe48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ffb6fe48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ffb6fe48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ffb6fe48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ffb91e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ffb5f45578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ffb5f505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ffb5cfbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ffb5cfbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ffb5cfc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ffb5cfb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ffb5cfb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ffb5cfb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ffba5dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ffba5e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ffba5ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ffba5f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff55dd94082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ffb3f1d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xa2,0xdd,0x81,0xdf,0x80,0xdd,0x83,0xe2,0x80,0x8c,0x3f, Step #5: \336\242\335\201\337\200\335\203\342\200\214? Step #5: artifact_prefix='./'; Test unit written to ./oom-c62c4a196cac10dfedb73bf15fa633e40f80683e Step #5: Base64: 3qLdgd+A3YPigIw/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1494 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 93472167 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d3528bfd60, 0x55d352aa871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d352aa8720,0x55d3549322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c62c4a196cac10dfedb73bf15fa633e40f80683e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1727 processed earlier; will process 9249 files now Step #5: ==53818== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d3494022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d34fa3d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d34fa2046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d34fa2038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d349408652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d34936942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d349363c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d3493fa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d34c4298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d34c4298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d34c4298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d34c4298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d34c4298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d34c4298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d34c4298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d34c4298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d34c4298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d34c4298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d34e62e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d34b38a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d34b3955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d34b140d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d34b140d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d34b141808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d34b140944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d34b140944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d34b140944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d34fa2294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d34fa2b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d34fa13529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d34fa3dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f8b528082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d34936243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x8,0x4e,0x3f,0x3f,0x23,0x32,0x23,0x32,0x23,0x31,0x25, Step #5: %\010N??#2#2#1% Step #5: artifact_prefix='./'; Test unit written to ./oom-8fc73610f1333788ba04a670fe7539d8eafa1d74 Step #5: Base64: JQhOPz8jMiMyIzEl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1495 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 93955046 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55780bd34d60, 0x55780bf1d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55780bf1d720,0x55780dda72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8fc73610f1333788ba04a670fe7539d8eafa1d74' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1728 processed earlier; will process 9248 files now Step #5: ==53854== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5578028772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557808eb2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557808e9546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557808e9538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55780287d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5578027de42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5578027d8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55780286f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55780589e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55780589e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55780589e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55780589e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55780589e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55780589e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55780589e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55780589e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55780589e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55780589e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557807aa345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5578047ff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55780480a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5578045b5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5578045b5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5578045b6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5578045b5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5578045b5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5578045b5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557808e9794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557808ea07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557808e88529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557808eb2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91f90cc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5578027d743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x24,0x0,0x24,0x0,0x24,0x0,0x24,0x0,0x24,0x0, Step #5: $\000$\000$\000$\000$\000$\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4dc5494c6362417127d109f3952025a37332fd5c Step #5: Base64: JAAkACQAJAAkACQA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1496 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 94443617 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560eb6ef1d60, 0x560eb70da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560eb70da720,0x560eb8f642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4dc5494c6362417127d109f3952025a37332fd5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1729 processed earlier; will process 9247 files now Step #5: ==53890== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560eada342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560eb406f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560eb405246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560eb405238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560eada3a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ead99b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ead995c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560eada2c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560eb0a5b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560eb0a5b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560eb0a5b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560eb0a5b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560eb0a5b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560eb0a5b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560eb0a5b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560eb0a5b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560eb0a5b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560eb0a5b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560eb2c6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560eaf9bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560eaf9c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560eaf772d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560eaf772d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560eaf773808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560eaf772944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560eaf772944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560eaf772944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560eb405494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560eb405d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560eb4045529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560eb406ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3d5e85f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ead99443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xb7,0xba,0xcc,0x94,0xcd,0x88,0xcd,0x98, Step #5: ws:\357\267\272\314\224\315\210\315\230 Step #5: artifact_prefix='./'; Test unit written to ./oom-108186efa3ad62cee8992174273fc2cffcd551ad Step #5: Base64: d3M677e6zJTNiM2Y Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1497 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 94925982 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563a37927d60, 0x563a37b1071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563a37b10720,0x563a3999a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/108186efa3ad62cee8992174273fc2cffcd551ad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1730 processed earlier; will process 9246 files now Step #5: ==53926== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563a2e46a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563a34aa5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563a34a8846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563a34a8838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563a2e470652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563a2e3d142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563a2e3cbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563a2e462595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563a314918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563a314918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563a314918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563a314918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563a314918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563a314918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563a314918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563a314918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563a314918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563a314918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563a3369645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563a303f2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563a303fd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563a301a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563a301a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563a301a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563a301a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563a301a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563a301a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563a34a8a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563a34a937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563a34a7b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563a34aa5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7fba0b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563a2e3ca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4f,0x57,0x4e,0x45,0x52,0x3d,0x22,0x72,0x6f,0x6f,0x74,0x22, Step #5: OWNER=\"root\" Step #5: artifact_prefix='./'; Test unit written to ./oom-6110c655e3bef2eba5557e80243310a24eb57d70 Step #5: Base64: T1dORVI9InJvb3Qi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1498 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 95401776 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa256cad60, 0x55aa258b371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa258b3720,0x55aa2773d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6110c655e3bef2eba5557e80243310a24eb57d70' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1731 processed earlier; will process 9245 files now Step #5: ==53962== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa1c20d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa22848728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa2282b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa2282b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa1c213652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa1c17442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa1c16ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa1c205595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa1f2348c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa1f2348c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa1f2348c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa1f2348c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa1f2348c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa1f2348c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa1f2348c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa1f2348c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa1f2348c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa1f2348c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa2143945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa1e195578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa1e1a05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa1df4bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa1df4bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa1df4c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa1df4b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa1df4b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa1df4b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa2282d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa228367b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa2281e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa22848fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f14a15eb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa1c16d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xa8,0x8e,0xe0,0xa8,0x8e,0xe0,0xb5,0x8e,0xe0,0xa7,0xe0, Step #5: \340\250\216\340\250\216\340\265\216\340\247\340 Step #5: artifact_prefix='./'; Test unit written to ./oom-e8b3ee034c2ee7ab4c45dec25b50593aec9d3099 Step #5: Base64: 4KiO4KiO4LWO4Kfg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1499 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 95880291 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5593c5890d60, 0x5593c5a7971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593c5a79720,0x5593c79032c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e8b3ee034c2ee7ab4c45dec25b50593aec9d3099' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1732 processed earlier; will process 9244 files now Step #5: ==53998== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5593bc3d32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593c2a0e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593c29f146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593c29f138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5593bc3d9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5593bc33a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5593bc334c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5593bc3cb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5593bf3fa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5593bf3fa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5593bf3fa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5593bf3fa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5593bf3fa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5593bf3fa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5593bf3fa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5593bf3fa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5593bf3fa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5593bf3fa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593c15ff45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5593be35b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5593be3665a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5593be111d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5593be111d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5593be112808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5593be111944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5593be111944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5593be111944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593c29f394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593c29fc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593c29e4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593c2a0efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a75a48082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5593bc33343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6,0xa,0x2d,0x20,0x2d,0x20,0x20,0x2d,0x2d,0xa,0x20,0x2d, Step #5: \006\012- - --\012 - Step #5: artifact_prefix='./'; Test unit written to ./oom-1f4e617a715d641b8cb78b36b89f632557891e0f Step #5: Base64: BgotIC0gIC0tCiAt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1500 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 96363220 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555d27fc7d60, 0x555d281b071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555d281b0720,0x555d2a03a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f4e617a715d641b8cb78b36b89f632557891e0f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1733 processed earlier; will process 9243 files now Step #5: ==54034== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555d1eb0a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555d25145728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555d2512846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555d2512838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555d1eb10652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555d1ea7142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555d1ea6bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555d1eb02595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555d21b318c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555d21b318c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555d21b318c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555d21b318c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555d21b318c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555d21b318c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555d21b318c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555d21b318c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555d21b318c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555d21b318c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555d23d3645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555d20a92578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555d20a9d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555d20848d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555d20848d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555d20849808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555d20848944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555d20848944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555d20848944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555d2512a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555d251337b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555d2511b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555d25145fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb2c2a68082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555d1ea6a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80, Step #5: \341\232\200\341\232\200\341\232\200\341\232\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-1067bb8e0d49d73ea066068228d35798cadd5d62 Step #5: Base64: 4ZqA4ZqA4ZqA4ZqA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1501 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 96836351 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5597d878dd60, 0x5597d897671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5597d8976720,0x5597da8002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1067bb8e0d49d73ea066068228d35798cadd5d62' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1734 processed earlier; will process 9242 files now Step #5: ==54070== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5597cf2d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5597d590b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5597d58ee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5597d58ee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5597cf2d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5597cf23742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5597cf231c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5597cf2c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5597d22f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5597d22f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5597d22f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5597d22f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5597d22f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5597d22f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5597d22f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5597d22f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5597d22f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5597d22f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5597d44fc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5597d1258578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5597d12635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5597d100ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5597d100ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5597d100f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5597d100e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5597d100e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5597d100e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5597d58f094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597d58f97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597d58e1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5597d590bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1d35bf9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5597cf23043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x0,0x20,0x0,0x0,0x1e,0x1e,0x28,0x23,0x24,0x24, Step #5: = \000 \000\000\036\036(#$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-8b37551e94bd2e9c890504d843e17920387f30ca Step #5: Base64: PSAAIAAAHh4oIyQk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1502 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 97327366 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a37cffd60, 0x557a37ee871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a37ee8720,0x557a39d722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8b37551e94bd2e9c890504d843e17920387f30ca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1735 processed earlier; will process 9241 files now Step #5: ==54106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a2e8422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a34e7d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a34e6046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a34e6038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a2e848652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a2e7a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a2e7a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a2e83a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a318698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a318698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a318698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a318698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a318698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a318698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a318698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a318698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a318698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a318698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a33a6e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a307ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a307d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a30580d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a30580d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a30581808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a30580944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a30580944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a30580944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a34e6294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a34e6b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a34e53529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a34e7dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2881ed1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a2e7a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbf,0xbf,0xef,0xb7,0xbf,0xef,0xbd,0xbf,0xef,0xbf,0x95, Step #5: \357\277\277\357\267\277\357\275\277\357\277\225 Step #5: artifact_prefix='./'; Test unit written to ./oom-ff54cb2cf2074f654d56ae44ac69fcacf77c9ba1 Step #5: Base64: 77+/77e/772/77+V Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1503 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 97806197 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56267d0f8d60, 0x56267d2e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56267d2e1720,0x56267f16b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ff54cb2cf2074f654d56ae44ac69fcacf77c9ba1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1736 processed earlier; will process 9240 files now Step #5: ==54142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562673c3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56267a276728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56267a25946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56267a25938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562673c41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562673ba242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562673b9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562673c33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562676c628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562676c628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562676c628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562676c628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562676c628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562676c628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562676c628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562676c628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562676c628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562676c628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562678e6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562675bc3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562675bce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562675979d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562675979d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56267597a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562675979944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562675979944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562675979944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56267a25b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56267a2647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56267a24c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56267a276fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8377895082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562673b9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xa4,0xbe,0xe0,0xa4,0xbe,0xe0,0xa4,0xbe,0xe0,0xa4,0xbe, Step #5: \340\244\276\340\244\276\340\244\276\340\244\276 Step #5: artifact_prefix='./'; Test unit written to ./oom-7f3ce3dff7a469c938fbb55c797aec37e9a8ef94 Step #5: Base64: 4KS+4KS+4KS+4KS+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1504 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 98281742 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56082b6d0d60, 0x56082b8b971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56082b8b9720,0x56082d7432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f3ce3dff7a469c938fbb55c797aec37e9a8ef94' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1737 processed earlier; will process 9239 files now Step #5: #1 pulse cov: 3679 ft: 3680 exec/s: 0 rss: 166Mb Step #5: ==54178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608222132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56082884e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56082883146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56082883138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560822219652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56082217a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560822174c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56082220b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56082523a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56082523a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56082523a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56082523a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56082523a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56082523a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56082523a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56082523a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56082523a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56082523a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56082743f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56082419b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608241a65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560823f51d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560823f51d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560823f52808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560823f51944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560823f51944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560823f51944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56082883394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56082883c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560828824529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56082884efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd222f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56082217343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x21,0x49,0x49,0x24,0x49,0x2b,0x49,0x49,0x24,0x49,0x49, Step #5: \000!II$I+II$II Step #5: artifact_prefix='./'; Test unit written to ./oom-eddd2d73ab165aab142833005e52248a32adebdb Step #5: Base64: ACFJSSRJK0lJJElJ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1505 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 98806759 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561b9b476d60, 0x561b9b65f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561b9b65f720,0x561b9d4e92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eddd2d73ab165aab142833005e52248a32adebdb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1739 processed earlier; will process 9237 files now Step #5: ==54214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561b91fb92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561b985f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561b985d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561b985d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561b91fbf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561b91f2042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561b91f1ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561b91fb1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561b94fe08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561b94fe08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561b94fe08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561b94fe08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561b94fe08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561b94fe08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561b94fe08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561b94fe08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561b94fe08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561b94fe08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561b971e545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561b93f41578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561b93f4c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561b93cf7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561b93cf7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561b93cf8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561b93cf7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561b93cf7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561b93cf7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561b985d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561b985e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561b985ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561b985f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1681f40082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561b91f1943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x80,0xdb,0x80,0x2d,0x39,0x39,0x36,0x37,0x32,0x33,0x32, Step #5: \333\200\333\200-9967232 Step #5: artifact_prefix='./'; Test unit written to ./oom-16a875238d0d60aecb59fb3a96d73f098f22795f Step #5: Base64: 24DbgC05OTY3MjMy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1506 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 99286874 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c8c31fed60, 0x55c8c33e771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c8c33e7720,0x55c8c52712c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/16a875238d0d60aecb59fb3a96d73f098f22795f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1740 processed earlier; will process 9236 files now Step #5: ==54250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c8b9d412d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c8c037c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c8c035f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c8c035f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c8b9d47652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c8b9ca842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c8b9ca2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c8b9d39595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c8bcd688c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c8bcd688c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c8bcd688c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c8bcd688c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c8bcd688c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c8bcd688c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c8bcd688c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c8bcd688c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c8bcd688c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c8bcd688c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c8bef6d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c8bbcc9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c8bbcd45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c8bba7fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c8bba7fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c8bba80808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c8bba7f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c8bba7f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c8bba7f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c8c036194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c8c036a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c8c0352529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c8c037cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd00e128082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c8b9ca143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6,0x2e,0x20,0x2f,0xa,0x2e,0x20,0x32,0xde,0xad,0xbe,0xef, Step #5: \006. /\012. 2\336\255\276\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-315922eed0a17fc882e55181c64874585e840eca Step #5: Base64: Bi4gLwouIDLerb7v Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1507 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 99763654 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d74fffbd60, 0x55d7501e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d7501e4720,0x55d75206e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/315922eed0a17fc882e55181c64874585e840eca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1741 processed earlier; will process 9235 files now Step #5: ==54286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d746b3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d74d179728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d74d15c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d74d15c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d746b44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d746aa542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d746a9fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d746b36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d749b658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d749b658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d749b658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d749b658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d749b658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d749b658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d749b658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d749b658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d749b658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d749b658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d74bd6a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d748ac6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d748ad15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d74887cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d74887cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d74887d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d74887c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d74887c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d74887c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d74d15e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d74d1677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d74d14f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d74d179fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff28d4f8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d746a9e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x8,0xf0,0x91,0xa5,0x81,0xf0,0x91,0x9b,0x82, Step #5: \000\000\000\010\360\221\245\201\360\221\233\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-25f867ed24b4390d4cddc9a3986bd7dc3bb8e53d Step #5: Base64: AAAACPCRpYHwkZuC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1508 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 100241164 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561775610d60, 0x5617757f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5617757f9720,0x5617776832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/25f867ed24b4390d4cddc9a3986bd7dc3bb8e53d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1742 processed earlier; will process 9234 files now Step #5: #1 pulse cov: 3647 ft: 3648 exec/s: 0 rss: 167Mb Step #5: ==54322== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56176c1532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56177278e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56177277146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56177277138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56176c159652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56176c0ba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56176c0b4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56176c14b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56176f17a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56176f17a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56176f17a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56176f17a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56176f17a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56176f17a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56176f17a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56176f17a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56176f17a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56176f17a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56177137f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56176e0db578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56176e0e65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56176de91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56176de91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56176de92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56176de91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56176de91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56176de91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56177277394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56177277c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561772764529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56177278efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ca29bb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56176c0b343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x83,0x83,0xe3,0x83,0x8b,0xe3,0x83,0x83,0xe3,0x83,0x83, Step #5: \343\203\203\343\203\213\343\203\203\343\203\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-ac5797009421e913091a23b60577d3841017d5fd Step #5: Base64: 44OD44OL44OD44OD Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1509 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 100775798 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5618119e4d60, 0x561811bcd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561811bcd720,0x561813a572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ac5797009421e913091a23b60577d3841017d5fd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1744 processed earlier; will process 9232 files now Step #5: ==54358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5618085272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56180eb62728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56180eb4546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56180eb4538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56180852d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56180848e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561808488c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56180851f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56180b54e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56180b54e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56180b54e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56180b54e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56180b54e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56180b54e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56180b54e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56180b54e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56180b54e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56180b54e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56180d75345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56180a4af578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56180a4ba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56180a265d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56180a265d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56180a266808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56180a265944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56180a265944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56180a265944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56180eb4794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56180eb507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56180eb38529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56180eb62fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f75127e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56180848743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x53,0x3a,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xcd,0x85, Step #5: \016wS:\343\214\226\343\214\226\315\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-a954d77c5dd35cc2b3fbe224a5ca85fec9a71fe6 Step #5: Base64: DndTOuOMluOMls2F Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1510 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 101250181 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564af51d5d60, 0x564af53be71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564af53be720,0x564af72482c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a954d77c5dd35cc2b3fbe224a5ca85fec9a71fe6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1745 processed earlier; will process 9231 files now Step #5: ==54394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564aebd182d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564af2353728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564af233646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564af233638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564aebd1e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564aebc7f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564aebc79c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564aebd10595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564aeed3f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564aeed3f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564aeed3f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564aeed3f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564aeed3f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564aeed3f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564aeed3f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564aeed3f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564aeed3f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564aeed3f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564af0f4445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564aedca0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564aedcab5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564aeda56d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564aeda56d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564aeda57808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564aeda56944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564aeda56944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564aeda56944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564af233894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564af23417b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564af2329529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564af2353fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f410c91e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564aebc7843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x38,0x39,0x34,0x37,0x3a,0x31,0x2e,0x32,0x2d,0x2d,0x3e, Step #5: -8947:1.2--> Step #5: artifact_prefix='./'; Test unit written to ./oom-f4539c8179bfe5ba97ce758b1a2056b3415ae354 Step #5: Base64: LTg5NDc6MS4yLS0+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1511 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 101728044 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562752648d60, 0x56275283171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562752831720,0x5627546bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f4539c8179bfe5ba97ce758b1a2056b3415ae354' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1746 processed earlier; will process 9230 files now Step #5: ==54430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56274918b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56274f7c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56274f7a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56274f7a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562749191652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5627490f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5627490ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562749183595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56274c1b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56274c1b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56274c1b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56274c1b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56274c1b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56274c1b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56274c1b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56274c1b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56274c1b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56274c1b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56274e3b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56274b113578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56274b11e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56274aec9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56274aec9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56274aeca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56274aec9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56274aec9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56274aec9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56274f7ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56274f7b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56274f79c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56274f7c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5753358082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5627490eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x34,0x60,0x0,0x24,0xff,0x0,0x0,0x0,0xff,0xff,0x9c, Step #5: $4`\000$\377\000\000\000\377\377\234 Step #5: artifact_prefix='./'; Test unit written to ./oom-1a58d5fcbcdc01e05913f5f6d5e051de92cdba1e Step #5: Base64: JDRgACT/AAAA//+c Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1512 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 102214636 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cc8e2dad60, 0x55cc8e4c371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cc8e4c3720,0x55cc9034d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a58d5fcbcdc01e05913f5f6d5e051de92cdba1e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1747 processed earlier; will process 9229 files now Step #5: ==54466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cc84e1d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cc8b458728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cc8b43b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cc8b43b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cc84e23652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cc84d8442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cc84d7ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cc84e15595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cc87e448c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cc87e448c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cc87e448c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cc87e448c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cc87e448c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cc87e448c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cc87e448c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cc87e448c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cc87e448c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cc87e448c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cc8a04945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cc86da5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cc86db05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cc86b5bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cc86b5bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cc86b5c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cc86b5b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cc86b5b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cc86b5b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cc8b43d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cc8b4467b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cc8b42e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cc8b458fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcd9f8d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cc84d7d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x6c,0x6f,0x77,0x2d,0x63,0x6f,0x6e,0x74,0x72,0x6f,0x84, Step #5: flow-contro\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-6d673d1ec60bbf094935c46b02e4fd0a3f809406 Step #5: Base64: Zmxvdy1jb250cm+E Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1513 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 102694380 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b1c333d60, 0x563b1c51c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b1c51c720,0x563b1e3a62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6d673d1ec60bbf094935c46b02e4fd0a3f809406' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1748 processed earlier; will process 9228 files now Step #5: ==54502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563b12e762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b194b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b1949446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b1949438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563b12e7c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563b12ddd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563b12dd7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563b12e6e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b15e9d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b15e9d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b15e9d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b15e9d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b15e9d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b15e9d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b15e9d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b15e9d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b15e9d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b15e9d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b180a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b14dfe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b14e095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b14bb4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b14bb4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b14bb5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b14bb4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b14bb4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b14bb4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b1949694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b1949f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b19487529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b194b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f65ccfdd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563b12dd643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9e,0x80,0x82,0xf0,0x9e,0x80,0x82,0xf0,0x9e,0x80,0x82, Step #5: \360\236\200\202\360\236\200\202\360\236\200\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-6d09f8481a19b1666f26176864e2ac16c1177ea2 Step #5: Base64: 8J6AgvCegILwnoCC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1514 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 103171788 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555dcf9d9d60, 0x555dcfbc271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555dcfbc2720,0x555dd1a4c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6d09f8481a19b1666f26176864e2ac16c1177ea2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1749 processed earlier; will process 9227 files now Step #5: ==54538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555dc651c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555dccb57728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555dccb3a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555dccb3a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555dc6522652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555dc648342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555dc647dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555dc6514595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555dc95438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555dc95438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555dc95438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555dc95438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555dc95438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555dc95438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555dc95438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555dc95438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555dc95438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555dc95438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555dcb74845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555dc84a4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555dc84af5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555dc825ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555dc825ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555dc825b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555dc825a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555dc825a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555dc825a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555dccb3c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555dccb457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555dccb2d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555dccb57fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c90a41082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555dc647c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x84,0x91,0xe1,0x85,0xaa,0xe1,0x84,0x91,0xe1,0x85,0xb0, Step #5: \341\204\221\341\205\252\341\204\221\341\205\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-3d2c569c4831d6674f484b6b93eaccbd7411a2b7 Step #5: Base64: 4YSR4YWq4YSR4YWw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1515 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 103653800 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587089cad60, 0x558708bb371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558708bb3720,0x55870aa3d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3d2c569c4831d6674f484b6b93eaccbd7411a2b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1750 processed earlier; will process 9226 files now Step #5: ==54574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5586ff50d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558705b48728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558705b2b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558705b2b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5586ff513652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5586ff47442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5586ff46ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5586ff505595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5587025348c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5587025348c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5587025348c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5587025348c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5587025348c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5587025348c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5587025348c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5587025348c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5587025348c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5587025348c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55870473945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558701495578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587014a05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55870124bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55870124bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55870124c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55870124b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55870124b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55870124b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558705b2d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558705b367b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558705b1e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558705b48fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b628cc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5586ff46d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2a,0xe2,0x80,0xa8,0x2a,0x2a,0x2a,0xe2,0x80,0xa8,0x2a,0x2a, Step #5: *\342\200\250***\342\200\250** Step #5: artifact_prefix='./'; Test unit written to ./oom-e4363e1052b7b06cd569919625c9bed07d890526 Step #5: Base64: KuKAqCoqKuKAqCoq Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1516 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 104125537 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558e9ebdbd60, 0x558e9edc471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558e9edc4720,0x558ea0c4e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e4363e1052b7b06cd569919625c9bed07d890526' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1751 processed earlier; will process 9225 files now Step #5: ==54610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558e9571e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558e9bd59728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558e9bd3c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558e9bd3c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558e95724652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558e9568542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558e9567fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558e95716595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558e987458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558e987458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558e987458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558e987458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558e987458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558e987458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558e987458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558e987458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558e987458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558e987458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558e9a94a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558e976a6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558e976b15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558e9745cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558e9745cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558e9745d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558e9745c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558e9745c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558e9745c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558e9bd3e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558e9bd477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558e9bd2f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558e9bd59fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f31e89e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558e9567e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8, Step #5: \342\200\250\342\200\250\342\200\250\342\200\250 Step #5: artifact_prefix='./'; Test unit written to ./oom-df5e8eca92f7990b1590ff37fd09bf455a317d41 Step #5: Base64: 4oCo4oCo4oCo4oCo Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1517 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 104593842 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56239a671d60, 0x56239a85a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56239a85a720,0x56239c6e42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/df5e8eca92f7990b1590ff37fd09bf455a317d41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1752 processed earlier; will process 9224 files now Step #5: ==54646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5623911b42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5623977ef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5623977d246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5623977d238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5623911ba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56239111b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562391115c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5623911ac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623941db8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623941db8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623941db8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623941db8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623941db8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623941db8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623941db8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623941db8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623941db8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623941db8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5623963e045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56239313c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5623931475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562392ef2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562392ef2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562392ef3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562392ef2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562392ef2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562392ef2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5623977d494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623977dd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5623977c5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5623977effa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0a17335082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56239111443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x24,0x60,0x5b,0xc,0x6a,0x5d,0xdf,0xff,0xdf,0x70,0x73, Step #5: `$`[\014j]\337\377\337ps Step #5: artifact_prefix='./'; Test unit written to ./oom-6ebbb0a3c098d6ae973bf1a76b04b2294ad0feb7 Step #5: Base64: YCRgWwxqXd//33Bz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1518 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 105196301 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565292357d60, 0x56529254071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565292540720,0x5652943ca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ebbb0a3c098d6ae973bf1a76b04b2294ad0feb7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1753 processed earlier; will process 9223 files now Step #5: ==54682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565288e9a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56528f4d5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56528f4b846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56528f4b838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565288ea0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565288e0142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565288dfbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565288e92595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56528bec18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56528bec18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56528bec18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56528bec18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56528bec18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56528bec18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56528bec18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56528bec18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56528bec18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56528bec18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56528e0c645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56528ae22578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56528ae2d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56528abd8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56528abd8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56528abd9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56528abd8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56528abd8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56528abd8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56528f4ba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56528f4c37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56528f4ab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56528f4d5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe5b6b59082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565288dfa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x23,0x7b,0x30,0x7d,0x29,0x7b,0xe2,0x80,0xad,0x31,0x7d, Step #5: (#{0}){\342\200\2551} Step #5: artifact_prefix='./'; Test unit written to ./oom-8a473f7a6e876a5d7eaf3a74a0fb9ee2ca12f0b7 Step #5: Base64: KCN7MH0pe+KArTF9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1519 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 105682210 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0e9134d60, 0x55c0e931d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c0e931d720,0x55c0eb1a72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8a473f7a6e876a5d7eaf3a74a0fb9ee2ca12f0b7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1754 processed earlier; will process 9222 files now Step #5: ==54718== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0dfc772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c0e62b2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c0e629546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c0e629538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c0dfc7d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c0dfbde42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c0dfbd8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c0dfc6f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c0e2c9e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c0e2c9e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c0e2c9e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c0e2c9e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c0e2c9e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c0e2c9e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c0e2c9e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c0e2c9e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c0e2c9e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c0e2c9e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c0e4ea345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c0e1bff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c0e1c0a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c0e19b5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c0e19b5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c0e19b6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c0e19b5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c0e19b5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c0e19b5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c0e629794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0e62a07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0e6288529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c0e62b2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5511282082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c0dfbd743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x40,0x3f,0xf3,0xa0,0x81,0x92,0x3d,0x3f,0x3f,0x3f,0x3d, Step #5: '@?\363\240\201\222=???= Step #5: artifact_prefix='./'; Test unit written to ./oom-817cd278d8f028c36f01a46aaf0c9dd81a4540f9 Step #5: Base64: J0A/86CBkj0/Pz89 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1520 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 106172232 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc4f153d60, 0x55fc4f33c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc4f33c720,0x55fc511c62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/817cd278d8f028c36f01a46aaf0c9dd81a4540f9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1755 processed earlier; will process 9221 files now Step #5: #1 pulse cov: 3808 ft: 3809 exec/s: 0 rss: 167Mb Step #5: ==54754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc45c962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc4c2d1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc4c2b446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc4c2b438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc45c9c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc45bfd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc45bf7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc45c8e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc48cbd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc48cbd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc48cbd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc48cbd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc48cbd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc48cbd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc48cbd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc48cbd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc48cbd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc48cbd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc4aec245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc47c1e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc47c295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc479d4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc479d4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc479d5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc479d4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc479d4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc479d4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc4c2b694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc4c2bf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc4c2a7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc4c2d1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6cefbe6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc45bf643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xbe,0x9f,0xef,0xbe,0x9f,0xef,0xbe,0x9f, Step #5: ws:\357\276\237\357\276\237\357\276\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-c8423266b4ed325eedb3b1dde27ae751ae7c4af0 Step #5: Base64: d3M6776f776f776f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1521 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 106744590 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b22aac4d60, 0x55b22acad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b22acad720,0x55b22cb372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c8423266b4ed325eedb3b1dde27ae751ae7c4af0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1757 processed earlier; will process 9219 files now Step #5: ==54790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b2216072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b227c42728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b227c2546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b227c2538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b22160d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b22156e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b221568c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b2215ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b22462e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b22462e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b22462e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b22462e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b22462e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b22462e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b22462e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b22462e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b22462e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b22462e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b22683345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b22358f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b22359a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b223345d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b223345d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b223346808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b223345944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b223345944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b223345944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b227c2794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b227c307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b227c18529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b227c42fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f53cafe3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b22156743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x39,0x32,0x31,0x33,0x2c,0x31,0xa,0x2d,0x34,0x2c,0x38, Step #5: -9213,1\012-4,8 Step #5: artifact_prefix='./'; Test unit written to ./oom-5fd6c88ec45ba0c157fd491962e483ac25e2483a Step #5: Base64: LTkyMTMsMQotNCw4 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1522 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 107257140 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605f1318d60, 0x5605f150171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605f1501720,0x5605f338b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5fd6c88ec45ba0c157fd491962e483ac25e2483a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1758 processed earlier; will process 9218 files now Step #5: ==54826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605e7e5b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605ee496728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605ee47946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605ee47938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605e7e61652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605e7dc242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605e7dbcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605e7e53595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605eae828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605eae828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605eae828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605eae828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605eae828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605eae828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605eae828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605eae828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605eae828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605eae828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605ed08745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605e9de3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605e9dee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605e9b99d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605e9b99d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605e9b9a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605e9b99944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605e9b99944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605e9b99944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605ee47b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605ee4847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605ee46c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605ee496fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f311e20d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605e7dbb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x7e,0x7e,0x3c,0xdb,0xbe,0x7e,0x7e,0x7e,0x12,0x25,0x73, Step #5: ~~~<\333\276~~~\022%s Step #5: artifact_prefix='./'; Test unit written to ./oom-f26a0dd23a86e83bc88a0280fd2fabeec2f31b2e Step #5: Base64: fn5+PNu+fn5+EiVz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1523 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 107782050 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d7a2726d60, 0x55d7a290f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d7a290f720,0x55d7a47992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f26a0dd23a86e83bc88a0280fd2fabeec2f31b2e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1759 processed earlier; will process 9217 files now Step #5: ==54862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d7992692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d79f8a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d79f88746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d79f88738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d79926f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d7991d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d7991cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d799261595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d79c2908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d79c2908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d79c2908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d79c2908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d79c2908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d79c2908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d79c2908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d79c2908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d79c2908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d79c2908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d79e49545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d79b1f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d79b1fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d79afa7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d79afa7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d79afa8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d79afa7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d79afa7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d79afa7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d79f88994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d79f8927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d79f87a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d79f8a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f66c527a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d7991c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x2,0x0,0x0,0x29,0x1,0x0,0x0,0x29,0x55,0xdc,0x83, Step #5: 6\002\000\000)\001\000\000)U\334\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-af35043e036250fc66016ad668d56ecaa387ecc8 Step #5: Base64: NgIAACkBAAApVdyD Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1524 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 108280216 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559cd5b9dd60, 0x559cd5d8671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559cd5d86720,0x559cd7c102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af35043e036250fc66016ad668d56ecaa387ecc8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1760 processed earlier; will process 9216 files now Step #5: ==54898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559ccc6e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559cd2d1b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559cd2cfe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559cd2cfe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559ccc6e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559ccc64742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559ccc641c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559ccc6d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ccf7078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ccf7078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ccf7078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ccf7078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ccf7078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ccf7078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ccf7078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ccf7078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ccf7078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ccf7078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559cd190c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559cce668578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559cce6735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559cce41ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559cce41ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559cce41f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559cce41e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559cce41e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559cce41e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559cd2d0094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559cd2d097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559cd2cf1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559cd2d1bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f273504d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559ccc64043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x45,0x3e,0x3c,0x3f,0x72,0xcc,0xb6,0x3f,0x3e,0x3c,0x3e, Step #5: <> Step #5: artifact_prefix='./'; Test unit written to ./oom-738d2907abc9e879d9f65ecf1a4700fd842d07c4 Step #5: Base64: PEU+PD9yzLY/Pjw+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1525 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 108788103 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561190fb3d60, 0x56119119c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56119119c720,0x5611930262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/738d2907abc9e879d9f65ecf1a4700fd842d07c4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1761 processed earlier; will process 9215 files now Step #5: ==54934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561187af62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56118e131728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56118e11446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56118e11438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561187afc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561187a5d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561187a57c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561187aee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56118ab1d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56118ab1d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56118ab1d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56118ab1d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56118ab1d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56118ab1d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56118ab1d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56118ab1d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56118ab1d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56118ab1d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56118cd2245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561189a7e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561189a895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561189834d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561189834d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561189835808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561189834944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561189834944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561189834944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56118e11694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56118e11f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56118e107529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56118e131fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe16ad8b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561187a5643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x76,0xe0,0xb8,0xb8,0x3f,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-0a528dbf6af7937acb4a546b2338820a90a2a22f Step #5: Base64: PD94bWwgduC4uD8+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1526 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 109274354 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1f73abd60, 0x55e1f759471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1f7594720,0x55e1f941e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0a528dbf6af7937acb4a546b2338820a90a2a22f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1762 processed earlier; will process 9214 files now Step #5: ==54970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1edeee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1f4529728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1f450c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1f450c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1edef4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1ede5542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1ede4fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1edee6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1f0f158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1f0f158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1f0f158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1f0f158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1f0f158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1f0f158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1f0f158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1f0f158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1f0f158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1f0f158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1f311a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1efe76578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1efe815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1efc2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1efc2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1efc2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1efc2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1efc2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1efc2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1f450e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1f45177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1f44ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1f4529fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa598572082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1ede4e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0x8c,0xe,0x27,0x9,0x0,0xa,0xa,0xe,0x27,0x9,0x33, Step #5: \334\214\016'\011\000\012\012\016'\0113 Step #5: artifact_prefix='./'; Test unit written to ./oom-1b4ce532f291bfffa855988d80ab6afa405c5a16 Step #5: Base64: 3IwOJwkACgoOJwkz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1527 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 109754153 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0ee31fd60, 0x55c0ee50871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c0ee508720,0x55c0f03922c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1b4ce532f291bfffa855988d80ab6afa405c5a16' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1763 processed earlier; will process 9213 files now Step #5: ==55006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0e4e622d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c0eb49d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c0eb48046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c0eb48038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c0e4e68652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c0e4dc942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c0e4dc3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c0e4e5a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c0e7e898c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c0e7e898c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c0e7e898c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c0e7e898c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c0e7e898c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c0e7e898c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c0e7e898c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c0e7e898c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c0e7e898c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c0e7e898c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c0ea08e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c0e6dea578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c0e6df55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c0e6ba0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c0e6ba0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c0e6ba1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c0e6ba0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c0e6ba0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c0e6ba0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c0eb48294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0eb48b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0eb473529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c0eb49dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbaf8c90082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c0e4dc243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x69,0x65,0x69,0x64,0x3e,0x3c,0x61,0x65,0x69,0x64,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-1160d9d0f3e84491937c4121f80cb888be276ae9 Step #5: Base64: PGllaWQ+PGFlaWQ+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1528 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 110220573 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b086efd60, 0x563b088d871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b088d8720,0x563b0a7622c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1160d9d0f3e84491937c4121f80cb888be276ae9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1764 processed earlier; will process 9212 files now Step #5: #1 pulse cov: 3822 ft: 3823 exec/s: 0 rss: 166Mb Step #5: ==55042== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563aff2322d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b0586d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b0585046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b0585038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563aff238652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563aff19942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563aff193c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563aff22a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b022598c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b022598c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b022598c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b022598c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b022598c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b022598c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b022598c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b022598c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b022598c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b022598c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b0445e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b011ba578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b011c55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b00f70d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b00f70d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b00f71808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b00f70944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b00f70944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b00f70944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b0585294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b0585b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b05843529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b0586dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb38b0bb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563aff19243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x81,0x88,0xf3,0xaa,0xaa,0xaa,0xf3,0xaa,0xaa,0xaa, Step #5: \363\240\201\210\363\252\252\252\363\252\252\252 Step #5: artifact_prefix='./'; Test unit written to ./oom-6a86c4de2baed0a84206bec3ce553e29f04f2c49 Step #5: Base64: 86CBiPOqqqrzqqqq Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1529 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 110741879 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b70b7b3d60, 0x55b70b99c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b70b99c720,0x55b70d8262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6a86c4de2baed0a84206bec3ce553e29f04f2c49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1766 processed earlier; will process 9210 files now Step #5: #1 pulse cov: 3706 ft: 3707 exec/s: 0 rss: 167Mb Step #5: ==55078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7022f62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b708931728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b70891446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b70891438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7022fc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b70225d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b702257c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7022ee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b70531d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b70531d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b70531d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b70531d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b70531d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b70531d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b70531d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b70531d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b70531d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b70531d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b70752245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b70427e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7042895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b704034d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b704034d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b704035808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b704034944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b704034944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b704034944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b70891694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b70891f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b708907529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b708931fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f45511f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b70225643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x66,0x6c,0x6f,0x61,0x74,0x9,0x2e,0x34,0x39,0x39,0x0, Step #5: .float\011.499\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-09abfbf51b524a47aee4ef6c6a6338341e4fce89 Step #5: Base64: LmZsb2F0CS40OTkA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1530 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 111257154 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557759544d60, 0x55775972d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55775972d720,0x55775b5b72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/09abfbf51b524a47aee4ef6c6a6338341e4fce89' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1768 processed earlier; will process 9208 files now Step #5: ==55114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5577500872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5577566c2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5577566a546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5577566a538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55775008d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55774ffee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55774ffe8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55775007f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5577530ae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5577530ae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5577530ae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5577530ae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5577530ae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5577530ae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5577530ae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5577530ae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5577530ae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5577530ae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5577552b345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55775200f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55775201a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557751dc5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557751dc5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557751dc6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557751dc5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557751dc5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557751dc5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5577566a794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5577566b07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557756698529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5577566c2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fec35e14082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55774ffe743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40,0x24,0x28,0x72,0x29,0x40,0x24,0x14,0xa,0x0,0x0,0x0, Step #5: @$(r)@$\024\012\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0d2c37ad446227ad17055ceecc53707464d7b17a Step #5: Base64: QCQocilAJBQKAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1531 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 111753419 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564240c4ad60, 0x564240e3371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564240e33720,0x564242cbd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0d2c37ad446227ad17055ceecc53707464d7b17a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1769 processed earlier; will process 9207 files now Step #5: #1 pulse cov: 3790 ft: 3791 exec/s: 0 rss: 169Mb Step #5: ==55150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56423778d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56423ddc8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56423ddab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56423ddab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564237793652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5642376f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5642376eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564237785595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56423a7b48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56423a7b48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56423a7b48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56423a7b48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56423a7b48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56423a7b48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56423a7b48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56423a7b48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56423a7b48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56423a7b48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56423c9b945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564239715578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642397205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5642394cbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5642394cbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5642394cc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5642394cb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5642394cb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5642394cb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56423ddad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56423ddb67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56423dd9e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56423ddc8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e66433082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5642376ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x5c,0x75,0x7b,0x43,0x7d,0x5c,0x75,0x7b,0x42,0x7d,0x42, Step #5: '\\u{C}\\u{B}B Step #5: artifact_prefix='./'; Test unit written to ./oom-fa10b1bbf5d683a2a680811ff7dd06eec8bfc08f Step #5: Base64: J1x1e0N9XHV7Qn1C Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1532 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 112271287 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c23b470d60, 0x55c23b65971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c23b659720,0x55c23d4e32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fa10b1bbf5d683a2a680811ff7dd06eec8bfc08f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1771 processed earlier; will process 9205 files now Step #5: ==55186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c231fb32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c2385ee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c2385d146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c2385d138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c231fb9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c231f1a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c231f14c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c231fab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c234fda8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c234fda8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c234fda8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c234fda8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c234fda8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c234fda8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c234fda8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c234fda8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c234fda8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c234fda8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c2371df45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c233f3b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c233f465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c233cf1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c233cf1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c233cf2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c233cf1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c233cf1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c233cf1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c2385d394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c2385dc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c2385c4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c2385eefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28ec877082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c231f1343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0xa,0x3c,0xa,0x3a,0x3d,0x3f,0x3f,0x7a,0x3f,0x3f,0x3d, Step #5: \016\012<\012:=??z??= Step #5: artifact_prefix='./'; Test unit written to ./oom-610e9ef1a1ad40b62f060f31efc8387cc9246c32 Step #5: Base64: Dgo8Cjo9Pz96Pz89 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1533 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 112751094 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c810348d60, 0x55c81053171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c810531720,0x55c8123bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/610e9ef1a1ad40b62f060f31efc8387cc9246c32' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1772 processed earlier; will process 9204 files now Step #5: ==55222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c806e8b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c80d4c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c80d4a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c80d4a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c806e91652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c806df242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c806decc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c806e83595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c809eb28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c809eb28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c809eb28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c809eb28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c809eb28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c809eb28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c809eb28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c809eb28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c809eb28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c809eb28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c80c0b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c808e13578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c808e1e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c808bc9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c808bc9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c808bca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c808bc9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c808bc9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c808bc9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c80d4ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c80d4b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c80d49c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c80d4c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8668f77082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c806deb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x6b,0x6b,0x68,0x6b,0x6b,0x6b,0x73,0x68,0x65,0x32,0xff,0x54, Step #5: 2kkhkkkshe2\377T Step #5: artifact_prefix='./'; Test unit written to ./oom-3659d4e4ac67044fd1404c6d73a3b543dff014ab Step #5: Base64: MmtraGtra3NoZTL/VA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1534 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 113233533 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f822f5d60, 0x557f824de71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f824de720,0x557f843682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3659d4e4ac67044fd1404c6d73a3b543dff014ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1773 processed earlier; will process 9203 files now Step #5: ==55258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f78e382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f7f473728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f7f45646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f7f45638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f78e3e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f78d9f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f78d99c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f78e30595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f7be5f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f7be5f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f7be5f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f7be5f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f7be5f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f7be5f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f7be5f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f7be5f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f7be5f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f7be5f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f7e06445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f7adc0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f7adcb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f7ab76d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f7ab76d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f7ab77808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f7ab76944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f7ab76944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f7ab76944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f7f45894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f7f4617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f7f449529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f7f473fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd6873c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f78d9843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x21,0x50,0x61,0x67,0x65,0x4d,0x65,0x64,0x69,0x61,0x3a,0x34, Step #5: %!PageMedia:4 Step #5: artifact_prefix='./'; Test unit written to ./oom-a16bbd0d904b0c89e6a61ae56c84a463a706d524 Step #5: Base64: JSFQYWdlTWVkaWE6NA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1535 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 113712397 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56142e056d60, 0x56142e23f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56142e23f720,0x5614300c92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a16bbd0d904b0c89e6a61ae56c84a463a706d524' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1774 processed earlier; will process 9202 files now Step #5: ==55294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561424b992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56142b1d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56142b1b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56142b1b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561424b9f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561424b0042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561424afac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561424b91595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561427bc08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561427bc08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561427bc08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561427bc08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561427bc08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561427bc08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561427bc08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561427bc08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561427bc08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561427bc08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561429dc545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561426b21578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561426b2c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5614268d7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5614268d7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5614268d8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5614268d7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5614268d7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5614268d7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56142b1b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56142b1c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56142b1aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56142b1d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7ac92fd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561424af943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x31,0x0,0x3f,0x73,0x6b,0x69,0x35,0x37,0xff, Step #5: ID3\0021\000?ski57\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-1476179aa4e1758482ac2d1b3574bfea5026f30f Step #5: Base64: SUQzAjEAP3NraTU3/w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1536 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 114182144 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a9454e4d60, 0x55a9456cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a9456cd720,0x55a9475572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1476179aa4e1758482ac2d1b3574bfea5026f30f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1775 processed earlier; will process 9201 files now Step #5: ==55330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a93c0272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a942662728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a94264546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a94264538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a93c02d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a93bf8e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a93bf88c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a93c01f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a93f04e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a93f04e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a93f04e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a93f04e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a93f04e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a93f04e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a93f04e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a93f04e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a93f04e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a93f04e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a94125345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a93dfaf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a93dfba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a93dd65d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a93dd65d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a93dd66808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a93dd65944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a93dd65944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a93dd65944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a94264794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a9426507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a942638529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a942662fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2951c71082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a93bf8743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0xa,0x20,0xa,0x20,0xa,0x20,0xa,0x70,0xd,0xa,0xd,0xa, Step #5: :\012 \012 \012 \012p\015\012\015\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-9ff41854e5388b30ada42414a0d268110a956e9e Step #5: Base64: OgogCiAKIApwDQoNCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1537 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 114656561 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5556ee4f8d60, 0x5556ee6e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5556ee6e1720,0x5556f056b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ff41854e5388b30ada42414a0d268110a956e9e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1776 processed earlier; will process 9200 files now Step #5: #1 pulse cov: 3735 ft: 3736 exec/s: 0 rss: 165Mb Step #5: ==55366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5556e503b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5556eb676728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5556eb65946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5556eb65938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5556e5041652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5556e4fa242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5556e4f9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5556e5033595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5556e80628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5556e80628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5556e80628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5556e80628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5556e80628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5556e80628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5556e80628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5556e80628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5556e80628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5556e80628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5556ea26745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5556e6fc3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5556e6fce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5556e6d79d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5556e6d79d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5556e6d7a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5556e6d79944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5556e6d79944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5556e6d79944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5556eb65b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5556eb6647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5556eb64c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5556eb676fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdcb1c64082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5556e4f9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0xa,0x2b,0xa,0x68,0x6f,0x53,0x74,0x3a,0xf4,0xaa,0xbe,0x8f, Step #5: X\012+\012hoSt:\364\252\276\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-fcbfc5accf9c6f7382bb5b19ce9c0b41e0039234 Step #5: Base64: WAorCmhvU3Q69Kq+jw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1538 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 115173373 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562c64fa1d60, 0x562c6518a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562c6518a720,0x562c670142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fcbfc5accf9c6f7382bb5b19ce9c0b41e0039234' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1778 processed earlier; will process 9198 files now Step #5: #1 pulse cov: 3729 ft: 3730 exec/s: 0 rss: 167Mb Step #5: ==55402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562c5bae42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562c6211f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562c6210246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562c6210238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562c5baea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562c5ba4b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562c5ba45c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562c5badc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562c5eb0b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562c5eb0b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562c5eb0b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562c5eb0b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562c5eb0b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562c5eb0b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562c5eb0b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562c5eb0b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562c5eb0b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562c5eb0b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562c60d1045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562c5da6c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562c5da775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562c5d822d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562c5d822d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562c5d823808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562c5d822944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562c5d822944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562c5d822944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562c6210494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562c6210d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562c620f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562c6211ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f964f82a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562c5ba4443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x9,0xe3,0x80,0xad,0xe2,0xa0,0xa1,0xe2,0xa0,0xa9, Step #5: \000\000\000\011\343\200\255\342\240\241\342\240\251 Step #5: artifact_prefix='./'; Test unit written to ./oom-d0accb164cfaff48b849034d859e3bf077e4d801 Step #5: Base64: AAAACeOAreKgoeKgqQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1539 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 115689491 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606a0889d60, 0x5606a0a7271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606a0a72720,0x5606a28fc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d0accb164cfaff48b849034d859e3bf077e4d801' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1780 processed earlier; will process 9196 files now Step #5: ==55438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606973cc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56069da07728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56069d9ea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56069d9ea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606973d2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56069733342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56069732dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606973c4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56069a3f38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56069a3f38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56069a3f38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56069a3f38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56069a3f38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56069a3f38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56069a3f38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56069a3f38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56069a3f38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56069a3f38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56069c5f845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560699354578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56069935f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56069910ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56069910ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56069910b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56069910a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56069910a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56069910a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56069d9ec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56069d9f57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56069d9dd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56069da07fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0b29325082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56069732c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x2d,0x3d,0x21,0x3d,0x2c,0x2c,0x7e,0x46,0x20,0x29,0x24, Step #5: ~$-=!=,,~F )$ Step #5: artifact_prefix='./'; Test unit written to ./oom-267c82cee97ec6ce872ab673aa27aac29c3c9215 Step #5: Base64: fiQtPSE9LCx+RiApJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1540 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 116164630 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55640de80d60, 0x55640e06971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55640e069720,0x55640fef32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/267c82cee97ec6ce872ab673aa27aac29c3c9215' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1781 processed earlier; will process 9195 files now Step #5: ==55474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564049c32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55640affe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55640afe146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55640afe138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564049c9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55640492a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556404924c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564049bb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564079ea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564079ea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564079ea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564079ea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564079ea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564079ea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564079ea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564079ea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564079ea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564079ea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556409bef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55640694b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564069565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556406701d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556406701d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556406702808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556406701944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556406701944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556406701944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55640afe394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55640afec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55640afd4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55640affefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f253343b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55640492343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x9,0x3e,0xc2,0x85,0x3e,0xc2,0x85,0x3e,0xc2,0x85, Step #5: \000\000\000\011>\302\205>\302\205>\302\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-c174c4746ffe0ede998c37634b37b12333c20bc7 Step #5: Base64: AAAACT7ChT7ChT7ChQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1541 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 116635034 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563957f3ed60, 0x56395812771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563958127720,0x563959fb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c174c4746ffe0ede998c37634b37b12333c20bc7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1782 processed earlier; will process 9194 files now Step #5: ==55510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56394ea812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5639550bc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56395509f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56395509f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56394ea87652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56394e9e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56394e9e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56394ea79595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563951aa88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563951aa88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563951aa88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563951aa88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563951aa88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563951aa88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563951aa88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563951aa88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563951aa88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563951aa88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563953cad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563950a09578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563950a145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5639507bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5639507bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5639507c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5639507bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5639507bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5639507bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5639550a194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5639550aa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563955092529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5639550bcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa884b6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56394e9e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0xa,0x8,0xa,0x0,0xa,0x0,0xa,0x0,0xa,0x0, Step #5: \012\012\012\012\010\012\000\012\000\012\000\012\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4ed3f9150b25dc1726c7aaa596fc92c378e04592 Step #5: Base64: CgoKCggKAAoACgAKAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1542 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 117120212 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55678428ad60, 0x55678447371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556784473720,0x5567862fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4ed3f9150b25dc1726c7aaa596fc92c378e04592' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1783 processed earlier; will process 9193 files now Step #5: ==55546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55677adcd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556781408728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5567813eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5567813eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55677add3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55677ad3442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55677ad2ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55677adc5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55677ddf48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55677ddf48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55677ddf48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55677ddf48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55677ddf48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55677ddf48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55677ddf48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55677ddf48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55677ddf48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55677ddf48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55677fff945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55677cd55578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55677cd605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55677cb0bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55677cb0bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55677cb0c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55677cb0b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55677cb0b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55677cb0b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5567813ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5567813f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5567813de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556781408fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f70f71f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55677ad2d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x84,0x81,0xe1,0x85,0xb0,0xe1,0x84,0x91,0xe1,0x85,0xb0,0x7e, Step #5: \341\204\201\341\205\260\341\204\221\341\205\260~ Step #5: artifact_prefix='./'; Test unit written to ./oom-e04e7643c1cabafef0a2de23558b86b953dd6506 Step #5: Base64: 4YSB4YWw4YSR4YWwfg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1543 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 117609853 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5596af2c3d60, 0x5596af4ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5596af4ac720,0x5596b13362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e04e7643c1cabafef0a2de23558b86b953dd6506' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1784 processed earlier; will process 9192 files now Step #5: ==55582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5596a5e062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5596ac441728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5596ac42446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5596ac42438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5596a5e0c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5596a5d6d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5596a5d67c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5596a5dfe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5596a8e2d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5596a8e2d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5596a8e2d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5596a8e2d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5596a8e2d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5596a8e2d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5596a8e2d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5596a8e2d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5596a8e2d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5596a8e2d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5596ab03245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5596a7d8e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5596a7d995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5596a7b44d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5596a7b44d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5596a7b45808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5596a7b44944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5596a7b44944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5596a7b44944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5596ac42694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5596ac42f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5596ac417529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5596ac441fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe9ae76a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5596a5d6643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0xe1,0x88,0xaf,0x78,0xfb,0x75,0xa2,0xa2,0x75,0xa2,0xa2,0xbb, Step #5: F\341\210\257x\373u\242\242u\242\242\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-3977c5fc77d511eb6aafa3e31e730f0b2ffa5458 Step #5: Base64: RuGIr3j7daKidaKiuw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1544 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 118085558 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a09b6bbd60, 0x55a09b8a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a09b8a4720,0x55a09d72e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3977c5fc77d511eb6aafa3e31e730f0b2ffa5458' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1785 processed earlier; will process 9191 files now Step #5: ==55618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0921fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a098839728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a09881c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a09881c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a092204652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a09216542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a09215fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0921f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0952258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0952258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0952258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0952258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0952258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0952258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0952258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0952258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0952258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0952258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a09742a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a094186578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0941915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a093f3cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a093f3cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a093f3d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a093f3c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a093f3c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a093f3c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a09881e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0988277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a09880f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a098839fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8e24567082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a09215e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x2d,0x31,0x2d,0x31,0xd9,0x91,0xd9,0x91,0xd9,0x92,0xd9,0x91, Step #5: 1-1-1\331\221\331\221\331\222\331\221 Step #5: artifact_prefix='./'; Test unit written to ./oom-7edc1626c3acb9c9d3ee492ec251438be1bb7c02 Step #5: Base64: MS0xLTHZkdmR2ZLZkQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1545 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 118556436 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561ac1f42d60, 0x561ac212b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561ac212b720,0x561ac3fb52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7edc1626c3acb9c9d3ee492ec251438be1bb7c02' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1786 processed earlier; will process 9190 files now Step #5: #1 pulse cov: 3712 ft: 3713 exec/s: 0 rss: 165Mb Step #5: ==55654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ab8a852d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561abf0c0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561abf0a346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561abf0a338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ab8a8b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ab89ec42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ab89e6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ab8a7d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561abbaac8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561abbaac8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561abbaac8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561abbaac8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561abbaac8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561abbaac8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561abbaac8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561abbaac8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561abbaac8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561abbaac8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561abdcb145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561abaa0d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561abaa185a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561aba7c3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561aba7c3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561aba7c4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561aba7c3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561aba7c3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561aba7c3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561abf0a594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561abf0ae7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561abf096529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561abf0c0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd474498082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ab89e543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x11,0x0,0x0,0x0,0x2,0x4e,0x6f,0xcc,0x9c,0x0,0xdb, Step #5: \000\000\021\000\000\000\002No\314\234\000\333 Step #5: artifact_prefix='./'; Test unit written to ./oom-92d5fa14614c91e8348d4b6ce8cc0d5c029abab9 Step #5: Base64: AAARAAAAAk5vzJwA2w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1546 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 119080042 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563a4ef14d60, 0x563a4f0fd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563a4f0fd720,0x563a50f872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92d5fa14614c91e8348d4b6ce8cc0d5c029abab9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1788 processed earlier; will process 9188 files now Step #5: ==55690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563a45a572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563a4c092728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563a4c07546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563a4c07538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563a45a5d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563a459be42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563a459b8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563a45a4f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563a48a7e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563a48a7e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563a48a7e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563a48a7e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563a48a7e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563a48a7e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563a48a7e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563a48a7e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563a48a7e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563a48a7e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563a4ac8345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563a479df578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563a479ea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563a47795d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563a47795d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563a47796808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563a47795944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563a47795944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563a47795944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563a4c07794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563a4c0807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563a4c068529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563a4c092fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6e6f54082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563a459b743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x24,0x5c,0x23,0x36,0x31,0x24,0x5c,0x23,0x36,0x31,0x1f,0x21, Step #5: 1$\\#61$\\#61\037! Step #5: artifact_prefix='./'; Test unit written to ./oom-87fd26fcee9b46fb377193de4b86b248c2daa5ce Step #5: Base64: MSRcIzYxJFwjNjEfIQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1547 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 119565791 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f4aaca0d60, 0x55f4aae8971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f4aae89720,0x55f4acd132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87fd26fcee9b46fb377193de4b86b248c2daa5ce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1789 processed earlier; will process 9187 files now Step #5: ==55726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f4a17e32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f4a7e1e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f4a7e0146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f4a7e0138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f4a17e9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f4a174a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f4a1744c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f4a17db595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f4a480a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f4a480a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f4a480a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f4a480a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f4a480a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f4a480a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f4a480a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f4a480a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f4a480a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f4a480a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f4a6a0f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f4a376b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f4a37765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f4a3521d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f4a3521d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f4a3522808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f4a3521944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f4a3521944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f4a3521944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f4a7e0394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4a7e0c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f4a7df4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f4a7e1efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f7bd8a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f4a174343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f,0x68,0x24,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x8,0x24, Step #5: \177h$\000\000\000\000\000\000\000\000\010$ Step #5: artifact_prefix='./'; Test unit written to ./oom-554815461390fdfbbfdb07c96d51a9667566612d Step #5: Base64: f2gkAAAAAAAAAAAIJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1548 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 120047563 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560c8ce4fd60, 0x560c8d03871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560c8d038720,0x560c8eec22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/554815461390fdfbbfdb07c96d51a9667566612d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1790 processed earlier; will process 9186 files now Step #5: ==55762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c839922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560c89fcd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560c89fb046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560c89fb038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c83998652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c838f942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c838f3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c8398a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560c869b98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560c869b98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560c869b98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560c869b98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560c869b98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560c869b98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560c869b98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560c869b98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560c869b98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560c869b98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560c88bbe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560c8591a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560c859255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560c856d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560c856d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560c856d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560c856d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560c856d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560c856d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560c89fb294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560c89fbb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560c89fa3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560c89fcdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f069ce67082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c838f243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x69,0xa,0x22,0xe0,0xa0,0xa3,0xe0,0xa1,0x90,0xe0,0xad,0xa7, Step #5: Hi\012\"\340\240\243\340\241\220\340\255\247 Step #5: artifact_prefix='./'; Test unit written to ./oom-5110dd32b4e1bdea53e76565c23f1805dcd91f3a Step #5: Base64: SGkKIuCgo+ChkOCtpw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1549 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 120525479 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e9b2cb8d60, 0x55e9b2ea171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e9b2ea1720,0x55e9b4d2b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5110dd32b4e1bdea53e76565c23f1805dcd91f3a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1791 processed earlier; will process 9185 files now Step #5: ==55798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e9a97fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e9afe36728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e9afe1946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e9afe1938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e9a9801652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e9a976242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e9a975cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e9a97f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9ac8228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9ac8228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9ac8228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9ac8228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9ac8228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9ac8228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9ac8228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9ac8228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9ac8228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9ac8228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e9aea2745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e9ab783578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e9ab78e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e9ab539d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e9ab539d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e9ab53a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e9ab539944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e9ab539944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e9ab539944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e9afe1b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e9afe247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e9afe0c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e9afe36fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22877de082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e9a975b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0xc7,0xb2,0xc7,0xb3,0x5d,0x7c,0x5b,0xc7,0xb2,0xc7,0xb3,0x5d, Step #5: [\307\262\307\263]|[\307\262\307\263] Step #5: artifact_prefix='./'; Test unit written to ./oom-339dfe05634fce4647b8f0982f07fb288e1c5d56 Step #5: Base64: W8eyx7NdfFvHssezXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1550 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 120998233 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eebe432d60, 0x55eebe61b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eebe61b720,0x55eec04a52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/339dfe05634fce4647b8f0982f07fb288e1c5d56' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1792 processed earlier; will process 9184 files now Step #5: #1 pulse cov: 10786 ft: 10787 exec/s: 0 rss: 184Mb Step #5: ==55834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eeb4f752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eebb5b0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eebb59346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eebb59338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eeb4f7b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eeb4edc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eeb4ed6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eeb4f6d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eeb7f9c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eeb7f9c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eeb7f9c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eeb7f9c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eeb7f9c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eeb7f9c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eeb7f9c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eeb7f9c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eeb7f9c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eeb7f9c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eeba1a145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eeb6efd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eeb6f085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eeb6cb3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eeb6cb3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eeb6cb4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eeb6cb3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eeb6cb3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eeb6cb3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eebb59594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eebb59e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eebb586529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eebb5b0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f823723d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eeb4ed543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x9,0x3d,0x3,0x54,0x54,0x54,0x54,0xe2,0x81,0xa7,0xa7,0x3d, Step #5: -\011=\003TTTT\342\201\247\247= Step #5: artifact_prefix='./'; Test unit written to ./oom-04c021e13fe2a140020a28d53efc99e8b8cf309a Step #5: Base64: LQk9A1RUVFTigaenPQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1551 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 121544748 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55adb33d0d60, 0x55adb35b971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55adb35b9720,0x55adb54432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04c021e13fe2a140020a28d53efc99e8b8cf309a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1794 processed earlier; will process 9182 files now Step #5: ==55870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ada9f132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55adb054e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55adb053146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55adb053138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ada9f19652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ada9e7a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ada9e74c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ada9f0b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55adacf3a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55adacf3a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55adacf3a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55adacf3a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55adacf3a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55adacf3a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55adacf3a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55adacf3a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55adacf3a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55adacf3a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55adaf13f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55adabe9b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55adabea65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55adabc51d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55adabc51d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55adabc52808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55adabc51944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55adabc51944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55adabc51944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55adb053394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55adb053c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55adb0524529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55adb054efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f915b2bf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ada9e7343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x59,0x3a,0x2f,0x2f,0x2b,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: Y://+\315\204\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-215f75af069aa8da996040263dd74ff91039e5c8 Step #5: Base64: WTovLyvNhM2EzYTNhA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1552 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 122020808 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56230d15bd60, 0x56230d34471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56230d344720,0x56230f1ce2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/215f75af069aa8da996040263dd74ff91039e5c8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1795 processed earlier; will process 9181 files now Step #5: ==55906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562303c9e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56230a2d9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56230a2bc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56230a2bc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562303ca4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562303c0542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562303bffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562303c96595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562306cc58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562306cc58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562306cc58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562306cc58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562306cc58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562306cc58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562306cc58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562306cc58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562306cc58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562306cc58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562308eca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562305c26578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562305c315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5623059dcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5623059dcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5623059dd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5623059dc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5623059dc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5623059dc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56230a2be94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56230a2c77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56230a2af529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56230a2d9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc8f9d30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562303bfe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7a,0xdc,0xbc,0xdc,0xb9,0xf0,0x9d,0x85,0xa0,0x1e,0xf5,0xdf,0x0, Step #5: z\334\274\334\271\360\235\205\240\036\365\337\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-93deb15c34c8665ec1690c2571b539935efddadb Step #5: Base64: ety83LnwnYWgHvXfAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1553 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 122504721 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5567ade14d60, 0x5567adffd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5567adffd720,0x5567afe872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93deb15c34c8665ec1690c2571b539935efddadb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1796 processed earlier; will process 9180 files now Step #5: ==55942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5567a49572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5567aaf92728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5567aaf7546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5567aaf7538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5567a495d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5567a48be42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5567a48b8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5567a494f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567a797e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567a797e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567a797e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567a797e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567a797e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567a797e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567a797e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567a797e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567a797e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567a797e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5567a9b8345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5567a68df578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5567a68ea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5567a6695d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5567a6695d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5567a6696808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5567a6695944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5567a6695944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5567a6695944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5567aaf7794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5567aaf807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5567aaf68529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5567aaf92fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe53081c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5567a48b743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f,0x4,0x61,0x24,0x4,0x4,0x20,0xa,0x25,0x6e,0x24,0x30,0x3d, Step #5: \177\004a$\004\004 \012%n$0= Step #5: artifact_prefix='./'; Test unit written to ./oom-8ece2770bf083332f777e15d848559187ddd3495 Step #5: Base64: fwRhJAQEIAolbiQwPQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1554 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 122982853 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55601d812d60, 0x55601d9fb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55601d9fb720,0x55601f8852c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ece2770bf083332f777e15d848559187ddd3495' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1797 processed earlier; will process 9179 files now Step #5: ==55978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560143552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55601a990728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55601a97346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55601a97338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55601435b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560142bc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560142b6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55601434d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55601737c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55601737c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55601737c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55601737c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55601737c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55601737c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55601737c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55601737c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55601737c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55601737c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55601958145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560162dd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560162e85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556016093d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556016093d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556016094808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556016093944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556016093944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556016093944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55601a97594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55601a97e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55601a966529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55601a990fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff17c9d4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560142b543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x45,0x42,0x4c,0x43,0x2d,0x3a,0x2d,0x2,0x0, Step #5: - - EBLC-:-\002\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-8904cca76e628378f7f75fb3bf802846807babce Step #5: Base64: LSAtIEVCTEMtOi0CAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1555 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 123462851 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555e959f5d60, 0x555e95bde71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555e95bde720,0x555e97a682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8904cca76e628378f7f75fb3bf802846807babce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1798 processed earlier; will process 9178 files now Step #5: ==56014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555e8c5382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555e92b73728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555e92b5646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555e92b5638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555e8c53e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555e8c49f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555e8c499c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555e8c530595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555e8f55f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555e8f55f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555e8f55f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555e8f55f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555e8f55f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555e8f55f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555e8f55f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555e8f55f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555e8f55f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555e8f55f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555e9176445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555e8e4c0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555e8e4cb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555e8e276d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555e8e276d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555e8e277808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555e8e276944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555e8e276944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555e8e276944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555e92b5894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555e92b617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555e92b49529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555e92b73fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e96389082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555e8c49843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x55,0x54,0x20,0x2f,0xa,0x60,0x3a,0x22,0xa,0x60,0x3a,0x35, Step #5: PUT /\012`:\"\012`:5 Step #5: artifact_prefix='./'; Test unit written to ./oom-04fc7b53d75d1d26de433a5f01582fd6933d81a1 Step #5: Base64: UFVUIC8KYDoiCmA6NQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1556 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 124069300 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55baad5a1d60, 0x55baad78a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55baad78a720,0x55baaf6142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04fc7b53d75d1d26de433a5f01582fd6933d81a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1799 processed earlier; will process 9177 files now Step #5: #1 pulse cov: 3635 ft: 3636 exec/s: 0 rss: 166Mb Step #5: ==56050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55baa40e42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55baaa71f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55baaa70246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55baaa70238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55baa40ea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55baa404b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55baa4045c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55baa40dc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55baa710b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55baa710b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55baa710b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55baa710b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55baa710b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55baa710b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55baa710b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55baa710b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55baa710b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55baa710b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55baa931045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55baa606c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55baa60775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55baa5e22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55baa5e22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55baa5e23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55baa5e22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55baa5e22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55baa5e22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55baaa70494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55baaa70d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55baaa6f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55baaa71ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3be0a71082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55baa404443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x5c,0x23,0x73,0x63,0x65,0x6e,0x74,0x20,0x5c,0x23,0x23,0x68, Step #5: a\\#scent \\##h Step #5: artifact_prefix='./'; Test unit written to ./oom-a9db4aff3df2250a0c52102b301c549c18be7682 Step #5: Base64: YVwjc2NlbnQgXCMjaA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1557 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 124599275 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ad9478d60, 0x562ad966171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ad9661720,0x562adb4eb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9db4aff3df2250a0c52102b301c549c18be7682' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1801 processed earlier; will process 9175 files now Step #5: ==56086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562acffbb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562ad65f6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562ad65d946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562ad65d938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562acffc1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562acff2242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562acff1cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562acffb3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562ad2fe28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562ad2fe28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562ad2fe28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562ad2fe28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562ad2fe28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562ad2fe28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562ad2fe28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562ad2fe28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562ad2fe28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562ad2fe28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562ad51e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ad1f43578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ad1f4e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ad1cf9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ad1cf9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ad1cfa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ad1cf9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ad1cf9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ad1cf9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562ad65db94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562ad65e47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562ad65cc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562ad65f6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa855e8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562acff1b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x9,0x22,0x5c,0xe2,0x80,0xa9,0x5c,0xe2,0x80,0x9d, Step #5: \000\000\000\011\"\\\342\200\251\\\342\200\235 Step #5: artifact_prefix='./'; Test unit written to ./oom-065d95848098e0496e024804c01212aeffc08cc3 Step #5: Base64: AAAACSJc4oCpXOKAnQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1558 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 125084696 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dd4d5ebd60, 0x55dd4d7d471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dd4d7d4720,0x55dd4f65e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/065d95848098e0496e024804c01212aeffc08cc3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1802 processed earlier; will process 9174 files now Step #5: ==56122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dd4412e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dd4a769728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dd4a74c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dd4a74c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dd44134652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dd4409542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dd4408fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dd44126595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dd471558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dd471558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dd471558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dd471558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dd471558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dd471558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dd471558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dd471558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dd471558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dd471558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dd4935a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dd460b6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dd460c15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dd45e6cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dd45e6cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dd45e6d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dd45e6c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dd45e6c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dd45e6c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dd4a74e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dd4a7577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dd4a73f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dd4a769fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f11394e8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dd4408e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x20,0x30,0x20,0x31,0x20,0x30,0x20,0x30,0x20,0x30,0xa,0x30, Step #5: 0 0 1 0 0 0\0120 Step #5: artifact_prefix='./'; Test unit written to ./oom-2b8e0beff686de06bd4daa3adb9bb6fa00afedbf Step #5: Base64: MCAwIDEgMCAwIDAKMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1559 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 125568692 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585bd1cad60, 0x5585bd3b371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585bd3b3720,0x5585bf23d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2b8e0beff686de06bd4daa3adb9bb6fa00afedbf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1803 processed earlier; will process 9173 files now Step #5: ==56158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585b3d0d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585ba348728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585ba32b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585ba32b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585b3d13652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5585b3c7442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5585b3c6ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585b3d05595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585b6d348c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585b6d348c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585b6d348c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585b6d348c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585b6d348c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585b6d348c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585b6d348c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585b6d348c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585b6d348c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585b6d348c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585b8f3945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585b5c95578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585b5ca05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5585b5a4bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5585b5a4bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5585b5a4c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5585b5a4b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5585b5a4b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5585b5a4b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585ba32d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585ba3367b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585ba31e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585ba348fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8365564082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5585b3c6d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x61,0x2e,0x2e,0x2e,0x3e,0x3c,0x2f,0x61,0x2e,0x2e,0xf3,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-887d1454ac92c53d03ca66babd6247a11032c974 Step #5: Base64: PGEuLi4+PC9hLi7zPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1560 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 126051307 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5632d0432d60, 0x5632d061b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5632d061b720,0x5632d24a52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/887d1454ac92c53d03ca66babd6247a11032c974' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1804 processed earlier; will process 9172 files now Step #5: ==56194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5632c6f752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5632cd5b0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5632cd59346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5632cd59338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5632c6f7b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5632c6edc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5632c6ed6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5632c6f6d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5632c9f9c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5632c9f9c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5632c9f9c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5632c9f9c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5632c9f9c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5632c9f9c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5632c9f9c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5632c9f9c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5632c9f9c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5632c9f9c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5632cc1a145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5632c8efd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5632c8f085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5632c8cb3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5632c8cb3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5632c8cb4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5632c8cb3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5632c8cb3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5632c8cb3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5632cd59594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5632cd59e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5632cd586529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5632cd5b0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e7dec5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5632c6ed543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x2d,0x3d,0x3d,0x60,0x7e,0x2d,0x11,0x0,0x0,0x0,0x24, Step #5: ~$-==`~-\021\000\000\000$ Step #5: artifact_prefix='./'; Test unit written to ./oom-4c234afe3e1e01e31a7036728f6698d06698364b Step #5: Base64: fiQtPT1gfi0RAAAAJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1561 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 126530451 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563d40d76d60, 0x563d40f5f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563d40f5f720,0x563d42de92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4c234afe3e1e01e31a7036728f6698d06698364b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1805 processed earlier; will process 9171 files now Step #5: ==56230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563d378b92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563d3def4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563d3ded746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563d3ded738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563d378bf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563d3782042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563d3781ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563d378b1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563d3a8e08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563d3a8e08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563d3a8e08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563d3a8e08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563d3a8e08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563d3a8e08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563d3a8e08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563d3a8e08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563d3a8e08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563d3a8e08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563d3cae545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563d39841578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563d3984c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563d395f7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563d395f7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563d395f8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563d395f7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563d395f7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563d395f7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563d3ded994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563d3dee27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563d3deca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563d3def4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f03404a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563d3781943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2a,0x2a,0xa,0x1,0x0,0x2a,0x3d,0xa,0x3d,0xa,0x2a,0x0,0x34, Step #5: **\012\001\000*=\012=\012*\0004 Step #5: artifact_prefix='./'; Test unit written to ./oom-4a799c3b639419aacb4075491d65f68c07519f6f Step #5: Base64: KioKAQAqPQo9CioANA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1562 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 127006120 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bd02b4dd60, 0x55bd02d3671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bd02d36720,0x55bd04bc02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a799c3b639419aacb4075491d65f68c07519f6f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1806 processed earlier; will process 9170 files now Step #5: ==56266== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bcf96902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bcffccb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bcffcae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bcffcae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bcf9696652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bcf95f742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bcf95f1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bcf9688595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bcfc6b78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bcfc6b78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bcfc6b78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bcfc6b78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bcfc6b78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bcfc6b78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bcfc6b78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bcfc6b78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bcfc6b78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bcfc6b78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bcfe8bc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bcfb618578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bcfb6235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bcfb3ced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bcfb3ced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bcfb3cf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bcfb3ce944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bcfb3ce944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bcfb3ce944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bcffcb094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bcffcb97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bcffca1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bcffccbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4307d06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bcf95f043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x9,0x2e,0x2e,0xa,0x2e,0x2e,0x2e,0xa,0x2e,0x2e, Step #5: \000\000\000\011..\012...\012.. Step #5: artifact_prefix='./'; Test unit written to ./oom-40ba7bf0c5fc5a8ad8f5864c8c09983834bf7e3e Step #5: Base64: AAAACS4uCi4uLgouLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1563 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 127493177 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e961f2bd60, 0x55e96211471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e962114720,0x55e963f9e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/40ba7bf0c5fc5a8ad8f5864c8c09983834bf7e3e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1807 processed earlier; will process 9169 files now Step #5: ==56302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e958a6e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e95f0a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e95f08c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e95f08c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e958a74652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e9589d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e9589cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e958a66595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e95ba958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e95ba958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e95ba958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e95ba958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e95ba958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e95ba958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e95ba958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e95ba958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e95ba958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e95ba958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e95dc9a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e95a9f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e95aa015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e95a7acd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e95a7acd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e95a7ad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e95a7ac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e95a7ac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e95a7ac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e95f08e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e95f0977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e95f07f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e95f0a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1bdea33082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e9589ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x7b,0x7d,0x2b,0x23,0x7b,0x7d,0x2b,0x23,0x7b,0x7d,0x2b,0xb, Step #5: #{}+#{}+#{}+\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-35edc203f7d24a1092c713b7ba4ecbb34f11f040 Step #5: Base64: I3t9KyN7fSsje30rCw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1564 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 127978800 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555eb08edd60, 0x555eb0ad671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555eb0ad6720,0x555eb29602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/35edc203f7d24a1092c713b7ba4ecbb34f11f040' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1808 processed earlier; will process 9168 files now Step #5: ==56338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555ea74302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555eada6b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555eada4e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555eada4e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555ea7436652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555ea739742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555ea7391c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555ea7428595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555eaa4578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555eaa4578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555eaa4578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555eaa4578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555eaa4578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555eaa4578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555eaa4578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555eaa4578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555eaa4578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555eaa4578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555eac65c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555ea93b8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555ea93c35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555ea916ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555ea916ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555ea916f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555ea916e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555ea916e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555ea916e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555eada5094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555eada597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555eada41529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555eada6bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff247227082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555ea739043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x5c,0x5e,0x5c,0x5e,0x5c,0x5e,0x20,0x3f,0xde,0xad,0xbe,0xef, Step #5: \003\\^\\^\\^ ?\336\255\276\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-128ebf6cf75a526bc29e77e1c8089941c95278e3 Step #5: Base64: A1xeXF5cXiA/3q2+7w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1565 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 128457253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55de8b1dcd60, 0x55de8b3c571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55de8b3c5720,0x55de8d24f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/128ebf6cf75a526bc29e77e1c8089941c95278e3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1809 processed earlier; will process 9167 files now Step #5: ==56374== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55de81d1f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55de8835a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55de8833d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55de8833d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55de81d25652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55de81c8642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55de81c80c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55de81d17595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55de84d468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55de84d468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55de84d468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55de84d468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55de84d468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55de84d468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55de84d468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55de84d468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55de84d468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55de84d468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55de86f4b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55de83ca7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55de83cb25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55de83a5dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55de83a5dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55de83a5e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55de83a5d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55de83a5d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55de83a5d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55de8833f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55de883487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55de88330529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55de8835afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb8cad32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55de81c7f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x5c,0x75,0x7b,0x62,0x44,0x7d,0x5c,0x75,0x7b,0x62,0x44,0x7d, Step #5: '\\u{bD}\\u{bD} Step #5: artifact_prefix='./'; Test unit written to ./oom-f30e979c7623d6ce3217a6aa750e2afe7735ed92 Step #5: Base64: J1x1e2JEfVx1e2JEfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1566 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 128940060 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562f4859bd60, 0x562f4878471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562f48784720,0x562f4a60e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f30e979c7623d6ce3217a6aa750e2afe7735ed92' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1810 processed earlier; will process 9166 files now Step #5: ==56410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562f3f0de2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562f45719728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562f456fc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562f456fc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562f3f0e4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562f3f04542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562f3f03fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562f3f0d6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562f421058c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562f421058c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562f421058c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562f421058c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562f421058c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562f421058c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562f421058c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562f421058c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562f421058c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562f421058c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562f4430a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562f41066578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562f410715a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562f40e1cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562f40e1cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562f40e1d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562f40e1c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562f40e1c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562f40e1c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562f456fe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562f457077b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562f456ef529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562f45719fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa7656ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562f3f03e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0x28,0x59,0x3e,0x33,0x34,0x30,0x32,0x38,0x38,0x31,0x38,0x34, Step #5: \015(Y>340288184 Step #5: artifact_prefix='./'; Test unit written to ./oom-86aae23b6410f480690ef8e7530a023c51a0835c Step #5: Base64: DShZPjM0MDI4ODE4NA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1567 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 129413332 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ffae5c9d60, 0x55ffae7b271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ffae7b2720,0x55ffb063c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/86aae23b6410f480690ef8e7530a023c51a0835c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1811 processed earlier; will process 9165 files now Step #5: #1 pulse cov: 3946 ft: 3947 exec/s: 0 rss: 165Mb Step #5: ==56446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ffa510c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ffab747728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ffab72a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ffab72a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ffa5112652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ffa507342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ffa506dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ffa5104595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ffa81338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ffa81338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ffa81338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ffa81338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ffa81338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ffa81338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ffa81338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ffa81338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ffa81338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ffa81338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ffaa33845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ffa7094578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ffa709f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ffa6e4ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ffa6e4ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ffa6e4b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ffa6e4a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ffa6e4a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ffa6e4a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ffab72c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ffab7357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ffab71d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ffab747fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbfa8239082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ffa506c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0xa,0x67,0x22,0x1,0x3f,0xa,0x22,0x22,0x0,0x0,0x0,0x11, Step #5: 3\012g\"\001?\012\"\"\000\000\000\021 Step #5: artifact_prefix='./'; Test unit written to ./oom-b84f33b79e0ec27a7cafd169bd1dbbf5fafab59b Step #5: Base64: MwpnIgE/CiIiAAAAEQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1568 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 129935068 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e7b0f71d60, 0x55e7b115a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e7b115a720,0x55e7b2fe42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b84f33b79e0ec27a7cafd169bd1dbbf5fafab59b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1813 processed earlier; will process 9163 files now Step #5: ==56482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e7a7ab42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e7ae0ef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e7ae0d246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e7ae0d238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e7a7aba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e7a7a1b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e7a7a15c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e7a7aac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e7aaadb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e7aaadb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e7aaadb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e7aaadb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e7aaadb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e7aaadb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e7aaadb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e7aaadb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e7aaadb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e7aaadb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e7acce045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e7a9a3c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e7a9a475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e7a97f2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e7a97f2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e7a97f3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e7a97f2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e7a97f2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e7a97f2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e7ae0d494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e7ae0dd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e7ae0c5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e7ae0effa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4141220082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e7a7a1443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x2a,0x24,0x2,0xd7,0x80,0x0,0x0,0x0,0x0,0x0,0x0,0x2, Step #5: $*$\002\327\200\000\000\000\000\000\000\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-31151909ba10f86d0f8320b9804ae3c1366b9f9a Step #5: Base64: JCokAteAAAAAAAAAAg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1569 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 130414449 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5609ad963d60, 0x5609adb4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5609adb4c720,0x5609af9d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/31151909ba10f86d0f8320b9804ae3c1366b9f9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1814 processed earlier; will process 9162 files now Step #5: ==56518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609a44a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5609aaae1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5609aaac446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5609aaac438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5609a44ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5609a440d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5609a4407c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5609a449e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609a74cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609a74cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609a74cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609a74cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609a74cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609a74cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609a74cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609a74cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609a74cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609a74cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5609a96d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609a642e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609a64395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5609a61e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5609a61e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5609a61e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5609a61e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5609a61e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5609a61e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5609aaac694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5609aaacf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5609aaab7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5609aaae1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8160265082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5609a440643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x64,0x65,0x73,0x63,0x72,0x69,0x70,0x74,0x69,0x6f,0x6e,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-51b38e27957d597794d171dcebe0a46f47ade80e Step #5: Base64: PGRlc2NyaXB0aW9uPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1570 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 130873054 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8c5ad4d60, 0x55a8c5cbd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a8c5cbd720,0x55a8c7b472c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/51b38e27957d597794d171dcebe0a46f47ade80e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1815 processed earlier; will process 9161 files now Step #5: ==56554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8bc6172d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8c2c52728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8c2c3546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8c2c3538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8bc61d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a8bc57e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a8bc578c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8bc60f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8bf63e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8bf63e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8bf63e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8bf63e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8bf63e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8bf63e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8bf63e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8bf63e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8bf63e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8bf63e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8c184345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8be59f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8be5aa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a8be355d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a8be355d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a8be356808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a8be355944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a8be355944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a8be355944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8c2c3794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8c2c407b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8c2c28529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8c2c52fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1e2e31d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a8bc57743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x3c,0x3c,0x7b,0x27,0x3c,0x7b,0x27,0x3c,0x7b,0x27,0xa,0xa, Step #5: {<<{'<{'<{'\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-24b8a4a380db68878b3b85e455f27421f65d5e33 Step #5: Base64: ezw8eyc8eyc8eycKCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1571 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 131344496 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5601885e7d60, 0x5601887d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5601887d0720,0x56018a65a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/24b8a4a380db68878b3b85e455f27421f65d5e33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1816 processed earlier; will process 9160 files now Step #5: ==56590== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56017f12a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560185765728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56018574846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56018574838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56017f130652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56017f09142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56017f08bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56017f122595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601821518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601821518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601821518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601821518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601821518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601821518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601821518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601821518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601821518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601821518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56018435645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601810b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601810bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560180e68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560180e68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560180e69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560180e68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560180e68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560180e68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56018574a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601857537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56018573b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560185765fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f720be2b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56017f08a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x47,0x52,0x4f,0x55,0x50,0x3d,0x22,0x62,0x61,0x63,0x6b,0x74,0x22, Step #5: GROUP=\"backt\" Step #5: artifact_prefix='./'; Test unit written to ./oom-bbf6b8a8197b64f2cac0e81c16a2f64f08c6599e Step #5: Base64: R1JPVVA9ImJhY2t0Ig== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1572 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 131821257 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563162435d60, 0x56316261e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56316261e720,0x5631644a82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bbf6b8a8197b64f2cac0e81c16a2f64f08c6599e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1817 processed earlier; will process 9159 files now Step #5: ==56626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563158f782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56315f5b3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56315f59646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56315f59638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563158f7e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563158edf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563158ed9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563158f70595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56315bf9f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56315bf9f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56315bf9f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56315bf9f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56315bf9f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56315bf9f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56315bf9f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56315bf9f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56315bf9f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56315bf9f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56315e1a445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56315af00578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56315af0b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56315acb6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56315acb6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56315acb7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56315acb6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56315acb6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56315acb6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56315f59894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56315f5a17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56315f589529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56315f5b3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3d32f04082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563158ed843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x0,0x0,0x20,0x0,0x1e,0x1e,0x28,0x23,0x24,0x24,0x2f, Step #5: = \000\000 \000\036\036(#$$/ Step #5: artifact_prefix='./'; Test unit written to ./oom-511a64f9ae8bb1567a9e28766319e70fb5e1fdd4 Step #5: Base64: PSAAACAAHh4oIyQkLw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1573 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 132301813 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a24f1dd60, 0x555a2510671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a25106720,0x555a26f902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/511a64f9ae8bb1567a9e28766319e70fb5e1fdd4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1818 processed earlier; will process 9158 files now Step #5: ==56662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a1ba602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a2209b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a2207e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a2207e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a1ba66652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a1b9c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a1b9c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a1ba58595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a1ea878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a1ea878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a1ea878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a1ea878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a1ea878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a1ea878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a1ea878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a1ea878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a1ea878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a1ea878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a20c8c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a1d9e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a1d9f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a1d79ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a1d79ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a1d79f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a1d79e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a1d79e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a1d79e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a2208094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a220897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a22071529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a2209bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c54746082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a1b9c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x59,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x58,0x2f,0x2f,0x0, Step #5: Y********X//\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4be0f15bd3cea4d1598ea6cdff11d105431d4da8 Step #5: Base64: WSoqKioqKioqWC8vAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1574 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 132783052 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625ff492d60, 0x5625ff67b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625ff67b720,0x5626015052c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4be0f15bd3cea4d1598ea6cdff11d105431d4da8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1819 processed earlier; will process 9157 files now Step #5: ==56698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5625f5fd52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625fc610728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625fc5f346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625fc5f338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5625f5fdb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625f5f3c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625f5f36c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5625f5fcd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625f8ffc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625f8ffc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625f8ffc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625f8ffc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625f8ffc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625f8ffc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625f8ffc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625f8ffc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625f8ffc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625f8ffc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625fb20145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5625f7f5d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5625f7f685a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5625f7d13d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5625f7d13d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5625f7d14808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5625f7d13944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5625f7d13944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5625f7d13944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625fc5f594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625fc5fe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625fc5e6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625fc610fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f36a02ac082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625f5f3543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0xd,0x7b,0x2f,0xd,0x7b,0x4e,0xd,0x7b,0x4e,0xd,0x7b,0x7d, Step #5: 1\015{/\015{N\015{N\015{} Step #5: artifact_prefix='./'; Test unit written to ./oom-9c6b1e0c9ee2885b1e1507088e411d126a1b7f5d Step #5: Base64: MQ17Lw17Tg17Tg17fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1575 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 133258102 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d3648ecd60, 0x55d364ad571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d364ad5720,0x55d36695f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9c6b1e0c9ee2885b1e1507088e411d126a1b7f5d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1820 processed earlier; will process 9156 files now Step #5: ==56734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d35b42f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d361a6a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d361a4d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d361a4d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d35b435652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d35b39642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d35b390c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d35b427595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d35e4568c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d35e4568c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d35e4568c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d35e4568c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d35e4568c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d35e4568c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d35e4568c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d35e4568c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d35e4568c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d35e4568c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d36065b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d35d3b7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d35d3c25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d35d16dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d35d16dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d35d16e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d35d16d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d35d16d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d35d16d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d361a4f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d361a587b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d361a40529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d361a6afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f61ecf96082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d35b38f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x9,0xcd,0x9a,0xd1,0x97,0x9,0xcd,0x8a,0x2c,0x3a, Step #5: \000\000\000\011\315\232\321\227\011\315\212,: Step #5: artifact_prefix='./'; Test unit written to ./oom-72479844f12ea81c213b7738ba2fcbaf22ad773d Step #5: Base64: AAAACc2a0ZcJzYosOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1576 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 133746520 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ddfee1d60, 0x558de00ca71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558de00ca720,0x558de1f542c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/72479844f12ea81c213b7738ba2fcbaf22ad773d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1821 processed earlier; will process 9155 files now Step #5: ==56770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558dd6a242d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ddd05f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ddd04246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ddd04238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558dd6a2a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558dd698b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558dd6985c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558dd6a1c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558dd9a4b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558dd9a4b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558dd9a4b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558dd9a4b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558dd9a4b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558dd9a4b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558dd9a4b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558dd9a4b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558dd9a4b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558dd9a4b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558ddbc5045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558dd89ac578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558dd89b75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558dd8762d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558dd8762d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558dd8763808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558dd8762944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558dd8762944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558dd8762944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ddd04494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ddd04d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ddd035529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ddd05ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0792f0d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558dd698443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1e,0xdb,0xaa,0x0,0xd3,0xaf,0x2c,0xdb,0xaa,0x0,0xd3,0xab,0x71, Step #5: \036\333\252\000\323\257,\333\252\000\323\253q Step #5: artifact_prefix='./'; Test unit written to ./oom-a5073f1c5fbc5ca84ac19b0735114628299c8ed1 Step #5: Base64: HtuqANOvLNuqANOrcQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1577 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 134221480 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bed4720d60, 0x55bed490971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bed4909720,0x55bed67932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a5073f1c5fbc5ca84ac19b0735114628299c8ed1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1822 processed earlier; will process 9154 files now Step #5: ==56806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55becb2632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bed189e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bed188146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bed188138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55becb269652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55becb1ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55becb1c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55becb25b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bece28a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bece28a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bece28a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bece28a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bece28a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bece28a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bece28a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bece28a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bece28a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bece28a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bed048f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55becd1eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55becd1f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55beccfa1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55beccfa1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55beccfa2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55beccfa1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55beccfa1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55beccfa1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bed188394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bed188c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bed1874529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bed189efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3743a76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55becb1c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x62,0x6a,0x65,0x63,0x74,0x43,0x6c,0x61,0x73,0x73,0x6e,0x3a, Step #5: objectClassn: Step #5: artifact_prefix='./'; Test unit written to ./oom-46dcce45133752306b81efe671a43761ed39438f Step #5: Base64: b2JqZWN0Q2xhc3NuOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1578 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 134695086 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dceea54d60, 0x55dceec3d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dceec3d720,0x55dcf0ac72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/46dcce45133752306b81efe671a43761ed39438f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1823 processed earlier; will process 9153 files now Step #5: ==56842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dce55972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dcebbd2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dcebbb546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dcebbb538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dce559d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dce54fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dce54f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dce558f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dce85be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dce85be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dce85be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dce85be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dce85be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dce85be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dce85be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dce85be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dce85be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dce85be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dcea7c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dce751f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dce752a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dce72d5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dce72d5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dce72d6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dce72d5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dce72d5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dce72d5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dcebbb794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dcebbc07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dcebba8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dcebbd2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3e1f44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dce54f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0xa,0x3d,0xcc,0xbb,0xa9,0x0,0xa,0x21,0x6a,0x2d,0x2d,0x2d, Step #5: 0\012=\314\273\251\000\012!j--- Step #5: artifact_prefix='./'; Test unit written to ./oom-1f0e58c4f52e01f0d756e2461f1f2f1432d889b5 Step #5: Base64: MAo9zLupAAohai0tLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1579 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 135165490 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565335b67d60, 0x565335d5071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565335d50720,0x565337bda2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f0e58c4f52e01f0d756e2461f1f2f1432d889b5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1824 processed earlier; will process 9152 files now Step #5: ==56878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56532c6aa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565332ce5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x565332cc846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x565332cc838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56532c6b0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56532c61142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56532c60bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56532c6a2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56532f6d18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56532f6d18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56532f6d18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56532f6d18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56532f6d18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56532f6d18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56532f6d18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56532f6d18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56532f6d18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56532f6d18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5653318d645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56532e632578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56532e63d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56532e3e8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56532e3e8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56532e3e9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56532e3e8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56532e3e8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56532e3e8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x565332cca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x565332cd37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565332cbb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565332ce5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd6bfff3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56532c60a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x52,0x58,0x73,0x62,0x5f,0x42,0x5f,0x46,0x47,0x5f,0x42,0x5f, Step #5: _RXsb_B_FG_B_ Step #5: artifact_prefix='./'; Test unit written to ./oom-0443d77811b8ae91458fad97d8bf0e5d44cd7633 Step #5: Base64: X1JYc2JfQl9GR19CXw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1580 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 135639277 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b3bff98d60, 0x55b3c018171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b3c0181720,0x55b3c200b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0443d77811b8ae91458fad97d8bf0e5d44cd7633' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1825 processed earlier; will process 9151 files now Step #5: ==56914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b3b6adb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b3bd116728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b3bd0f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b3bd0f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b3b6ae1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b3b6a4242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b3b6a3cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b3b6ad3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b3b9b028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b3b9b028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b3b9b028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b3b9b028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b3b9b028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b3b9b028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b3b9b028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b3b9b028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b3b9b028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b3b9b028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b3bbd0745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b3b8a63578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b3b8a6e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b3b8819d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b3b8819d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b3b881a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b3b8819944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b3b8819944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b3b8819944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b3bd0fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b3bd1047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b3bd0ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b3bd116fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f101d27d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b3b6a3b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4a,0x3a,0x2f,0x2f,0x2c,0x2c,0x2c,0x2c,0x2c,0xda,0xbe,0x33,0x32, Step #5: J://,,,,,\332\27632 Step #5: artifact_prefix='./'; Test unit written to ./oom-ed9d108afeb3e80180026f3767fe39a85e38513a Step #5: Base64: SjovLywsLCws2r4zMg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1581 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 136112636 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5579a846cd60, 0x5579a865571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5579a8655720,0x5579aa4df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ed9d108afeb3e80180026f3767fe39a85e38513a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1826 processed earlier; will process 9150 files now Step #5: ==56950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55799efaf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5579a55ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5579a55cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5579a55cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55799efb5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55799ef1642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55799ef10c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55799efa7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5579a1fd68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5579a1fd68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5579a1fd68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5579a1fd68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5579a1fd68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5579a1fd68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5579a1fd68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5579a1fd68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5579a1fd68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5579a1fd68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5579a41db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579a0f37578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579a0f425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5579a0cedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5579a0cedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5579a0cee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5579a0ced944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5579a0ced944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5579a0ced944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5579a55cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5579a55d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5579a55c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5579a55eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd24f7e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55799ef0f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3a,0x3a,0x53,0x3a,0x3a,0x3b,0x3b,0x3b,0x3b,0x3b,0x3b,0x3b,0x3b, Step #5: ::S::;;;;;;;; Step #5: artifact_prefix='./'; Test unit written to ./oom-28bd6b8b1e38415bd889cafb189b1eea947d5ef3 Step #5: Base64: OjpTOjo7Ozs7Ozs7Ow== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1582 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 136594982 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556eccf62d60, 0x556ecd14b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556ecd14b720,0x556ecefd52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28bd6b8b1e38415bd889cafb189b1eea947d5ef3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1827 processed earlier; will process 9149 files now Step #5: ==56986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ec3aa52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556eca0e0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556eca0c346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556eca0c338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ec3aab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ec3a0c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ec3a06c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ec3a9d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ec6acc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ec6acc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ec6acc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ec6acc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ec6acc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ec6acc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ec6acc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ec6acc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ec6acc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ec6acc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ec8cd145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ec5a2d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ec5a385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ec57e3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ec57e3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ec57e4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ec57e3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ec57e3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ec57e3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556eca0c594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556eca0ce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556eca0b6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556eca0e0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f993b3b1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ec3a0543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x5b,0x63,0xe,0x68,0x43,0xdd,0x82,0xda,0xae,0xa5,0x70, Step #5: \000\000[c\016hC\335\202\332\256\245p Step #5: artifact_prefix='./'; Test unit written to ./oom-082ebc41245d32d150dea9384812996a81679956 Step #5: Base64: AABbYw5oQ92C2q6lcA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1583 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 137067712 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555e09764d60, 0x555e0994d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555e0994d720,0x555e0b7d72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/082ebc41245d32d150dea9384812996a81679956' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1828 processed earlier; will process 9148 files now Step #5: ==57022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555e002a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555e068e2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555e068c546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555e068c538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555e002ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555e0020e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555e00208c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555e0029f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555e032ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555e032ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555e032ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555e032ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555e032ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555e032ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555e032ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555e032ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555e032ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555e032ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555e054d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555e0222f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555e0223a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555e01fe5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555e01fe5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555e01fe6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555e01fe5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555e01fe5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555e01fe5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555e068c794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555e068d07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555e068b8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555e068e2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffbb73e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555e0020743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xb7,0xba,0xef,0xb7,0xba,0xa,0xef,0xb7,0xba,0xef,0xb7,0xba, Step #5: \357\267\272\357\267\272\012\357\267\272\357\267\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-98a953c510c487ecaadfe5fb2668b6dee67794f5 Step #5: Base64: 77e677e6Cu+3uu+3ug== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1584 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 137560370 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556cafea8d60, 0x556cb009171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556cb0091720,0x556cb1f1b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/98a953c510c487ecaadfe5fb2668b6dee67794f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1829 processed earlier; will process 9147 files now Step #5: #1 pulse cov: 3527 ft: 3528 exec/s: 0 rss: 165Mb Step #5: ==57058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ca69eb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556cad026728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556cad00946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556cad00938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ca69f1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ca695242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ca694cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ca69e3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ca9a128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ca9a128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ca9a128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ca9a128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ca9a128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ca9a128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ca9a128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ca9a128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ca9a128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ca9a128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556cabc1745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ca8973578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ca897e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ca8729d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ca8729d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ca872a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ca8729944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ca8729944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ca8729944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556cad00b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556cad0147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556cacffc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556cad026fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f403292e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ca694b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0xd,0x2d,0x2d,0x24,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0x24, Step #5: --\015--$\015--\015--$ Step #5: artifact_prefix='./'; Test unit written to ./oom-0d06647a421e26a514826af25ec4b0cee103c12d Step #5: Base64: LS0NLS0kDS0tDS0tJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1585 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 138094548 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d21549ed60, 0x55d21568771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d215687720,0x55d2175112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0d06647a421e26a514826af25ec4b0cee103c12d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1831 processed earlier; will process 9145 files now Step #5: #1 pulse cov: 3583 ft: 3584 exec/s: 0 rss: 167Mb Step #5: #2 pulse cov: 3660 ft: 3702 exec/s: 0 rss: 168Mb Step #5: ==57094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d20bfe12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d21261c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d2125ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d2125ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d20bfe7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d20bf4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d20bf42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d20bfd9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d20f0088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d20f0088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d20f0088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d20f0088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d20f0088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d20f0088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d20f0088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d20f0088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d20f0088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d20f0088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d21120d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d20df69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d20df745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d20dd1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d20dd1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d20dd20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d20dd1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d20dd1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d20dd1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d21260194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d21260a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d2125f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d21261cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcf27dba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d20bf4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0x7a,0xd7,0x85,0xd7,0x85,0xd7,0x85,0xd7,0x84, Step #5: \016ws:z\327\205\327\205\327\205\327\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-b35038c7caf470de6caf06def82c0190a461f981 Step #5: Base64: DndzOnrXhdeF14XXhA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1586 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 138661104 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d85ac3dd60, 0x55d85ae2671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d85ae26720,0x55d85ccb02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b35038c7caf470de6caf06def82c0190a461f981' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1834 processed earlier; will process 9142 files now Step #5: ==57130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d8517802d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d857dbb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d857d9e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d857d9e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d851786652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d8516e742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d8516e1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d851778595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d8547a78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d8547a78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d8547a78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d8547a78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d8547a78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d8547a78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d8547a78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d8547a78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d8547a78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d8547a78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d8569ac45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d853708578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d8537135a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d8534bed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d8534bed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d8534bf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d8534be944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d8534be944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d8534be944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d857da094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d857da97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d857d91529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d857dbbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f080616d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d8516e043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x0,0x0,0x24,0x0,0x0,0x24,0x40,0x0,0x0,0x0,0x0,0x25, Step #5: \002\000\000$\000\000$@\000\000\000\000% Step #5: artifact_prefix='./'; Test unit written to ./oom-8f892b024e9db8738ccce589d918cbfdf5a3d24d Step #5: Base64: AgAAJAAAJEAAAAAAJQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1587 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 139136512 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc2e5d8d60, 0x55fc2e7c171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc2e7c1720,0x55fc3064b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8f892b024e9db8738ccce589d918cbfdf5a3d24d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1835 processed earlier; will process 9141 files now Step #5: ==57166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc2511b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc2b756728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc2b73946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc2b73938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc25121652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc2508242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc2507cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc25113595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc281428c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc281428c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc281428c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc281428c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc281428c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc281428c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc281428c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc281428c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc281428c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc281428c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc2a34745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc270a3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc270ae5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc26e59d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc26e59d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc26e5a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc26e59944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc26e59944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc26e59944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc2b73b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc2b7447b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc2b72c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc2b756fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd9e7bf6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc2507b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x24,0x30,0x0,0x0,0x7c,0x9,0xa,0x0,0x24,0xa,0x7c,0x2f, Step #5: \000$0\000\000|\011\012\000$\012|/ Step #5: artifact_prefix='./'; Test unit written to ./oom-667a5cacbdb00920e0dcaec78a5ffdda07147d8a Step #5: Base64: ACQwAAB8CQoAJAp8Lw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1588 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 139610341 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e98650cd60, 0x55e9866f571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e9866f5720,0x55e98857f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/667a5cacbdb00920e0dcaec78a5ffdda07147d8a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1836 processed earlier; will process 9140 files now Step #5: ==57202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e97d04f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e98368a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e98366d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e98366d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e97d055652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e97cfb642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e97cfb0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e97d047595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9800768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9800768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9800768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9800768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9800768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9800768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9800768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9800768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9800768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9800768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e98227b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e97efd7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e97efe25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e97ed8dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e97ed8dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e97ed8e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e97ed8d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e97ed8d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e97ed8d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e98366f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e9836787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e983660529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e98368afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc005788082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e97cfaf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x60,0x60,0x6c,0x75,0x67,0x67,0x61,0x67,0x65,0x60,0x60,0x60, Step #5: ```luggage``` Step #5: artifact_prefix='./'; Test unit written to ./oom-b6887048138c895d21c8fa7ee766f780e511a243 Step #5: Base64: YGBgbHVnZ2FnZWBgYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1589 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 140208256 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56545c2e9d60, 0x56545c4d271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56545c4d2720,0x56545e35c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6887048138c895d21c8fa7ee766f780e511a243' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1837 processed earlier; will process 9139 files now Step #5: #1 pulse cov: 3816 ft: 3817 exec/s: 0 rss: 165Mb Step #5: #2 pulse cov: 11434 ft: 12250 exec/s: 0 rss: 185Mb Step #5: ==57238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565452e2c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565459467728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56545944a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56545944a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565452e32652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565452d9342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565452d8dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565452e24595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x565455e538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x565455e538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x565455e538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x565455e538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x565455e538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x565455e538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x565455e538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x565455e538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x565455e538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x565455e538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56545805845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565454db4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565454dbf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565454b6ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565454b6ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565454b6b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565454b6a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565454b6a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565454b6a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56545944c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5654594557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56545943d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565459467fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4861cb0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565452d8c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x65,0x6e,0x74,0x72,0x69,0x61,0x22,0x3a,0x5b,0x5d,0x7d, Step #5: {\"entria\":[]} Step #5: artifact_prefix='./'; Test unit written to ./oom-17897d74682e7d2ad389a2322c3e6de2a8de159a Step #5: Base64: eyJlbnRyaWEiOltdfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1590 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 140784268 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cb91685d60, 0x55cb9186e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cb9186e720,0x55cb936f82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/17897d74682e7d2ad389a2322c3e6de2a8de159a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1840 processed earlier; will process 9136 files now Step #5: ==57274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cb881c82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cb8e803728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cb8e7e646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cb8e7e638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cb881ce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cb8812f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cb88129c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cb881c0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cb8b1ef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cb8b1ef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cb8b1ef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cb8b1ef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cb8b1ef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cb8b1ef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cb8b1ef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cb8b1ef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cb8b1ef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cb8b1ef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cb8d3f445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cb8a150578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cb8a15b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cb89f06d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cb89f06d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cb89f07808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cb89f06944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cb89f06944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cb89f06944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cb8e7e894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cb8e7f17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cb8e7d9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cb8e803fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1b572f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cb8812843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x27,0x3c,0x7b,0x27,0x3c,0x7b,0x27,0x3c,0x7b,0x27,0xa,0xa, Step #5: {'<{'<{'<{'\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-b9c7b60e9d59707b20c8942132f35c8fa69014c3 Step #5: Base64: eyc8eyc8eyc8eycKCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1591 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 141255333 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557775df9d60, 0x557775fe271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557775fe2720,0x557777e6c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b9c7b60e9d59707b20c8942132f35c8fa69014c3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1841 processed earlier; will process 9135 files now Step #5: ==57310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55776c93c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557772f77728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557772f5a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557772f5a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55776c942652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55776c8a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55776c89dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55776c934595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55776f9638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55776f9638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55776f9638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55776f9638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55776f9638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55776f9638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55776f9638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55776f9638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55776f9638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55776f9638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557771b6845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55776e8c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55776e8cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55776e67ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55776e67ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55776e67b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55776e67a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55776e67a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55776e67a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557772f5c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557772f657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557772f4d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557772f77fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff877092082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55776c89c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x2e,0x24,0x7c,0x7b,0x7c,0x2e,0x39,0x38,0x39,0x7d,0x24, Step #5: ^(.$|{|.989}$ Step #5: artifact_prefix='./'; Test unit written to ./oom-6e1b130e354b9cc456e8ef16960c65ad6163cc95 Step #5: Base64: XiguJHx7fC45ODl9JA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1592 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 141734235 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa6b4dbd60, 0x55aa6b6c471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa6b6c4720,0x55aa6d54e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6e1b130e354b9cc456e8ef16960c65ad6163cc95' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1842 processed earlier; will process 9134 files now Step #5: ==57346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa6201e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa68659728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa6863c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa6863c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa62024652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa61f8542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa61f7fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa62016595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa650458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa650458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa650458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa650458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa650458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa650458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa650458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa650458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa650458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa650458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa6724a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa63fa6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa63fb15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa63d5cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa63d5cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa63d5d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa63d5c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa63d5c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa63d5c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa6863e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa686477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa6862f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa68659fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a65832082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa61f7e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x6d,0x61,0x78,0x5f,0x37,0x3a,0x24,0x36, Step #5: $3::{max_7:$6 Step #5: artifact_prefix='./'; Test unit written to ./oom-58e9854d1c3da169466922ec3bb436cd0ad2b776 Step #5: Base64: JDM6OnttYXhfNzokNg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1593 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 142208185 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563cc809ed60, 0x563cc828771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563cc8287720,0x563cca1112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58e9854d1c3da169466922ec3bb436cd0ad2b776' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1843 processed earlier; will process 9133 files now Step #5: #1 pulse cov: 3583 ft: 3584 exec/s: 0 rss: 166Mb Step #5: #2 pulse cov: 4161 ft: 4353 exec/s: 0 rss: 167Mb Step #5: ==57382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563cbebe12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563cc521c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563cc51ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563cc51ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563cbebe7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563cbeb4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563cbeb42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563cbebd9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563cc1c088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563cc1c088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563cc1c088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563cc1c088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563cc1c088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563cc1c088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563cc1c088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563cc1c088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563cc1c088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563cc1c088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563cc3e0d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563cc0b69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563cc0b745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563cc091fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563cc091fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563cc0920808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563cc091f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563cc091f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563cc091f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563cc520194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563cc520a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563cc51f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563cc521cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c11eff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563cbeb4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7,0x5c,0x5f,0x5c,0x5f,0x5c,0x5f,0x20,0x30,0xde,0xad,0xbe,0xef, Step #5: \007\\_\\_\\_ 0\336\255\276\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-d52c95ccc329c7eb635f5834fb7d8f5893b62214 Step #5: Base64: B1xfXF9cXyAw3q2+7w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1594 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 142762602 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56369e57ad60, 0x56369e76371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56369e763720,0x5636a05ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d52c95ccc329c7eb635f5834fb7d8f5893b62214' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1846 processed earlier; will process 9130 files now Step #5: ==57418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5636950bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56369b6f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56369b6db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56369b6db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5636950c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56369502442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56369501ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5636950b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5636980e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5636980e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5636980e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5636980e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5636980e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5636980e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5636980e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5636980e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5636980e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5636980e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56369a2e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563697045578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5636970505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563696dfbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563696dfbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563696dfc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563696dfb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563696dfb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563696dfb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56369b6dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56369b6e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56369b6ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56369b6f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3657227082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56369501d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe0,0xbd,0xb1,0xe0,0xbd,0xb5,0xe0,0xbd,0xb5,0x40, Step #5: ws:\340\275\261\340\275\265\340\275\265@ Step #5: artifact_prefix='./'; Test unit written to ./oom-4b32863943d2d166c05bb466247a996d8148e815 Step #5: Base64: d3M64L2x4L214L21QA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1595 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 143244002 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d53035ad60, 0x55d53054371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d530543720,0x55d5323cd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4b32863943d2d166c05bb466247a996d8148e815' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1847 processed earlier; will process 9129 files now Step #5: #1 pulse cov: 3432 ft: 3433 exec/s: 0 rss: 167Mb Step #5: ==57454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d526e9d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d52d4d8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d52d4bb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d52d4bb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d526ea3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d526e0442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d526dfec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d526e95595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d529ec48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d529ec48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d529ec48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d529ec48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d529ec48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d529ec48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d529ec48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d529ec48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d529ec48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d529ec48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d52c0c945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d528e25578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d528e305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d528bdbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d528bdbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d528bdc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d528bdb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d528bdb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d528bdb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d52d4bd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d52d4c67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d52d4ae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d52d4d8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6493a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d526dfd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbb,0x88,0x77,0x84,0x5d,0xe0,0xbb,0x88,0xe4,0xbb,0xfd,0xf9, Step #5: \340\273\210w\204]\340\273\210\344\273\375\371 Step #5: artifact_prefix='./'; Test unit written to ./oom-6f8c366aeed6f6488dd38963badb2c73fcb31d0e Step #5: Base64: 4LuId4Rd4LuI5Lv9+Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1596 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 143759695 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5621ba9fbd60, 0x5621babe471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5621babe4720,0x5621bca6e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6f8c366aeed6f6488dd38963badb2c73fcb31d0e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1849 processed earlier; will process 9127 files now Step #5: ==57490== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5621b153e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5621b7b79728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5621b7b5c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5621b7b5c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5621b1544652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5621b14a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5621b149fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5621b1536595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5621b45658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5621b45658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5621b45658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5621b45658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5621b45658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5621b45658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5621b45658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5621b45658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5621b45658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5621b45658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5621b676a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5621b34c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5621b34d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5621b327cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5621b327cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5621b327d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5621b327c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5621b327c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5621b327c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5621b7b5e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5621b7b677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5621b7b4f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5621b7b79fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efdc0080082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5621b149e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x25,0x2f,0x0,0x0,0x24,0xf3,0x80,0xa0,0xaa,0x24,0x0,0x0, Step #5: \000%/\000\000$\363\200\240\252$\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-fedaf9149c645dd66667f3884ef136ca156c7cf3 Step #5: Base64: ACUvAAAk84CgqiQAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1597 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 144233562 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557068c6fd60, 0x557068e5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557068e58720,0x55706ace22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fedaf9149c645dd66667f3884ef136ca156c7cf3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1850 processed earlier; will process 9126 files now Step #5: ==57526== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55705f7b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557065ded728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557065dd046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557065dd038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55705f7b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55705f71942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55705f713c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55705f7aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570627d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570627d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570627d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570627d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570627d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570627d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570627d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570627d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570627d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570627d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5570649de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55706173a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570617455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5570614f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5570614f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5570614f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5570614f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5570614f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5570614f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557065dd294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557065ddb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557065dc3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557065dedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1344acf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55705f71243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0x5b,0x30,0x2e,0xb,0x30,0x2e, Step #5: trailer[0.\0130. Step #5: artifact_prefix='./'; Test unit written to ./oom-8bec9ce823c64988cb8fd58626d933e99293b42f Step #5: Base64: dHJhaWxlclswLgswLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1598 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 144714784 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56400ec59d60, 0x56400ee4271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56400ee42720,0x564010ccc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8bec9ce823c64988cb8fd58626d933e99293b42f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1851 processed earlier; will process 9125 files now Step #5: ==57562== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56400579c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56400bdd7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56400bdba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56400bdba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5640057a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56400570342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640056fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564005794595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5640087c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5640087c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5640087c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5640087c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5640087c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5640087c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5640087c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5640087c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5640087c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5640087c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56400a9c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564007724578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56400772f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5640074dad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5640074dad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5640074db808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5640074da944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5640074da944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5640074da944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56400bdbc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56400bdc57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56400bdad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56400bdd7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4d16be082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5640056fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x18,0xa,0x14,0xa,0x14,0x22,0x12,0x30,0x10,0x18,0x8,0x29, Step #5: \012\030\012\024\012\024\"\0220\020\030\010) Step #5: artifact_prefix='./'; Test unit written to ./oom-a3d7e4070d937efe30aba27bcc1dda8ccdd046b2 Step #5: Base64: ChgKFAoUIhIwEBgIKQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1599 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 145193257 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560aebf7cd60, 0x560aec16571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560aec165720,0x560aedfef2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a3d7e4070d937efe30aba27bcc1dda8ccdd046b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1852 processed earlier; will process 9124 files now Step #5: ==57598== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ae2abf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ae90fa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ae90dd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ae90dd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ae2ac5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ae2a2642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ae2a20c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ae2ab7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ae5ae68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ae5ae68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ae5ae68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ae5ae68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ae5ae68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ae5ae68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ae5ae68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ae5ae68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ae5ae68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ae5ae68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ae7ceb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ae4a47578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ae4a525a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ae47fdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ae47fdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ae47fe808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ae47fd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ae47fd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ae47fd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ae90df94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ae90e87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ae90d0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ae90fafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f32b8a79082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ae2a1f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3b,0xa,0x3d,0x24, Step #5: $=\012=\012=\012=\012;\012=$ Step #5: artifact_prefix='./'; Test unit written to ./oom-81edf5d4676f7168930065bee104d27d9f1df22f Step #5: Base64: JD0KPQo9Cj0KOwo9JA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1600 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 145679592 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561a5c163d60, 0x561a5c34c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561a5c34c720,0x561a5e1d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/81edf5d4676f7168930065bee104d27d9f1df22f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1853 processed earlier; will process 9123 files now Step #5: ==57634== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561a52ca62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561a592e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561a592c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561a592c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561a52cac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561a52c0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561a52c07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561a52c9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561a55ccd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561a55ccd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561a55ccd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561a55ccd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561a55ccd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561a55ccd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561a55ccd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561a55ccd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561a55ccd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561a55ccd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561a57ed245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561a54c2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561a54c395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561a549e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561a549e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561a549e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561a549e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561a549e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561a549e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561a592c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561a592cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561a592b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561a592e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b10441082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561a52c0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x32,0x31,0x34,0x37,0x34,0x38,0x33,0x36,0x34,0x35,0x2c,0x31, Step #5: -2147483645,1 Step #5: artifact_prefix='./'; Test unit written to ./oom-072ed86f6c72d56b148da247235ac7141c5d63c1 Step #5: Base64: LTIxNDc0ODM2NDUsMQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1601 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 146153466 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642bf7afd60, 0x5642bf99871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642bf998720,0x5642c18222c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/072ed86f6c72d56b148da247235ac7141c5d63c1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1854 processed earlier; will process 9122 files now Step #5: ==57670== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5642b62f22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5642bc92d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5642bc91046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5642bc91038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5642b62f8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5642b625942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5642b6253c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5642b62ea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5642b93198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5642b93198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5642b93198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5642b93198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5642b93198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5642b93198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5642b93198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5642b93198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5642b93198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5642b93198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5642bb51e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5642b827a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642b82855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5642b8030d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5642b8030d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5642b8031808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5642b8030944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5642b8030944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5642b8030944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5642bc91294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642bc91b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5642bc903529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5642bc92dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9a5b54a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5642b625243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x7e,0x7e,0x3c,0xdb,0xbe,0x7e,0x7e,0x7e,0x86,0x12,0x25,0x73, Step #5: ~~~<\333\276~~~\206\022%s Step #5: artifact_prefix='./'; Test unit written to ./oom-ab794bdf65c4eb80756bffeea4f2987afc064d93 Step #5: Base64: fn5+PNu+fn5+hhIlcw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1602 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 146641129 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b5a28cd60, 0x557b5a47571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b5a475720,0x557b5c2ff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab794bdf65c4eb80756bffeea4f2987afc064d93' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1855 processed earlier; will process 9121 files now Step #5: ==57706== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b50dcf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b5740a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b573ed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b573ed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b50dd5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b50d3642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b50d30c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b50dc7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b53df68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b53df68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b53df68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b53df68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b53df68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b53df68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b53df68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b53df68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b53df68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b53df68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557b55ffb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b52d57578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b52d625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b52b0dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b52b0dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b52b0e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b52b0d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b52b0d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b52b0d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b573ef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b573f87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b573e0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b5740afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f297b970082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b50d2f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xab,0x91,0xcd,0x84,0xc2,0xbc,0xe3,0x8d,0xbf,0xe3,0x89,0xbc, Step #5: \357\253\221\315\204\302\274\343\215\277\343\211\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-3c108694c1cfe08fc472497683f2a577d63aef84 Step #5: Base64: 76uRzYTCvOONv+OJvA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1603 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 147129248 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561596609d60, 0x5615967f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5615967f2720,0x56159867c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3c108694c1cfe08fc472497683f2a577d63aef84' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1856 processed earlier; will process 9120 files now Step #5: ==57742== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56158d14c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561593787728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56159376a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56159376a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56158d152652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56158d0b342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56158d0adc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56158d144595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615901738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615901738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615901738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615901738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615901738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615901738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615901738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615901738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615901738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615901738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56159237845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56158f0d4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56158f0df5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56158ee8ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56158ee8ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56158ee8b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56158ee8a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56158ee8a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56158ee8a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56159376c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5615937757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56159375d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561593787fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f40df242082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56158d0ac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x5b,0x63,0xe,0x68,0x43,0xdd,0xa2,0xda,0xae,0xa5,0x70, Step #5: \000\000[c\016hC\335\242\332\256\245p Step #5: artifact_prefix='./'; Test unit written to ./oom-b07e74ed9b294cb41ed1e07037a5cdbf881657b6 Step #5: Base64: AABbYw5oQ92i2q6lcA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1604 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 147614624 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565240837d60, 0x565240a2071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565240a20720,0x5652428aa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b07e74ed9b294cb41ed1e07037a5cdbf881657b6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1857 processed earlier; will process 9119 files now Step #5: ==57778== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56523737a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56523d9b5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56523d99846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56523d99838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565237380652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5652372e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5652372dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565237372595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56523a3a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56523a3a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56523a3a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56523a3a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56523a3a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56523a3a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56523a3a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56523a3a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56523a3a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56523a3a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56523c5a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565239302578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56523930d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5652390b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5652390b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5652390b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5652390b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5652390b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5652390b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56523d99a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56523d9a37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56523d98b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56523d9b5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd73ba93082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5652372da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x69,0x67,0x72,0x41,0x70,0x68,0x7b,0x77,0x75,0x3d,0x62,0x7d, Step #5: digrAph{wu=b} Step #5: artifact_prefix='./'; Test unit written to ./oom-3b0af98f8e036ebdd533ab384f5f2f516d6fe2ba Step #5: Base64: ZGlnckFwaHt3dT1ifQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1605 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 148086990 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5624602a8d60, 0x56246049171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562460491720,0x56246231b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3b0af98f8e036ebdd533ab384f5f2f516d6fe2ba' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1858 processed earlier; will process 9118 files now Step #5: ==57814== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562456deb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56245d426728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56245d40946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56245d40938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562456df1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562456d5242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562456d4cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562456de3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562459e128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562459e128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562459e128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562459e128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562459e128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562459e128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562459e128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562459e128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562459e128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562459e128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56245c01745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562458d73578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562458d7e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562458b29d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562458b29d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562458b2a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562458b29944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562458b29944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562458b29944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56245d40b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56245d4147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56245d3fc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56245d426fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd77f99b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562456d4b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x32,0x31,0x34,0x37,0x34,0x38,0x33,0x36,0x30,0x39,0x2c,0x32, Step #5: -2147483609,2 Step #5: artifact_prefix='./'; Test unit written to ./oom-00072aef9b99355fb86bbfe4796700f3b71b1a6f Step #5: Base64: LTIxNDc0ODM2MDksMg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1606 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 148579577 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc62a7ed60, 0x55dc62c6771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc62c67720,0x55dc64af12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00072aef9b99355fb86bbfe4796700f3b71b1a6f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1859 processed earlier; will process 9117 files now Step #5: ==57850== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc595c12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc5fbfc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc5fbdf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc5fbdf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc595c7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc5952842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc59522c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc595b9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc5c5e88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc5c5e88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc5c5e88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc5c5e88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc5c5e88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc5c5e88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc5c5e88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc5c5e88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc5c5e88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc5c5e88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc5e7ed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc5b549578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc5b5545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc5b2ffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc5b2ffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc5b300808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc5b2ff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc5b2ff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc5b2ff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc5fbe194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc5fbea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc5fbd2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc5fbfcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feee1fdb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc5952143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x58,0x2e,0x73,0x6c,0x69,0x63,0x65,0xa,0x74,0x6d,0x70,0x72, Step #5: \012X.slice\012tmpr Step #5: artifact_prefix='./'; Test unit written to ./oom-8df1df9dd4f8acfb014d00bd7aca73163cea3338 Step #5: Base64: Clguc2xpY2UKdG1wcg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1607 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 149055145 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562918c7ad60, 0x562918e6371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562918e63720,0x56291aced2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8df1df9dd4f8acfb014d00bd7aca73163cea3338' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1860 processed earlier; will process 9116 files now Step #5: ==57886== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56290f7bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562915df8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562915ddb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562915ddb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56290f7c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56290f72442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56290f71ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56290f7b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629127e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629127e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629127e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629127e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629127e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629127e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629127e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629127e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629127e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629127e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5629149e945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562911745578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5629117505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5629114fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5629114fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5629114fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5629114fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5629114fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5629114fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562915ddd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562915de67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562915dce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562915df8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f26eda8b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56290f71d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x4d,0x50,0x4f,0x52,0x54,0x7b,0x62,0x75,0x7d,0x3d,0x22,0x22, Step #5: IMPORT{bu}=\"\" Step #5: artifact_prefix='./'; Test unit written to ./oom-bc56b0a4555830b6ec641e245d0f4e8244f3d9d2 Step #5: Base64: SU1QT1JUe2J1fT0iIg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1608 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 149527158 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55850a2abd60, 0x55850a49471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55850a494720,0x55850c31e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bc56b0a4555830b6ec641e245d0f4e8244f3d9d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1861 processed earlier; will process 9115 files now Step #5: ==57922== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558500dee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558507429728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55850740c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55850740c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558500df4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558500d5542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558500d4fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558500de6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558503e158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558503e158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558503e158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558503e158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558503e158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558503e158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558503e158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558503e158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558503e158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558503e158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55850601a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558502d76578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558502d815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558502b2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558502b2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558502b2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558502b2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558502b2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558502b2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55850740e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585074177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585073ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558507429fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f23636c1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558500d4e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x24,0x0,0x0,0x0,0x9,0x7c,0xa,0x0,0x24,0xa,0x7c,0x2f, Step #5: \000$\000\000\000\011|\012\000$\012|/ Step #5: artifact_prefix='./'; Test unit written to ./oom-bf02ecdf37eacde9b6e1a9c6555488ef583077bd Step #5: Base64: ACQAAAAJfAoAJAp8Lw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1609 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 150022849 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e19655ed60, 0x55e19674771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e196747720,0x55e1985d12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bf02ecdf37eacde9b6e1a9c6555488ef583077bd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1862 processed earlier; will process 9114 files now Step #5: ==57958== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e18d0a12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1936dc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1936bf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1936bf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e18d0a7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e18d00842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e18d002c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e18d099595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1900c88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1900c88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1900c88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1900c88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1900c88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1900c88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1900c88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1900c88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1900c88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1900c88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1922cd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e18f029578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e18f0345a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e18eddfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e18eddfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e18ede0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e18eddf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e18eddf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e18eddf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1936c194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1936ca7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1936b2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1936dcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a1a53f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e18d00143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xf0,0xab,0x9f,0xbf, Step #5: \357\267\272\357\267\272\357\267\272\360\253\237\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-df82fce608e233afa96c028063371ec9cb8f6a0c Step #5: Base64: 77e677e677e68Kufvw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1610 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 150516042 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d8cd2c6d60, 0x55d8cd4af71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d8cd4af720,0x55d8cf3392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/df82fce608e233afa96c028063371ec9cb8f6a0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1863 processed earlier; will process 9113 files now Step #5: ==57994== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d8c3e092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d8ca444728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d8ca42746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d8ca42738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d8c3e0f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d8c3d7042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d8c3d6ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d8c3e01595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d8c6e308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d8c6e308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d8c6e308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d8c6e308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d8c6e308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d8c6e308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d8c6e308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d8c6e308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d8c6e308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d8c6e308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d8c903545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d8c5d91578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d8c5d9c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d8c5b47d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d8c5b47d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d8c5b48808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d8c5b47944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d8c5b47944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d8c5b47944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d8ca42994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d8ca4327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d8ca41a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d8ca444fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ff5a83082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d8c3d6943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xe2,0x85,0x8c,0x3e,0x3c,0xe2,0x85,0x80,0x3c,0xe2,0x85,0x8c, Step #5: <\342\205\214><\342\205\200<\342\205\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-b40bece7a9ac34eb1ee5e71494151dd889d32e8c Step #5: Base64: POKFjD484oWAPOKFjA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1611 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 150990925 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556c029d3d60, 0x556c02bbc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556c02bbc720,0x556c04a462c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b40bece7a9ac34eb1ee5e71494151dd889d32e8c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1864 processed earlier; will process 9112 files now Step #5: ==58030== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556bf95162d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556bffb51728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556bffb3446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556bffb3438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556bf951c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556bf947d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556bf9477c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556bf950e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556bfc53d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556bfc53d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556bfc53d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556bfc53d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556bfc53d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556bfc53d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556bfc53d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556bfc53d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556bfc53d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556bfc53d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556bfe74245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556bfb49e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556bfb4a95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556bfb254d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556bfb254d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556bfb255808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556bfb254944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556bfb254944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556bfb254944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556bffb3694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556bffb3f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556bffb27529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556bffb51fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9597f1b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556bf947643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x9,0x79,0x2d,0xa,0xa,0xa,0x2d,0xa,0x2d,0xa,0x2f,0x8,0xa, Step #5: \011y-\012\012\012-\012-\012/\010\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-c8c44cb5ae77b025d08d3f0ddd5dfc557f713669 Step #5: Base64: CXktCgoKLQotCi8ICg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1612 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 151475301 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fe01193d60, 0x55fe0137c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fe0137c720,0x55fe032062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c8c44cb5ae77b025d08d3f0ddd5dfc557f713669' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1865 processed earlier; will process 9111 files now Step #5: ==58066== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fdf7cd62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fdfe311728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fdfe2f446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fdfe2f438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fdf7cdc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fdf7c3d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fdf7c37c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fdf7cce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fdfacfd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fdfacfd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fdfacfd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fdfacfd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fdfacfd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fdfacfd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fdfacfd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fdfacfd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fdfacfd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fdfacfd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fdfcf0245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fdf9c5e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fdf9c695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fdf9a14d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fdf9a14d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fdf9a15808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fdf9a14944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fdf9a14944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fdf9a14944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fdfe2f694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fdfe2ff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fdfe2e7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fdfe311fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6fae51a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fdf7c3643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x84,0x82,0xe1,0x85,0xac,0xa,0xe1,0x84,0x82,0xe1,0x85,0xac, Step #5: \341\204\202\341\205\254\012\341\204\202\341\205\254 Step #5: artifact_prefix='./'; Test unit written to ./oom-9e1ff99a22cd92eb7b45f67e4b514824027b3baa Step #5: Base64: 4YSC4YWsCuGEguGFrA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1613 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 151960011 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b72bb26d60, 0x55b72bd0f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b72bd0f720,0x55b72db992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9e1ff99a22cd92eb7b45f67e4b514824027b3baa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1866 processed earlier; will process 9110 files now Step #5: ==58102== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7226692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b728ca4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b728c8746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b728c8738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b72266f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7225d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7225cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b722661595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7256908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7256908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7256908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7256908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7256908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7256908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7256908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7256908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7256908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7256908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b72789545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7245f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7245fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7243a7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7243a7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7243a8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7243a7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7243a7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7243a7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b728c8994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b728c927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b728c7a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b728ca4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2400c40082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7225c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0xf0,0x91,0x91,0x82,0xf0,0x91,0x91,0x82,0xcc,0x98,0xcc,0xb8, Step #5: .\360\221\221\202\360\221\221\202\314\230\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-d26e33dbffc6a53c85b1bb3fa7b9552d7b3e6dd1 Step #5: Base64: LvCRkYLwkZGCzJjMuA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1614 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 152446651 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b879ba2d60, 0x55b879d8b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b879d8b720,0x55b87bc152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d26e33dbffc6a53c85b1bb3fa7b9552d7b3e6dd1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1867 processed earlier; will process 9109 files now Step #5: ==58138== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8706e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b876d20728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b876d0346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b876d0338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8706eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b87064c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b870646c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8706dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b87370c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b87370c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b87370c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b87370c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b87370c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b87370c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b87370c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b87370c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b87370c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b87370c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b87591145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b87266d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8726785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b872423d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b872423d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b872424808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b872423944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b872423944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b872423944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b876d0594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b876d0e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b876cf6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b876d20fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fca0f1e9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b87064543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x45,0x78,0x65,0x63,0x5d,0xa,0x55,0x73,0x65,0x72,0x3d,0x17, Step #5: [Exec]\012User=\027 Step #5: artifact_prefix='./'; Test unit written to ./oom-c9b4dbb35f5d9760739268e7ef4a4df2380a337c Step #5: Base64: W0V4ZWNdClVzZXI9Fw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1615 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 152930087 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56160ea9ed60, 0x56160ec8771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56160ec87720,0x561610b112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9b4dbb35f5d9760739268e7ef4a4df2380a337c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1868 processed earlier; will process 9108 files now Step #5: ==58174== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616055e12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56160bc1c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56160bbff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56160bbff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616055e7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56160554842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561605542c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616055d9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616086088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616086088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616086088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616086088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616086088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616086088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616086088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616086088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616086088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616086088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56160a80d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561607569578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616075745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56160731fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56160731fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561607320808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56160731f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56160731f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56160731f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56160bc0194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56160bc0a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56160bbf2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56160bc1cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd62d291082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56160554143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x61,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5, Step #5: ws:a\341\254\265\341\254\265\341\254\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-774485356888df1ee8351add7e1b4a8dafed997b Step #5: Base64: d3M6YeGsteGsteGstQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1616 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 153402987 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d330842d60, 0x55d330a2b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d330a2b720,0x55d3328b52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/774485356888df1ee8351add7e1b4a8dafed997b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1869 processed earlier; will process 9107 files now Step #5: #1 pulse cov: 3636 ft: 3637 exec/s: 0 rss: 167Mb Step #5: ==58210== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d3273852d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d32d9c0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d32d9a346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d32d9a338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d32738b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d3272ec42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d3272e6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d32737d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d32a3ac8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d32a3ac8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d32a3ac8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d32a3ac8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d32a3ac8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d32a3ac8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d32a3ac8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d32a3ac8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d32a3ac8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d32a3ac8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d32c5b145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d32930d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d3293185a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d3290c3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d3290c3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d3290c4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d3290c3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d3290c3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d3290c3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d32d9a594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d32d9ae7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d32d996529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d32d9c0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f245d84d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d3272e543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4,0x5c,0x24,0x5c,0x24,0x5c,0x24,0xb,0x5c,0xde,0xad,0xbe,0xef, Step #5: \004\\$\\$\\$\013\\\336\255\276\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-eb3f9ca306539250db23a1736cd1be23d587666d Step #5: Base64: BFwkXCRcJAtc3q2+7w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1617 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 153928935 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a2d1b96d60, 0x55a2d1d7f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a2d1d7f720,0x55a2d3c092c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eb3f9ca306539250db23a1736cd1be23d587666d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1871 processed earlier; will process 9105 files now Step #5: ==58246== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a2c86d92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a2ced14728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a2cecf746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a2cecf738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a2c86df652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a2c864042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a2c863ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a2c86d1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a2cb7008c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a2cb7008c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a2cb7008c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a2cb7008c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a2cb7008c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a2cb7008c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a2cb7008c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a2cb7008c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a2cb7008c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a2cb7008c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a2cd90545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a2ca661578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a2ca66c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a2ca417d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a2ca417d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a2ca418808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a2ca417944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a2ca417944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a2ca417944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a2cecf994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2ced027b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a2cecea529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a2ced14fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efcb3dcb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a2c863943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x1,0x0,0x10,0x2d,0x4a,0x2d,0x20,0x0,0x10,0x2d,0x4a,0x2d,0x20, Step #5: \000\001\000\020-J- \000\020-J- Step #5: artifact_prefix='./'; Test unit written to ./oom-27c14a368f04734dd0eff9fe073bdef7f131a8f1 Step #5: Base64: AAEAEC1KLSAAEC1KLSA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1618 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 154413638 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5561ab0a5d60, 0x5561ab28e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5561ab28e720,0x5561ad1182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/27c14a368f04734dd0eff9fe073bdef7f131a8f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1872 processed earlier; will process 9104 files now Step #5: ==58282== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5561a1be82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5561a8223728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5561a820646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5561a820638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5561a1bee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5561a1b4f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5561a1b49c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5561a1be0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5561a4c0f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5561a4c0f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5561a4c0f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5561a4c0f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5561a4c0f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5561a4c0f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5561a4c0f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5561a4c0f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5561a4c0f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5561a4c0f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5561a6e1445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5561a3b70578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5561a3b7b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5561a3926d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5561a3926d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5561a3927808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5561a3926944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5561a3926944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5561a3926944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5561a820894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5561a82117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5561a81f9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5561a8223fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f209bd07082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5561a1b4843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0x60,0xa,0x24,0x60,0x60,0xa,0x60,0xa,0x24,0x60,0x60,0xa,0x24, Step #5: h`\012$``\012`\012$``\012$ Step #5: artifact_prefix='./'; Test unit written to ./oom-d73f47bbc48c4acc841e3dce30554c6f5cccaaa9 Step #5: Base64: aGAKJGBgCmAKJGBgCiQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1619 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 155019957 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c7882f1d60, 0x55c7884da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c7884da720,0x55c78a3642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d73f47bbc48c4acc841e3dce30554c6f5cccaaa9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1873 processed earlier; will process 9103 files now Step #5: ==58318== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c77ee342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c78546f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c78545246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c78545238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c77ee3a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c77ed9b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c77ed95c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c77ee2c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c781e5b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c781e5b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c781e5b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c781e5b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c781e5b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c781e5b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c781e5b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c781e5b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c781e5b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c781e5b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c78406045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c780dbc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c780dc75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c780b72d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c780b72d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c780b73808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c780b72944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c780b72944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c780b72944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c78545494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c78545d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c785445529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c78546ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2c464fe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c77ed9443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0xb,0x2f,0xb, Step #5: /**********\013/\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-93552623d68e12b4838b18e3cc940221f3bfee40 Step #5: Base64: LyoqKioqKioqKioLLws= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1620 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 155482281 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b5eed9ad60, 0x55b5eef8371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b5eef83720,0x55b5f0e0d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/93552623d68e12b4838b18e3cc940221f3bfee40' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1874 processed earlier; will process 9102 files now Step #5: ==58354== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b5e58dd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b5ebf18728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b5ebefb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b5ebefb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b5e58e3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b5e584442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b5e583ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b5e58d5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b5e89048c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b5e89048c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b5e89048c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b5e89048c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b5e89048c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b5e89048c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b5e89048c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b5e89048c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b5e89048c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b5e89048c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b5eab0945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b5e7865578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b5e78705a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b5e761bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b5e761bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b5e761c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b5e761b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b5e761b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b5e761b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b5ebefd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b5ebf067b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b5ebeee529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b5ebf18fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9de529c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b5e583d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0x54,0x2c,0x1,0x41,0x54,0xcd,0x8f,0xba,0x48,0x2,0x5b,0xbf,0xdf, Step #5: TT,\001AT\315\217\272H\002[\277\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-9368ece04f0dff5005b0bbbd042e20e2172db8fb Step #5: Base64: VFQsAUFUzY+6SAJbv98= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1621 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 155966793 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563aa3560d60, 0x563aa374971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563aa3749720,0x563aa55d32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9368ece04f0dff5005b0bbbd042e20e2172db8fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1875 processed earlier; will process 9101 files now Step #5: ==58390== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563a9a0a32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563aa06de728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563aa06c146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563aa06c138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563a9a0a9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563a9a00a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563a9a004c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563a9a09b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563a9d0ca8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563a9d0ca8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563a9d0ca8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563a9d0ca8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563a9d0ca8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563a9d0ca8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563a9d0ca8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563a9d0ca8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563a9d0ca8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563a9d0ca8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563a9f2cf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563a9c02b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563a9c0365a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563a9bde1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563a9bde1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563a9bde2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563a9bde1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563a9bde1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563a9bde1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563aa06c394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563aa06cc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563aa06b4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563aa06defa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd9a0b44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563a9a00343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x2e,0x0,0x0,0xdd,0x8a,0x2f,0x20,0x0,0xdd,0x8a,0x2f,0x5b,0xb, Step #5: \000.\000\000\335\212/ \000\335\212/[\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-4504c4e462d2906b245ec92a95e8a07bf3a82bce Step #5: Base64: AC4AAN2KLyAA3YovWws= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1622 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 156457200 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558e80d5dd60, 0x558e80f4671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558e80f46720,0x558e82dd02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4504c4e462d2906b245ec92a95e8a07bf3a82bce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1876 processed earlier; will process 9100 files now Step #5: ==58426== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558e778a02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558e7dedb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558e7debe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558e7debe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558e778a6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558e7780742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558e77801c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558e77898595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558e7a8c78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558e7a8c78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558e7a8c78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558e7a8c78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558e7a8c78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558e7a8c78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558e7a8c78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558e7a8c78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558e7a8c78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558e7a8c78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558e7cacc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558e79828578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558e798335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558e795ded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558e795ded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558e795df808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558e795de944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558e795de944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558e795de944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558e7dec094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558e7dec97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558e7deb1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558e7dedbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9759abd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558e7780043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x6d,0x60,0x78,0x5f,0xa,0x3d,0xa,0x3d,0xa,0x60, Step #5: ID3\003m`x_\012=\012=\012` Step #5: artifact_prefix='./'; Test unit written to ./oom-4752d6e76f7de0d99dd550f9edf17eaf36967408 Step #5: Base64: SUQzA21geF8KPQo9CmA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1623 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 157074818 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f733d60d60, 0x55f733f4971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f733f49720,0x55f735dd32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4752d6e76f7de0d99dd550f9edf17eaf36967408' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1877 processed earlier; will process 9099 files now Step #5: ==58462== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f72a8a32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f730ede728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f730ec146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f730ec138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f72a8a9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f72a80a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f72a804c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f72a89b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f72d8ca8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f72d8ca8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f72d8ca8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f72d8ca8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f72d8ca8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f72d8ca8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f72d8ca8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f72d8ca8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f72d8ca8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f72d8ca8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f72facf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f72c82b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f72c8365a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f72c5e1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f72c5e1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f72c5e2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f72c5e1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f72c5e1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f72c5e1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f730ec394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f730ecc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f730eb4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f730edefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f13755ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f72a80343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3b,0x60,0x60,0x60,0xd,0xe0,0xbf,0xad,0xd,0xd,0xd,0x60,0x60,0x60, Step #5: ;```\015\340\277\255\015\015\015``` Step #5: artifact_prefix='./'; Test unit written to ./oom-b708fba9fef58175055c4e4ce62796083cbecf71 Step #5: Base64: O2BgYA3gv60NDQ1gYGA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1624 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 157698451 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f7d7122d60, 0x55f7d730b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f7d730b720,0x55f7d91952c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b708fba9fef58175055c4e4ce62796083cbecf71' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1878 processed earlier; will process 9098 files now Step #5: ==58498== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7cdc652d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7d42a0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7d428346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7d428338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f7cdc6b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7cdbcc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7cdbc6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f7cdc5d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7d0c8c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7d0c8c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7d0c8c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7d0c8c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7d0c8c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7d0c8c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7d0c8c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7d0c8c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7d0c8c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7d0c8c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7d2e9145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f7cfbed578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7cfbf85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7cf9a3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7cf9a3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7cf9a4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7cf9a3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7cf9a3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7cf9a3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7d428594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7d428e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7d4276529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7d42a0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f40463a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7cdbc543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x10,0x0,0x6,0x4d,0x51,0x49,0x73,0x64,0x70,0x3,0x5,0x26, Step #5: \000\000\020\000\006MQIsdp\003\005& Step #5: artifact_prefix='./'; Test unit written to ./oom-b5e1dafd144f8e899077a8ebdf3deda886538837 Step #5: Base64: AAAQAAZNUUlzZHADBSY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1625 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 158230958 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0296a5d60, 0x55c02988e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c02988e720,0x55c02b7182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5e1dafd144f8e899077a8ebdf3deda886538837' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1879 processed earlier; will process 9097 files now Step #5: ==58534== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0201e82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c026823728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c02680646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c02680638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c0201ee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c02014f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c020149c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c0201e0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c02320f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c02320f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c02320f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c02320f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c02320f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c02320f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c02320f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c02320f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c02320f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c02320f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c02541445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c022170578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c02217b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c021f26d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c021f26d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c021f27808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c021f26944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c021f26944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c021f26944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c02680894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0268117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0267f9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c026823fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff04f34a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c02014843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x66,0x7c,0x7c,0x6f,0x77,0x30,0x2f,0x77,0x6c,0x65,0x66,0x2f,0x2f, Step #5: f||ow0/wlef// Step #5: artifact_prefix='./'; Test unit written to ./oom-a0729b84ed065cf3b2b082a02d7c0d14769d917c Step #5: Base64: IGZ8fG93MC93bGVmLy8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1626 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 158745258 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f675e51d60, 0x55f67603a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f67603a720,0x55f677ec42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a0729b84ed065cf3b2b082a02d7c0d14769d917c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1880 processed earlier; will process 9096 files now Step #5: ==58570== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f66c9942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f672fcf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f672fb246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f672fb238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f66c99a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f66c8fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f66c8f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f66c98c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f66f9bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f66f9bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f66f9bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f66f9bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f66f9bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f66f9bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f66f9bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f66f9bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f66f9bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f66f9bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f671bc045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f66e91c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f66e9275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f66e6d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f66e6d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f66e6d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f66e6d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f66e6d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f66e6d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f672fb494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f672fbd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f672fa5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f672fcffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f706b3e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f66c8f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x58,0xc,0x2b,0xf0,0x9d,0x9f,0x96,0x30,0xf0,0x9d,0x9f,0x9a,0x33,0x29, Step #5: X\014+\360\235\237\2260\360\235\237\2323) Step #5: artifact_prefix='./'; Test unit written to ./oom-cc0a413a182d35e951d68c3bee8d20fec1670698 Step #5: Base64: WAwr8J2fljDwnZ+aMyk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1627 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 159252728 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560af8357d60, 0x560af854071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560af8540720,0x560afa3ca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc0a413a182d35e951d68c3bee8d20fec1670698' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1881 processed earlier; will process 9095 files now Step #5: ==58606== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560aeee9a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560af54d5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560af54b846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560af54b838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560aeeea0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560aeee0142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560aeedfbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560aeee92595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560af1ec18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560af1ec18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560af1ec18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560af1ec18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560af1ec18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560af1ec18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560af1ec18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560af1ec18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560af1ec18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560af1ec18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560af40c645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560af0e22578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560af0e2d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560af0bd8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560af0bd8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560af0bd9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560af0bd8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560af0bd8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560af0bd8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560af54ba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560af54c37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560af54ab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560af54d5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f134559a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560aeedfa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x81,0xdb,0x80,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0x37,0x37,0x39, Step #5: \333\201\333\2004294967779 Step #5: artifact_prefix='./'; Test unit written to ./oom-a210b85d74a0d2d87051066edc211c21e51735eb Step #5: Base64: 24HbgDQyOTQ5Njc3Nzk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1628 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 159774088 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e2169d0d60, 0x55e216bb971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e216bb9720,0x55e218a432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a210b85d74a0d2d87051066edc211c21e51735eb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1882 processed earlier; will process 9094 files now Step #5: #1 pulse cov: 3693 ft: 3694 exec/s: 0 rss: 166Mb Step #5: #2 pulse cov: 4015 ft: 4198 exec/s: 0 rss: 167Mb Step #5: ==58642== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e20d5132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e213b4e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e213b3146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e213b3138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e20d519652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e20d47a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e20d474c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e20d50b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e21053a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e21053a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e21053a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e21053a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e21053a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e21053a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e21053a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e21053a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e21053a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e21053a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e21273f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e20f49b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e20f4a65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e20f251d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e20f251d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e20f252808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e20f251944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e20f251944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e20f251944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e213b3394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e213b3c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e213b24529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e213b4efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f87bff32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e20d47343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0xa9,0xd4,0xa9,0xc9,0xa9,0xcd,0xa9,0xcd,0xa9,0xc9,0xa2,0x3f,0x6e, Step #5: \315\251\324\251\311\251\315\251\315\251\311\242?n Step #5: artifact_prefix='./'; Test unit written to ./oom-50fcde72c5ea8c8f0114a21fea60b5bef5b9eaa9 Step #5: Base64: zanUqcmpzanNqcmiP24= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1629 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 160413596 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563250643d60, 0x56325082c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56325082c720,0x5632526b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/50fcde72c5ea8c8f0114a21fea60b5bef5b9eaa9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1886 processed earlier; will process 9090 files now Step #5: ==58678== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5632471862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56324d7c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56324d7a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56324d7a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56324718c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5632470ed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5632470e7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56324717e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56324a1ad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56324a1ad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56324a1ad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56324a1ad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56324a1ad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56324a1ad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56324a1ad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56324a1ad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56324a1ad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56324a1ad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56324c3b245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56324910e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5632491195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563248ec4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563248ec4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563248ec5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563248ec4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563248ec4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563248ec4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56324d7a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56324d7af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56324d797529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56324d7c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd34925082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5632470e643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x45,0x6c,0x65,0x63,0x54,0x23,0x30,0x6f,0x35,0x23,0x30,0x6f,0x30, Step #5: SElecT#0o5#0o0 Step #5: artifact_prefix='./'; Test unit written to ./oom-1540c978586e8efa8b591a1a7bebae6152dc0fc1 Step #5: Base64: U0VsZWNUIzBvNSMwbzA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1630 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 160923417 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a492873d60, 0x55a492a5c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a492a5c720,0x55a4948e62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1540c978586e8efa8b591a1a7bebae6152dc0fc1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1887 processed earlier; will process 9089 files now Step #5: ==58714== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4893b62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a48f9f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a48f9d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a48f9d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4893bc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a48931d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a489317c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a4893ae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a48c3dd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a48c3dd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a48c3dd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a48c3dd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a48c3dd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a48c3dd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a48c3dd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a48c3dd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a48c3dd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a48c3dd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a48e5e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a48b33e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a48b3495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a48b0f4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a48b0f4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a48b0f5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a48b0f4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a48b0f4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a48b0f4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a48f9d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a48f9df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a48f9c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a48f9f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f20bd9a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a48931643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5d,0xa,0x5c,0xa,0xb,0x3d,0xa,0x5c,0xa,0xb,0x3d,0xa,0x3d, Step #5: []\012\\\012\013=\012\\\012\013=\012= Step #5: artifact_prefix='./'; Test unit written to ./oom-ebde1da2b6bae3247b7df4f503ffa196155b6bd7 Step #5: Base64: W10KXAoLPQpcCgs9Cj0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1631 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 161437099 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5583797ded60, 0x5583799c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5583799c7720,0x55837b8512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ebde1da2b6bae3247b7df4f503ffa196155b6bd7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1888 processed earlier; will process 9088 files now Step #5: ==58750== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583703212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55837695c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55837693f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55837693f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558370327652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55837028842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558370282c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558370319595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583733488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583733488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583733488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583733488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583733488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583733488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583733488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583733488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583733488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583733488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55837554d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5583722a9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5583722b45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55837205fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55837205fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558372060808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55837205f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55837205f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55837205f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55837694194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55837694a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558376932529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55837695cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e49851082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55837028143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xa,0x9,0xa,0x60,0x2d,0x0,0x60,0x20,0x20,0x20,0x60,0xa,0x9, Step #5: `\012\011\012`-\000` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-2fb36d44f302385d56455fcf5f536f13d83d0f69 Step #5: Base64: YAoJCmAtAGAgICBgCgk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1632 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 162086149 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56410a9e6d60, 0x56410abcf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56410abcf720,0x56410ca592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2fb36d44f302385d56455fcf5f536f13d83d0f69' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1889 processed earlier; will process 9087 files now Step #5: ==58786== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5641015292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564107b64728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564107b4746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564107b4738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56410152f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56410149042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56410148ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564101521595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5641045508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5641045508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5641045508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5641045508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5641045508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5641045508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5641045508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5641045508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5641045508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5641045508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56410675545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5641034b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5641034bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564103267d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564103267d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564103268808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564103267944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564103267944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564103267944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564107b4994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564107b527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564107b3a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564107b64fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb63bf28082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56410148943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9d,0x85,0xae,0xf0,0x9d,0x85,0xa8,0xf0,0x9d,0x85,0xa8,0xcc,0x8f, Step #5: \360\235\205\256\360\235\205\250\360\235\205\250\314\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-83b85fe8d6236bbb5cb1600b647b7fe68ec98d27 Step #5: Base64: 8J2FrvCdhajwnYWozI8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1633 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 162610168 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561680a1dd60, 0x561680c0671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561680c06720,0x561682a902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/83b85fe8d6236bbb5cb1600b647b7fe68ec98d27' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1890 processed earlier; will process 9086 files now Step #5: ==58822== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616775602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56167db9b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56167db7e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56167db7e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561677566652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616774c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616774c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561677558595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56167a5878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56167a5878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56167a5878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56167a5878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56167a5878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56167a5878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56167a5878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56167a5878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56167a5878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56167a5878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56167c78c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616794e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616794f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56167929ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56167929ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56167929f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56167929e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56167929e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56167929e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56167db8094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56167db897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56167db71529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56167db9bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f21de404082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616774c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x49,0x4c,0x45,0x20,0x69,0x20,0x42,0x49,0x4e,0x51,0x52,0x41,0xa, Step #5: FILE i BINQRA\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-d541150abb9c4a6cf9ccc10add2cfe6d30129606 Step #5: Base64: RklMRSBpIEJJTlFSQQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1634 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 163122122 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560bb2c2d60, 0x5560bb4ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560bb4ab720,0x5560bd3352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d541150abb9c4a6cf9ccc10add2cfe6d30129606' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1891 processed earlier; will process 9085 files now Step #5: ==58858== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560b1e052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560b8440728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560b842346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560b842338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560b1e0b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560b1d6c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560b1d66c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560b1dfd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560b4e2c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560b4e2c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560b4e2c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560b4e2c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560b4e2c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560b4e2c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560b4e2c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560b4e2c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560b4e2c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560b4e2c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560b703145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560b3d8d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560b3d985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560b3b43d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560b3b43d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560b3b44808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560b3b43944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560b3b43944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560b3b43944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560b842594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560b842e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560b8416529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560b8440fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e410e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560b1d6543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x0,0x0,0x42,0x67,0x62,0x4a,0x4f,0x61,0x74,0x61, Step #5: ID3\002\000\000BgbJOata Step #5: artifact_prefix='./'; Test unit written to ./oom-12fc10ac88dd7f2fd4a392db0f6d732f5c783d3e Step #5: Base64: SUQzAgAAQmdiSk9hdGE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1635 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 163614183 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5611a4aa7d60, 0x5611a4c9071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5611a4c90720,0x5611a6b1a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/12fc10ac88dd7f2fd4a392db0f6d732f5c783d3e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1892 processed earlier; will process 9084 files now Step #5: ==58894== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56119b5ea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5611a1c25728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5611a1c0846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5611a1c0838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56119b5f0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56119b55142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56119b54bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56119b5e2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56119e6118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56119e6118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56119e6118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56119e6118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56119e6118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56119e6118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56119e6118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56119e6118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56119e6118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56119e6118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5611a081645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56119d572578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56119d57d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56119d328d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56119d328d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56119d329808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56119d328944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56119d328944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56119d328944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5611a1c0a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5611a1c137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5611a1bfb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5611a1c25fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff698b6f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56119b54a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0xa,0x2d,0x2d,0x2d,0x2d,0x40,0x27,0x23,0x30,0x25,0x2d,0x2d,0xa, Step #5: c\012----@'#0%--\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-8e745030bebc7d2ae993d0b5085da32c75d3bb2e Step #5: Base64: YwotLS0tQCcjMCUtLQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1636 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 164101394 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d1e3428d60, 0x55d1e361171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d1e3611720,0x55d1e549b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8e745030bebc7d2ae993d0b5085da32c75d3bb2e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1893 processed earlier; will process 9083 files now Step #5: #1 pulse cov: 3628 ft: 3629 exec/s: 0 rss: 167Mb Step #5: ==58930== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1d9f6b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d1e05a6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d1e058946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d1e058938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1d9f71652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d1d9ed242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d1d9eccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1d9f63595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1dcf928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1dcf928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1dcf928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1dcf928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1dcf928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1dcf928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1dcf928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1dcf928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1dcf928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1dcf928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d1df19745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d1dbef3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1dbefe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d1dbca9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d1dbca9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d1dbcaa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d1dbca9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d1dbca9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d1dbca9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d1e058b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d1e05947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d1e057c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d1e05a6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f491f71c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d1d9ecb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xbd,0x73,0x74,0x4e,0x3b,0x6d,0x62,0xdf,0xbd,0x73,0x74,0x4e,0x3b, Step #5: \337\275stN;mb\337\275stN; Step #5: artifact_prefix='./'; Test unit written to ./oom-248a60ae6dd4432a36478b025eeee3dded2fa9f8 Step #5: Base64: 371zdE47bWLfvXN0Tjs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1637 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 164627151 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55be57509d60, 0x55be576f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55be576f2720,0x55be5957c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/248a60ae6dd4432a36478b025eeee3dded2fa9f8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1895 processed earlier; will process 9081 files now Step #5: ==58966== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55be4e04c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55be54687728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55be5466a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55be5466a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55be4e052652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55be4dfb342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55be4dfadc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55be4e044595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55be510738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55be510738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55be510738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55be510738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55be510738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55be510738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55be510738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55be510738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55be510738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55be510738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55be5327845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55be4ffd4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55be4ffdf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55be4fd8ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55be4fd8ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55be4fd8b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55be4fd8a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55be4fd8a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55be4fd8a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55be5466c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55be546757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55be5465d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55be54687fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6d0fb7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55be4dfac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x35,0x35,0xa,0x24,0xa,0x31,0x2f,0x25,0x24,0xe2,0x80,0xa8,0x3d, Step #5: 155\012$\0121/%$\342\200\250= Step #5: artifact_prefix='./'; Test unit written to ./oom-8b933b7f6f8b117b258d43ba4008804e55cc07b0 Step #5: Base64: MTU1CiQKMS8lJOKAqD0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1638 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 165111582 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a05c858d60, 0x55a05ca4171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a05ca41720,0x55a05e8cb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8b933b7f6f8b117b258d43ba4008804e55cc07b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1896 processed earlier; will process 9080 files now Step #5: ==59002== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a05339b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0599d6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0599b946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0599b938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0533a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a05330242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0532fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a053393595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0563c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0563c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0563c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0563c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0563c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0563c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0563c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0563c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0563c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0563c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0585c745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a055323578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a05532e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0550d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0550d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0550da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0550d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0550d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0550d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0599bb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0599c47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0599ac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0599d6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f93c7378082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0532fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x6e,0x2d,0x2d,0x6a,0x70,0x33,0xe2,0x81,0x84,0x61,0x61,0x61,0x3d, Step #5: xn--jp3\342\201\204aaa= Step #5: artifact_prefix='./'; Test unit written to ./oom-b9f1936cbe3db6d13b7a254737ef88e3c2a528cc Step #5: Base64: eG4tLWpwM+KBhGFhYT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1639 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 165591721 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b4b8ae0d60, 0x55b4b8cc971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b4b8cc9720,0x55b4bab532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b9f1936cbe3db6d13b7a254737ef88e3c2a528cc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1897 processed earlier; will process 9079 files now Step #5: #1 pulse cov: 10935 ft: 10936 exec/s: 0 rss: 186Mb Step #5: #2 pulse cov: 11363 ft: 12113 exec/s: 0 rss: 188Mb Step #5: #4 pulse cov: 12661 ft: 15118 exec/s: 0 rss: 191Mb Step #5: ==59038== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b4af6232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b4b5c5e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b4b5c4146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b4b5c4138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b4af629652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b4af58a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b4af584c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b4af61b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b4b264a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b4b264a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b4b264a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b4b264a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b4b264a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b4b264a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b4b264a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b4b264a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b4b264a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b4b264a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b4b484f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b4b15ab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b4b15b65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b4b1361d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b4b1361d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b4b1362808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b4b1361944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b4b1361944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b4b1361944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b4b5c4394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b4b5c4c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b4b5c34529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b4b5c5efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f53659b7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b4af58343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x30,0x23,0x30,0x2d,0xe4,0xa0,0x77,0x57,0x77,0x2d,0x2d,0x40,0x59, Step #5: #0#0-\344\240wWw--@Y Step #5: artifact_prefix='./'; Test unit written to ./oom-9c851d9d1f211edb77fcc8aae943ae73f093b467 Step #5: Base64: IzAjMC3koHdXdy0tQFk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1640 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 166281137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5576ec594d60, 0x5576ec77d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5576ec77d720,0x5576ee6072c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9c851d9d1f211edb77fcc8aae943ae73f093b467' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1902 processed earlier; will process 9074 files now Step #5: #1 pulse cov: 3811 ft: 3812 exec/s: 0 rss: 166Mb Step #5: #2 pulse cov: 4246 ft: 4627 exec/s: 0 rss: 168Mb Step #5: ==59074== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5576e30d72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5576e9712728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5576e96f546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5576e96f538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5576e30dd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5576e303e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5576e3038c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5576e30cf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5576e60fe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5576e60fe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5576e60fe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5576e60fe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5576e60fe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5576e60fe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5576e60fe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5576e60fe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5576e60fe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5576e60fe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5576e830345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5576e505f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5576e506a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5576e4e15d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5576e4e15d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5576e4e16808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5576e4e15944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5576e4e15944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5576e4e15944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5576e96f794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5576e97007b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5576e96e8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5576e9712fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f60c7adf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5576e303743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x62,0x6a,0x65,0x63,0x74,0x43,0x6c,0x61,0x73,0x73,0x3a,0x73,0x38, Step #5: objectClass:s8 Step #5: artifact_prefix='./'; Test unit written to ./oom-ee943eb07743f149aa3f049b200dfee110860951 Step #5: Base64: b2JqZWN0Q2xhc3M6czg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1641 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 166870920 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55992e69dd60, 0x55992e88671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55992e886720,0x5599307102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee943eb07743f149aa3f049b200dfee110860951' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1905 processed earlier; will process 9071 files now Step #5: ==59110== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599251e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55992b81b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55992b7fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55992b7fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5599251e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55992514742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559925141c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5599251d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5599282078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5599282078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5599282078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5599282078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5599282078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5599282078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5599282078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5599282078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5599282078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5599282078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55992a40c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559927168578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599271735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559926f1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559926f1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559926f1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559926f1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559926f1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559926f1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55992b80094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55992b8097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55992b7f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55992b81bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1bc573a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55992514043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x67,0x76,0x61,0x72,0x42,0x42,0x3d,0xdb,0xbe,0x1d,0xdb,0xbe,0xbe,0x33, Step #5: gvarBB=\333\276\035\333\276\2763 Step #5: artifact_prefix='./'; Test unit written to ./oom-d712015dd0ac7a8f268d0b667ae49ff0aa94bcff Step #5: Base64: Z3ZhckJCPdu+Hdu+vjM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1642 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 167370345 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5597fa632d60, 0x5597fa81b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5597fa81b720,0x5597fc6a52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d712015dd0ac7a8f268d0b667ae49ff0aa94bcff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1906 processed earlier; will process 9070 files now Step #5: #1 pulse cov: 3437 ft: 3438 exec/s: 0 rss: 167Mb Step #5: ==59146== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5597f11752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5597f77b0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5597f779346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5597f779338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5597f117b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5597f10dc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5597f10d6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5597f116d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5597f419c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5597f419c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5597f419c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5597f419c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5597f419c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5597f419c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5597f419c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5597f419c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5597f419c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5597f419c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5597f63a145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5597f30fd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5597f31085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5597f2eb3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5597f2eb3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5597f2eb4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5597f2eb3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5597f2eb3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5597f2eb3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5597f779594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597f779e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597f7786529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5597f77b0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fed90853082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5597f10d543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x30,0x62,0x31,0x23,0x30,0x6,0x0,0x35,0x35,0x39,0x39,0x33,0x30, Step #5: #0b1#0\006\000559930 Step #5: artifact_prefix='./'; Test unit written to ./oom-310ff419fad6eed6772c18b2214172ef074605f4 Step #5: Base64: IzBiMSMwBgA1NTk5MzA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1643 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 167899299 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5648204a3d60, 0x56482068c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56482068c720,0x5648225162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/310ff419fad6eed6772c18b2214172ef074605f4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1908 processed earlier; will process 9068 files now Step #5: ==59182== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564816fe62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56481d621728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56481d60446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56481d60438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564816fec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564816f4d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564816f47c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564816fde595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56481a00d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56481a00d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56481a00d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56481a00d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56481a00d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56481a00d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56481a00d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56481a00d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56481a00d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56481a00d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56481c21245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564818f6e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564818f795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564818d24d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564818d24d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564818d25808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564818d24944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564818d24944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564818d24944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56481d60694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56481d60f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56481d5f7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56481d621fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f200c78a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564816f4643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x54,0x54,0x2c,0x54,0x48,0xcd,0x8f,0x41,0xba,0x1,0x2,0x5b,0xbf,0xdf, Step #5: TT,TH\315\217A\272\001\002[\277\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-6f80992f0903f1f3708f828624b20d468dbc23d5 Step #5: Base64: VFQsVEjNj0G6AQJbv98= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1644 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 168377578 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eaa4569d60, 0x55eaa475271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eaa4752720,0x55eaa65dc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6f80992f0903f1f3708f828624b20d468dbc23d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1909 processed earlier; will process 9067 files now Step #5: ==59218== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea9b0ac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eaa16e7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eaa16ca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eaa16ca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea9b0b2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea9b01342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea9b00dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea9b0a4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea9e0d38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea9e0d38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea9e0d38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea9e0d38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea9e0d38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea9e0d38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea9e0d38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea9e0d38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea9e0d38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea9e0d38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eaa02d845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea9d034578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea9d03f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea9cdead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea9cdead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea9cdeb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea9cdea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea9cdea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea9cdea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eaa16cc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eaa16d57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eaa16bd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eaa16e7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3acf87d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea9b00c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x7f,0x2f,0x16,0x2b,0x17,0x2b,0x50,0x52,0x49,0x7e, Step #5: ID3\002\177/\026+\027+PRI~ Step #5: artifact_prefix='./'; Test unit written to ./oom-9f508dd0d282dac5121070cdfdd926c8a627d004 Step #5: Base64: SUQzAn8vFisXK1BSSX4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1645 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 168860871 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5584607c3d60, 0x5584609ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5584609ac720,0x5584628362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9f508dd0d282dac5121070cdfdd926c8a627d004' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1910 processed earlier; will process 9066 files now Step #5: ==59254== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584573062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55845d941728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55845d92446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55845d92438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55845730c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55845726d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558457267c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5584572fe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55845a32d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55845a32d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55845a32d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55845a32d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55845a32d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55845a32d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55845a32d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55845a32d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55845a32d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55845a32d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55845c53245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55845928e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584592995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558459044d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558459044d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558459045808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558459044944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558459044944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558459044944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55845d92694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55845d92f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55845d917529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55845d941fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f027f01a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55845726643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x0,0xa,0x0,0xa,0x0,0xa,0x0,0xa,0x0,0xa,0x0,0xa,0x0, Step #5: \012\000\012\000\012\000\012\000\012\000\012\000\012\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-401c0c46f054b34167069f10e2bd67a8ce33e70d Step #5: Base64: CgAKAAoACgAKAAoACgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1646 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 169340539 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8478f9d60, 0x55a847ae271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a847ae2720,0x55a84996c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/401c0c46f054b34167069f10e2bd67a8ce33e70d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1911 processed earlier; will process 9065 files now Step #5: #1 pulse cov: 10381 ft: 10382 exec/s: 0 rss: 188Mb Step #5: #2 pulse cov: 10698 ft: 12659 exec/s: 0 rss: 190Mb Step #5: ==59290== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a83e43c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a844a77728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a844a5a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a844a5a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a83e442652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a83e3a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a83e39dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a83e434595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8414638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8414638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8414638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8414638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8414638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8414638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8414638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8414638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8414638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8414638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a84366845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8403c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8403cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a84017ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a84017ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a84017b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a84017a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a84017a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a84017a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a844a5c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a844a657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a844a4d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a844a77fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b94c05082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a83e39c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f, Step #5: ID3\004\177\177\177\177\177\177\177\177\177\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-791ff96739009668d3cfdff0e5f22fc8aba4e96b Step #5: Base64: SUQzBH9/f39/f39/f38= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1647 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 169937046 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b617827d60, 0x55b617a1071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b617a10720,0x55b61989a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/791ff96739009668d3cfdff0e5f22fc8aba4e96b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1914 processed earlier; will process 9062 files now Step #5: ==59326== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b60e36a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b6149a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b61498846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b61498838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b60e370652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b60e2d142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b60e2cbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b60e362595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b6113918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b6113918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b6113918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b6113918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b6113918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b6113918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b6113918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b6113918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b6113918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b6113918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b61359645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b6102f2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b6102fd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b6100a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b6100a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b6100a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b6100a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b6100a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b6100a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b61498a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b6149937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b61497b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b6149a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb9353c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b60e2ca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x54,0x45,0x53,0x54,0x76,0x31,0xa,0x73,0x75,0x61, Step #5: FUZZTESTv1\012sua Step #5: artifact_prefix='./'; Test unit written to ./oom-fde4d0bf1cc2dfda458d4b7f33c30a9987532f94 Step #5: Base64: RlVaWlRFU1R2MQpzdWE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1648 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 170417641 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5616c98b7d60, 0x5616c9aa071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5616c9aa0720,0x5616cb92a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fde4d0bf1cc2dfda458d4b7f33c30a9987532f94' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1915 processed earlier; will process 9061 files now Step #5: ==59362== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616c03fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5616c6a35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5616c6a1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5616c6a1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616c0400652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616c036142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616c035bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616c03f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616c34218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616c34218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616c34218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616c34218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616c34218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616c34218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616c34218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616c34218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616c34218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616c34218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5616c562645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616c2382578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616c238d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616c2138d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616c2138d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616c2139808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616c2138944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616c2138944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616c2138944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5616c6a1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5616c6a237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5616c6a0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5616c6a35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e52dd7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616c035a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d, Step #5: -\012\012-\012-\012-\012-\012-\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-48cf56dba96fcde9022b852c22ed3d8deb0dfe07 Step #5: Base64: LQoKLQotCi0KLQotCi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1649 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 170898634 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d80682d60, 0x556d8086b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d8086b720,0x556d826f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/48cf56dba96fcde9022b852c22ed3d8deb0dfe07' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1916 processed earlier; will process 9060 files now Step #5: #1 pulse cov: 3514 ft: 3515 exec/s: 0 rss: 169Mb Step #5: ==59398== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d771c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d7d800728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d7d7e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d7d7e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d771cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d7712c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d77126c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d771bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d7a1ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d7a1ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d7a1ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d7a1ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d7a1ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d7a1ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d7a1ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d7a1ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d7a1ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d7a1ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d7c3f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d7914d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d791585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d78f03d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d78f03d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d78f04808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d78f03944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d78f03944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d78f03944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d7d7e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d7d7ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d7d7d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d7d800fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8b1ab3c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d7712543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x42,0x60,0xa,0xa,0x42,0x60,0xa,0x42,0x60,0x3d,0x42,0x60,0x3d, Step #5: \012B`\012\012B`\012B`=B`= Step #5: artifact_prefix='./'; Test unit written to ./oom-97bb534f721c6e3c348e099fed17c97f8fae8d33 Step #5: Base64: CkJgCgpCYApCYD1CYD0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1650 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 171553096 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e18d24dd60, 0x55e18d43671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e18d436720,0x55e18f2c02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/97bb534f721c6e3c348e099fed17c97f8fae8d33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1918 processed earlier; will process 9058 files now Step #5: ==59434== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e183d902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e18a3cb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e18a3ae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e18a3ae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e183d96652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e183cf742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e183cf1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e183d88595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e186db78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e186db78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e186db78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e186db78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e186db78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e186db78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e186db78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e186db78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e186db78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e186db78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e188fbc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e185d18578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e185d235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e185aced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e185aced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e185acf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e185ace944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e185ace944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e185ace944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e18a3b094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e18a3b97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e18a3a1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e18a3cbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac69f2e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e183cf043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: \000\000\000\000\000\000\000\000\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4595c5b7ac9f265cdf89acec0069630697680f96 Step #5: Base64: AAAAAAAAAAAAAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1651 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 172043884 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fd81574d60, 0x55fd8175d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fd8175d720,0x55fd835e72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4595c5b7ac9f265cdf89acec0069630697680f96' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1919 processed earlier; will process 9057 files now Step #5: ==59470== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd780b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fd7e6f2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fd7e6d546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fd7e6d538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd780bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd7801e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd78018c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd780af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fd7b0de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fd7b0de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fd7b0de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fd7b0de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fd7b0de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fd7b0de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fd7b0de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fd7b0de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fd7b0de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fd7b0de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fd7d2e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fd7a03f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fd7a04a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fd79df5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fd79df5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fd79df6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fd79df5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fd79df5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fd79df5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fd7e6d794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fd7e6e07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fd7e6c8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fd7e6f2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa1c7be1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd7801743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x7b,0x7d,0x2b,0x23,0x7b,0x7d,0x2b,0x23,0x7b,0x7d,0x23,0x7b,0x7d, Step #5: #{}+#{}+#{}#{} Step #5: artifact_prefix='./'; Test unit written to ./oom-f3cb96caa682844780901795b53a1abe210fb15c Step #5: Base64: I3t9KyN7fSsje30je30= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1652 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 172533683 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56472c0ffd60, 0x56472c2e871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56472c2e8720,0x56472e1722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f3cb96caa682844780901795b53a1abe210fb15c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1920 processed earlier; will process 9056 files now Step #5: ==59506== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564722c422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56472927d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56472926046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56472926038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564722c48652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564722ba942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564722ba3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564722c3a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564725c698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564725c698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564725c698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564725c698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564725c698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564725c698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564725c698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564725c698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564725c698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564725c698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564727e6e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564724bca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564724bd55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564724980d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564724980d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564724981808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564724980944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564724980944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564724980944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56472926294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56472926b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564729253529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56472927dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4217f18082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564722ba243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xdb,0x80,0xdb,0x80,0x39,0x39,0x0,0x0,0x0,0x0,0xa,0x0,0x0, Step #5: =\333\200\333\20099\000\000\000\000\012\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-bc270e2ceb900bd1adf2b624370f0fe062759857 Step #5: Base64: PduA24A5OQAAAAAKAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1653 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 173020055 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564c2087fd60, 0x564c20a6871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564c20a68720,0x564c228f22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bc270e2ceb900bd1adf2b624370f0fe062759857' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1921 processed earlier; will process 9055 files now Step #5: ==59542== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564c173c22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564c1d9fd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564c1d9e046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564c1d9e038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564c173c8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564c1732942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564c17323c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564c173ba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564c1a3e98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564c1a3e98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564c1a3e98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564c1a3e98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564c1a3e98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564c1a3e98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564c1a3e98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564c1a3e98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564c1a3e98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564c1a3e98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564c1c5ee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564c1934a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564c193555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564c19100d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564c19100d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564c19101808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564c19100944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564c19100944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564c19100944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564c1d9e294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564c1d9eb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564c1d9d3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564c1d9fdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f88341d1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564c1732243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x15,0x4,0x3b,0x2,0x3,0x65,0x50,0x0,0x50,0x47, Step #5: ID3\002\025\004;\002\003eP\000PG Step #5: artifact_prefix='./'; Test unit written to ./oom-d97114d0ce684aaf26b24b6c4b102c0755adab75 Step #5: Base64: SUQzAhUEOwIDZVAAUEc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1654 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 173500140 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f01037ed60, 0x55f01056771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f010567720,0x55f0123f12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d97114d0ce684aaf26b24b6c4b102c0755adab75' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1922 processed earlier; will process 9054 files now Step #5: ==59578== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f006ec12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f00d4fc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f00d4df46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f00d4df38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f006ec7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f006e2842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f006e22c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f006eb9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f009ee88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f009ee88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f009ee88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f009ee88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f009ee88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f009ee88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f009ee88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f009ee88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f009ee88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f009ee88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f00c0ed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f008e49578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f008e545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f008bffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f008bffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f008c00808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f008bff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f008bff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f008bff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f00d4e194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f00d4ea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f00d4d2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f00d4fcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4fd3922082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f006e2143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x7b,0x61,0x32,0x2d,0x61,0x32,0x2d,0x61,0x32,0x2d,0x61,0x31,0x80, Step #5: {{a2-a2-a2-a1\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-04b7c54a1d711d9e7351761d63ab247b24b6ef65 Step #5: Base64: e3thMi1hMi1hMi1hMYA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1655 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 173977378 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56067820bd60, 0x5606783f471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606783f4720,0x56067a27e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04b7c54a1d711d9e7351761d63ab247b24b6ef65' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1923 processed earlier; will process 9053 files now Step #5: ==59614== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56066ed4e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560675389728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56067536c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56067536c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56066ed54652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56066ecb542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56066ecafc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56066ed46595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560671d758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560671d758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560671d758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560671d758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560671d758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560671d758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560671d758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560671d758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560671d758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560671d758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560673f7a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560670cd6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560670ce15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560670a8cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560670a8cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560670a8d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560670a8c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560670a8c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560670a8c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56067536e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606753777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56067535f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560675389fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f574d54e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56066ecae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xc,0x3a,0xa,0xa,0x8,0x78,0x6e,0x2d,0x2d,0xf0,0x90,0xa7,0xbd, Step #5: \012\014:\012\012\010xn--\360\220\247\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-68d1a972eb279ecdbb57dc3b537632f3f62489f2 Step #5: Base64: Cgw6CgoIeG4tLfCQp70= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1656 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 174461416 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56032a9b9d60, 0x56032aba271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56032aba2720,0x56032ca2c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/68d1a972eb279ecdbb57dc3b537632f3f62489f2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1924 processed earlier; will process 9052 files now Step #5: ==59650== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5603214fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560327b37728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560327b1a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560327b1a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560321502652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56032146342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56032145dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5603214f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5603245238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5603245238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5603245238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5603245238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5603245238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5603245238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5603245238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5603245238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5603245238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5603245238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56032672845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560323484578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56032348f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56032323ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56032323ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56032323b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56032323a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56032323a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56032323a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560327b1c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560327b257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560327b0d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560327b37fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcb3acb8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56032145c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x24,0x7b,0x7c,0x7c,0x60,0x24,0x7b,0x7c,0x7c,0x60,0x24,0x7b,0x7d, Step #5: `${||`${||`${} Step #5: artifact_prefix='./'; Test unit written to ./oom-0f012a71e534c29692332442fe7211e2ccaf648a Step #5: Base64: YCR7fHxgJHt8fGAke30= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1657 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 175065954 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b54a082d60, 0x55b54a26b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b54a26b720,0x55b54c0f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f012a71e534c29692332442fe7211e2ccaf648a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1925 processed earlier; will process 9051 files now Step #5: #1 pulse cov: 3586 ft: 3587 exec/s: 0 rss: 167Mb Step #5: #2 pulse cov: 6957 ft: 7310 exec/s: 0 rss: 183Mb Step #5: ==59686== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b540bc52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b547200728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b5471e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b5471e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b540bcb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b540b2c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b540b26c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b540bbd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b543bec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b543bec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b543bec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b543bec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b543bec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b543bec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b543bec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b543bec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b543bec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b543bec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b545df145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b542b4d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b542b585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b542903d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b542903d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b542904808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b542903944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b542903944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b542903944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b5471e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b5471ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b5471d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b547200fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f87030cc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b540b2543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11,0xdc,0xb0,0x8,0x6f,0xcc,0xb0,0x4e,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f, Step #5: \021\334\260\010o\314\260Noooooo Step #5: artifact_prefix='./'; Test unit written to ./oom-39ac73a5a0d95300b1d18b377de4ae5a1681f4ed Step #5: Base64: EdywCG/MsE5vb29vb28= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1658 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 175625935 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561b07905d60, 0x561b07aee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561b07aee720,0x561b099782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/39ac73a5a0d95300b1d18b377de4ae5a1681f4ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1928 processed earlier; will process 9048 files now Step #5: ==59722== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561afe4482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561b04a83728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561b04a6646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561b04a6638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561afe44e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561afe3af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561afe3a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561afe440595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561b0146f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561b0146f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561b0146f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561b0146f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561b0146f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561b0146f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561b0146f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561b0146f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561b0146f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561b0146f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561b0367445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561b003d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561b003db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561b00186d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561b00186d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561b00187808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561b00186944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561b00186944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561b00186944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561b04a6894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561b04a717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561b04a59529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561b04a83fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f01baa99082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561afe3a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x41,0x50,0x49,0x43,0x0,0x0,0xcd,0x8f,0x0,0x31, Step #5: ID3\004APIC\000\000\315\217\0001 Step #5: artifact_prefix='./'; Test unit written to ./oom-679e94a4ad715a6a31f47c20343064836f578c6f Step #5: Base64: SUQzBEFQSUMAAM2PADE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1659 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 176110350 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56171b621d60, 0x56171b80a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56171b80a720,0x56171d6942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/679e94a4ad715a6a31f47c20343064836f578c6f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1929 processed earlier; will process 9047 files now Step #5: ==59758== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5617121642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56171879f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56171878246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56171878238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56171216a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5617120cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5617120c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56171215c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56171518b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56171518b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56171518b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56171518b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56171518b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56171518b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56171518b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56171518b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56171518b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56171518b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56171739045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5617140ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5617140f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561713ea2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561713ea2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561713ea3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561713ea2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561713ea2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561713ea2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56171878494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56171878d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561718775529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56171879ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd7aeb5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5617120c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x54,0x45,0x53,0x54,0x76,0x31,0x20,0x63,0x3a,0x33, Step #5: FUZZTESTv1 c:3 Step #5: artifact_prefix='./'; Test unit written to ./oom-e4532429fd775c8cb48019586451b66f951162b4 Step #5: Base64: RlVaWlRFU1R2MSBjOjM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1660 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 176591497 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bc866abd60, 0x55bc8689471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bc86894720,0x55bc8871e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e4532429fd775c8cb48019586451b66f951162b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1930 processed earlier; will process 9046 files now Step #5: ==59794== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bc7d1ee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bc83829728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bc8380c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bc8380c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bc7d1f4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bc7d15542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bc7d14fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bc7d1e6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bc802158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bc802158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bc802158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bc802158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bc802158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bc802158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bc802158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bc802158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bc802158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bc802158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bc8241a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bc7f176578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bc7f1815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bc7ef2cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bc7ef2cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bc7ef2d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bc7ef2c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bc7ef2c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bc7ef2c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bc8380e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bc838177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bc837ff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bc83829fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f91217082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bc7d14e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x24,0xd,0x2d,0x20,0x24,0xa,0x2d,0x20,0x24,0xa,0x24,0xa, Step #5: - $\015- $\012- $\012$\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-a6deaf3647592f0a97cd09b9fed859175a94c4f2 Step #5: Base64: LSAkDS0gJAotICQKJAo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1661 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 177078542 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564fd8409d60, 0x564fd85f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564fd85f2720,0x564fda47c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a6deaf3647592f0a97cd09b9fed859175a94c4f2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1931 processed earlier; will process 9045 files now Step #5: ==59830== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564fcef4c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564fd5587728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564fd556a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564fd556a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564fcef52652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564fceeb342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564fceeadc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564fcef44595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564fd1f738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564fd1f738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564fd1f738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564fd1f738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564fd1f738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564fd1f738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564fd1f738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564fd1f738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564fd1f738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564fd1f738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564fd417845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564fd0ed4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564fd0edf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564fd0c8ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564fd0c8ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564fd0c8b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564fd0c8a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564fd0c8a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564fd0c8a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564fd556c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564fd55757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564fd555d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564fd5587fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe83c0d4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564fceeac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0xa9,0xe3,0x80,0xa9,0xe3,0x82,0xaa,0xe3,0x80,0xa9,0xc2,0x0, Step #5: \343\200\251\343\200\251\343\202\252\343\200\251\302\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-9a18f3826bf15c2c9a9dc08ee47d4a6ff54bcb59 Step #5: Base64: 44Cp44Cp44Kq44CpwgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1662 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 177577360 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a468c9ed60, 0x55a468e8771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a468e87720,0x55a46ad112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9a18f3826bf15c2c9a9dc08ee47d4a6ff54bcb59' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1932 processed earlier; will process 9044 files now Step #5: ==59866== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a45f7e12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a465e1c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a465dff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a465dff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a45f7e7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a45f74842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a45f742c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a45f7d9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4628088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4628088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4628088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4628088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4628088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4628088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4628088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4628088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4628088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4628088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a464a0d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a461769578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4617745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a46151fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a46151fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a461520808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a46151f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a46151f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a46151f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a465e0194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a465e0a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a465df2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a465e1cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0d64ff5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a45f74143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x0,0xe1,0x81,0x9f,0xe1,0x85,0x9f,0xe1,0x85,0x9f,0xed,0x9e,0xbd, Step #5: (\000\341\201\237\341\205\237\341\205\237\355\236\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-0fde04f98f1be88eb448edc2a5efd02fa1e86e86 Step #5: Base64: KADhgZ/hhZ/hhZ/tnr0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1663 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 178053615 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56057d88bd60, 0x56057da7471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56057da74720,0x56057f8fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0fde04f98f1be88eb448edc2a5efd02fa1e86e86' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1933 processed earlier; will process 9043 files now Step #5: #1 pulse cov: 3693 ft: 3694 exec/s: 0 rss: 169Mb Step #5: #2 pulse cov: 3847 ft: 4184 exec/s: 0 rss: 170Mb Step #5: ==59902== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605743ce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56057aa09728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56057a9ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56057a9ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605743d4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56057433542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56057432fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605743c6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605773f58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605773f58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605773f58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605773f58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605773f58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605773f58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605773f58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605773f58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605773f58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605773f58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605795fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560576356578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605763615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56057610cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56057610cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56057610d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56057610c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56057610c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56057610c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56057a9ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56057a9f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56057a9df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56057aa09fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e10def082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56057432e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x0,0x0,0x0,0x44,0x65,0x6e,0xe2,0x81,0x9f,0x4d,0xf6,0xff,0x7f, Step #5: I\000\000\000Den\342\201\237M\366\377\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-1db8222b55d55732d1bd9e557bc455f7ef2633b2 Step #5: Base64: SQAAAERlbuKBn032/38= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1664 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 178663991 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a402ef6d60, 0x55a4030df71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a4030df720,0x55a404f692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1db8222b55d55732d1bd9e557bc455f7ef2633b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1936 processed earlier; will process 9040 files now Step #5: ==59938== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a3f9a392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a400074728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a40005746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a40005738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a3f9a3f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a3f99a042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a3f999ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a3f9a31595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a3fca608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a3fca608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a3fca608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a3fca608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a3fca608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a3fca608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a3fca608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a3fca608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a3fca608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a3fca608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a3fec6545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a3fb9c1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a3fb9cc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a3fb777d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a3fb777d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a3fb778808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a3fb777944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a3fb777944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a3fb777944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a40005994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a4000627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a40004a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a400074fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f383882d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a3f999943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x40,0x40,0x2,0x25,0x9,0x0,0xa,0x27,0x2f,0x7,0x69,0x0,0x24, Step #5: $@@\002%\011\000\012'/\007i\000$ Step #5: artifact_prefix='./'; Test unit written to ./oom-2ee7221d63a84e8eb8abdc6e49ebb18bacfe202e Step #5: Base64: JEBAAiUJAAonLwdpACQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1665 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 179182483 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ffa6c34d60, 0x55ffa6e1d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ffa6e1d720,0x55ffa8ca72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2ee7221d63a84e8eb8abdc6e49ebb18bacfe202e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1937 processed earlier; will process 9039 files now Step #5: ==59974== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ff9d7772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ffa3db2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ffa3d9546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ffa3d9538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ff9d77d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ff9d6de42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ff9d6d8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ff9d76f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ffa079e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ffa079e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ffa079e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ffa079e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ffa079e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ffa079e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ffa079e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ffa079e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ffa079e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ffa079e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ffa29a345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ff9f6ff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ff9f70a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ff9f4b5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ff9f4b5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ff9f4b6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ff9f4b5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ff9f4b5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ff9f4b5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ffa3d9794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ffa3da07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ffa3d88529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ffa3db2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8eb777d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ff9d6d743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x52,0x4f,0x54,0x52,0x26,0x3f,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40, Step #5: ROTR&?@@@@@@@@ Step #5: artifact_prefix='./'; Test unit written to ./oom-8eccf53ac1b31cb1717634aaf30a5f75284825e1 Step #5: Base64: Uk9UUiY/QEBAQEBAQEA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1666 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 179785786 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555db9c2ed60, 0x555db9e1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555db9e17720,0x555dbbca12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8eccf53ac1b31cb1717634aaf30a5f75284825e1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1938 processed earlier; will process 9038 files now Step #5: ==60010== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555db07712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555db6dac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555db6d8f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555db6d8f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555db0777652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555db06d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555db06d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555db0769595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555db37988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555db37988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555db37988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555db37988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555db37988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555db37988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555db37988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555db37988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555db37988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555db37988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555db599d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555db26f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555db27045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555db24afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555db24afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555db24b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555db24af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555db24af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555db24af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555db6d9194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555db6d9a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555db6d82529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555db6dacfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbf50511082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555db06d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0xa9,0xd4,0xa9,0xc9,0xa9,0xcd,0xa9,0xd0,0xa9,0xc9,0xa2,0xd4,0xa9, Step #5: \315\251\324\251\311\251\315\251\320\251\311\242\324\251 Step #5: artifact_prefix='./'; Test unit written to ./oom-abb7a1f6ed56e58d58ada0310e95923bad829b00 Step #5: Base64: zanUqcmpzanQqcmi1Kk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1667 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 180435910 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b46d6fd60, 0x559b46f5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b46f58720,0x559b48de22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/abb7a1f6ed56e58d58ada0310e95923bad829b00' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1939 processed earlier; will process 9037 files now Step #5: ==60046== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b3d8b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b43eed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b43ed046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b43ed038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b3d8b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b3d81942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b3d813c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b3d8aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b408d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b408d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b408d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b408d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b408d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b408d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b408d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b408d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b408d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b408d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b42ade45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b3f83a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b3f8455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b3f5f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b3f5f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b3f5f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b3f5f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b3f5f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b3f5f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b43ed294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b43edb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b43ec3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b43eedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb4911cd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b3d81243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xd8,0xae,0x42,0x4f,0x40,0x0,0x20,0x37,0x20,0x30,0x20,0x43,0x43, Step #5: \000\330\256BO@\000 7 0 CC Step #5: artifact_prefix='./'; Test unit written to ./oom-bd5c91359d5fa6f1853ee538c11eeb286fea7462 Step #5: Base64: ANiuQk9AACA3IDAgQ0M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1668 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 180967002 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fae1fded60, 0x55fae21c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fae21c7720,0x55fae40512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bd5c91359d5fa6f1853ee538c11eeb286fea7462' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1940 processed earlier; will process 9036 files now Step #5: #1 pulse cov: 3550 ft: 3551 exec/s: 0 rss: 168Mb Step #5: ==60082== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fad8b212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fadf15c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fadf13f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fadf13f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fad8b27652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fad8a8842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fad8a82c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fad8b19595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fadbb488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fadbb488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fadbb488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fadbb488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fadbb488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fadbb488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fadbb488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fadbb488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fadbb488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fadbb488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55faddd4d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fadaaa9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fadaab45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fada85fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fada85fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fada860808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fada85f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fada85f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fada85f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fadf14194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fadf14a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fadf132529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fadf15cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0e30bdf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fad8a8143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xce,0x85,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: \316\205\315\204\315\204\315\204\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-c04f9d29a646fba43fc7eebd79fdc28b262b8af2 Step #5: Base64: zoXNhM2EzYTNhM2EzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1669 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 181502303 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f03ccb1d60, 0x55f03ce9a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f03ce9a720,0x55f03ed242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c04f9d29a646fba43fc7eebd79fdc28b262b8af2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1942 processed earlier; will process 9034 files now Step #5: ==60118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f0337f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f039e2f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f039e1246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f039e1238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f0337fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f03375b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f033755c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f0337ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f03681b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f03681b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f03681b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f03681b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f03681b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f03681b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f03681b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f03681b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f03681b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f03681b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f038a2045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f03577c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f0357875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f035532d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f035532d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f035533808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f035532944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f035532944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f035532944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f039e1494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f039e1d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f039e05529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f039e2ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5f5d60b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f03375443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x7b,0x2d,0x31,0x2c,0x24,0x2c,0x29,0x2c,0x28,0x24,0x7d,0x5d,0x3a, Step #5: [{-1,$,),($}]: Step #5: artifact_prefix='./'; Test unit written to ./oom-20239241494b0790c401e25c07e6593682ad1638 Step #5: Base64: W3stMSwkLCksKCR9XTo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1670 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 181989287 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5620b63f8d60, 0x5620b65e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5620b65e1720,0x5620b846b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/20239241494b0790c401e25c07e6593682ad1638' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1943 processed earlier; will process 9033 files now Step #5: ==60154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5620acf3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5620b3576728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5620b355946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5620b355938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5620acf41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5620acea242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5620ace9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5620acf33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5620aff628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5620aff628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5620aff628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5620aff628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5620aff628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5620aff628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5620aff628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5620aff628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5620aff628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5620aff628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5620b216745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5620aeec3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5620aeece5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5620aec79d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5620aec79d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5620aec7a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5620aec79944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5620aec79944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5620aec79944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5620b355b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5620b35647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5620b354c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5620b3576fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3b4b61082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5620ace9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0xa,0x7c, Step #5: - - - - - -\012| Step #5: artifact_prefix='./'; Test unit written to ./oom-013eae4159ba427c26132eb2b5233b6c8971e5a2 Step #5: Base64: IC0gLSAtIC0gLSAtCnw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1671 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 182482293 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56111156dd60, 0x56111175671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561111756720,0x5611135e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/013eae4159ba427c26132eb2b5233b6c8971e5a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1944 processed earlier; will process 9032 files now Step #5: ==60190== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5611080b02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56110e6eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56110e6ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56110e6ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5611080b6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56110801742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561108011c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5611080a8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56110b0d78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56110b0d78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56110b0d78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56110b0d78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56110b0d78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56110b0d78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56110b0d78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56110b0d78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56110b0d78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56110b0d78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56110d2dc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56110a038578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56110a0435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561109deed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561109deed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561109def808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561109dee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561109dee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561109dee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56110e6d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56110e6d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56110e6c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56110e6ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f4d360082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56110801043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x2b,0x2b,0xa,0x30,0x3d,0xf0,0x90,0x8a,0x95,0xa,0x2b,0x2b,0x2b, Step #5: +++\0120=\360\220\212\225\012+++ Step #5: artifact_prefix='./'; Test unit written to ./oom-e58ca7dd5c273715f14217e7a92cc2a95eb1f94c Step #5: Base64: KysrCjA98JCKlQorKys= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1672 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 182967205 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c4223eed60, 0x55c4225d771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c4225d7720,0x55c4244612c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e58ca7dd5c273715f14217e7a92cc2a95eb1f94c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1945 processed earlier; will process 9031 files now Step #5: ==60226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c418f312d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c41f56c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c41f54f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c41f54f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c418f37652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c418e9842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c418e92c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c418f29595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c41bf588c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c41bf588c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c41bf588c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c41bf588c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c41bf588c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c41bf588c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c41bf588c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c41bf588c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c41bf588c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c41bf588c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c41e15d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c41aeb9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c41aec45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c41ac6fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c41ac6fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c41ac70808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c41ac6f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c41ac6f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c41ac6f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c41f55194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c41f55a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c41f542529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c41f56cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f33d78e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c418e9143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x0,0x0,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0x82,0x87, Step #5: I\000\000=\012=\012=\012=\012=\202\207 Step #5: artifact_prefix='./'; Test unit written to ./oom-e62c5217999dd7a05eae9a9a95f1cc536e203974 Step #5: Base64: SQAAPQo9Cj0KPQo9goc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1673 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 183452548 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d471ca1d60, 0x55d471e8a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d471e8a720,0x55d473d142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e62c5217999dd7a05eae9a9a95f1cc536e203974' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1946 processed earlier; will process 9030 files now Step #5: ==60262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4687e42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d46ee1f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d46ee0246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d46ee0238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4687ea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d46874b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d468745c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4687dc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d46b80b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d46b80b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d46b80b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d46b80b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d46b80b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d46b80b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d46b80b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d46b80b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d46b80b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d46b80b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d46da1045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d46a76c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d46a7775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d46a522d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d46a522d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d46a523808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d46a522944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d46a522944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d46a522944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d46ee0494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d46ee0d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d46edf5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d46ee1ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd30154b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d46874443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x67,0x72,0x65,0x79,0x73,0x63,0x61,0x6c,0x65,0x3e,0xa,0x3c,0xa, Step #5: \012<\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-4aa7c2c2f986dbbd938deae0ff8fd4373df3e765 Step #5: Base64: PGdyZXlzY2FsZT4KPAo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1674 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 183939814 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56238d151d60, 0x56238d33a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56238d33a720,0x56238f1c42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4aa7c2c2f986dbbd938deae0ff8fd4373df3e765' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1947 processed earlier; will process 9029 files now Step #5: ==60298== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562383c942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56238a2cf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56238a2b246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56238a2b238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562383c9a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562383bfb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562383bf5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562383c8c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562386cbb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562386cbb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562386cbb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562386cbb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562386cbb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562386cbb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562386cbb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562386cbb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562386cbb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562386cbb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562388ec045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562385c1c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562385c275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5623859d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5623859d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5623859d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5623859d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5623859d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5623859d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56238a2b494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56238a2bd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56238a2a5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56238a2cffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ec4aea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562383bf443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x0,0x0,0x27,0x49,0x47,0x0,0x47,0x45,0x4f,0x45, Step #5: ID3\002\000\000'IG\000GEOE Step #5: artifact_prefix='./'; Test unit written to ./oom-fb0b26d90462a10383524f4e125481b6629474b9 Step #5: Base64: SUQzAgAAJ0lHAEdFT0U= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1675 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 184420291 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557d2e4cad60, 0x557d2e6b371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557d2e6b3720,0x557d3053d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb0b26d90462a10383524f4e125481b6629474b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1948 processed earlier; will process 9028 files now Step #5: ==60334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557d2500d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557d2b648728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557d2b62b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557d2b62b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557d25013652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557d24f7442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557d24f6ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557d25005595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557d280348c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557d280348c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557d280348c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557d280348c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557d280348c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557d280348c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557d280348c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557d280348c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557d280348c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557d280348c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557d2a23945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557d26f95578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557d26fa05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557d26d4bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557d26d4bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557d26d4c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557d26d4b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557d26d4b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557d26d4b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557d2b62d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557d2b6367b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557d2b61e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557d2b648fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f56eef92082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557d24f6d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x69,0x2e,0x73,0x77,0x61,0x70,0xa,0x63,0x67,0x72,0x6f,0x75,0x33, Step #5: \000i.swap\012cgrou3 Step #5: artifact_prefix='./'; Test unit written to ./oom-96b0f4f323d6a93d9da8fb4d37302845f207b9b4 Step #5: Base64: AGkuc3dhcApjZ3JvdTM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1676 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 184900638 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d4ccad9d60, 0x55d4cccc271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d4cccc2720,0x55d4ceb4c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/96b0f4f323d6a93d9da8fb4d37302845f207b9b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1949 processed earlier; will process 9027 files now Step #5: ==60370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4c361c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d4c9c57728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d4c9c3a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d4c9c3a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4c3622652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d4c358342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d4c357dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4c3614595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4c66438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4c66438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4c66438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4c66438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4c66438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4c66438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4c66438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4c66438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4c66438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4c66438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d4c884845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d4c55a4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4c55af5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d4c535ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d4c535ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d4c535b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d4c535a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d4c535a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d4c535a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d4c9c3c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d4c9c457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d4c9c2d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d4c9c57fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2afcd0e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d4c357c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x37,0x32,0x2e, Step #5: 0000000000072. Step #5: artifact_prefix='./'; Test unit written to ./oom-6ad929467da0a1a880a43187bfd8c6f6b869c46a Step #5: Base64: MDAwMDAwMDAwMDA3Mi4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1677 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 185378744 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55807bd0ad60, 0x55807bef371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55807bef3720,0x55807dd7d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ad929467da0a1a880a43187bfd8c6f6b869c46a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1950 processed earlier; will process 9026 files now Step #5: ==60406== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55807284d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558078e88728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558078e6b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558078e6b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558072853652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5580727b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5580727aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558072845595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5580758748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5580758748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5580758748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5580758748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5580758748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5580758748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5580758748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5580758748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5580758748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5580758748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558077a7945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5580747d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5580747e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55807458bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55807458bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55807458c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55807458b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55807458b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55807458b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558078e6d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558078e767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558078e5e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558078e88fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2755c95082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5580727ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x47,0x52,0x4f,0x55,0x50,0x3d,0x22,0x63,0x6c,0x75,0x73,0x74,0x7a,0x22, Step #5: GROUP=\"clustz\" Step #5: artifact_prefix='./'; Test unit written to ./oom-3770689da53cb9c16211187d3bc01c9bd7c2d5c0 Step #5: Base64: R1JPVVA9ImNsdXN0eiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1678 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 185858284 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557ea928ad60, 0x557ea947371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557ea9473720,0x557eab2fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3770689da53cb9c16211187d3bc01c9bd7c2d5c0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1951 processed earlier; will process 9025 files now Step #5: ==60442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e9fdcd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ea6408728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ea63eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ea63eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e9fdd3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e9fd3442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e9fd2ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e9fdc5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557ea2df48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557ea2df48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557ea2df48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557ea2df48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557ea2df48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557ea2df48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557ea2df48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557ea2df48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557ea2df48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557ea2df48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ea4ff945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557ea1d55578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557ea1d605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557ea1b0bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557ea1b0bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557ea1b0c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557ea1b0b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557ea1b0b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557ea1b0b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ea63ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ea63f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ea63de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ea6408fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8eaa7da082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e9fd2d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x21,0x69,0x66,0x2b,0x2d,0x60,0x2b,0x21,0x2d,0x90,0x0,0x0,0x69, Step #5: `!if+-`+!-\220\000\000i Step #5: artifact_prefix='./'; Test unit written to ./oom-3ae7116fdf73d4d0ac3ecdea02a21e3d1e188a8f Step #5: Base64: YCFpZistYCshLZAAAGk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1679 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 186465047 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55813f7e5d60, 0x55813f9ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55813f9ce720,0x5581418582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3ae7116fdf73d4d0ac3ecdea02a21e3d1e188a8f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1952 processed earlier; will process 9024 files now Step #5: ==60478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581363282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55813c963728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55813c94646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55813c94638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55813632e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55813628f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558136289c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558136320595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55813934f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55813934f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55813934f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55813934f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55813934f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55813934f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55813934f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55813934f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55813934f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55813934f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55813b55445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581382b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581382bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558138066d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558138066d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558138067808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558138066944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558138066944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558138066944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55813c94894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55813c9517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55813c939529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55813c963fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f554d455082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55813628843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x2e,0x24,0x7c,0x2e,0x3f,0x29,0x7b,0x39,0x38,0x39,0x7d,0x24, Step #5: ^(.$|.?){989}$ Step #5: artifact_prefix='./'; Test unit written to ./oom-20d1584f91d83a5a01e225372234dff72fe6facd Step #5: Base64: XiguJHwuPyl7OTg5fSQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1680 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 186946058 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d37285cd60, 0x55d372a4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d372a45720,0x55d3748cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/20d1584f91d83a5a01e225372234dff72fe6facd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1953 processed earlier; will process 9023 files now Step #5: ==60514== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d36939f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d36f9da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d36f9bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d36f9bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d3693a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d36930642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d369300c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d369397595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d36c3c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d36c3c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d36c3c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d36c3c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d36c3c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d36c3c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d36c3c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d36c3c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d36c3c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d36c3c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d36e5cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d36b327578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d36b3325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d36b0ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d36b0ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d36b0de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d36b0dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d36b0dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d36b0dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d36f9bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d36f9c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d36f9b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d36f9dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f30af8ff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d3692ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x6d,0x60,0x78,0x5f,0x74,0x1,0x33,0x3,0x6d,0x60, Step #5: ID3\003m`x_t\0013\003m` Step #5: artifact_prefix='./'; Test unit written to ./oom-d515c078fc21ef8f25869f40018074dcd7dfdbbd Step #5: Base64: SUQzA21geF90ATMDbWA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1681 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 187574473 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5629762b6d60, 0x56297649f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56297649f720,0x5629783292c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d515c078fc21ef8f25869f40018074dcd7dfdbbd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1954 processed earlier; will process 9022 files now Step #5: #1 pulse cov: 3674 ft: 3675 exec/s: 0 rss: 166Mb Step #5: ==60550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56296cdf92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562973434728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56297341746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56297341738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56296cdff652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56296cd6042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56296cd5ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56296cdf1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56296fe208c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56296fe208c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56296fe208c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56296fe208c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56296fe208c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56296fe208c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56296fe208c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56296fe208c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56296fe208c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56296fe208c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56297202545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56296ed81578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56296ed8c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56296eb37d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56296eb37d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56296eb38808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56296eb37944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56296eb37944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56296eb37944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56297341994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5629734227b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56297340a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562973434fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f554a070082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56296cd5943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9d,0x85,0xb1,0xd6,0xb1,0xd6,0xb6,0xcc,0xb6,0xcc,0xb6,0xcc,0xb8, Step #5: \360\235\205\261\326\261\326\266\314\266\314\266\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-1fb8f73e98d4bab9b7634e074d0ecd7dbb1ff18d Step #5: Base64: 8J2Fsdax1rbMtsy2zLg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1682 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 188106393 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad72681d60, 0x55ad7286a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad7286a720,0x55ad746f42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1fb8f73e98d4bab9b7634e074d0ecd7dbb1ff18d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1956 processed earlier; will process 9020 files now Step #5: ==60586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad691c42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad6f7ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad6f7e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad6f7e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad691ca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad6912b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad69125c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad691bc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad6c1eb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad6c1eb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad6c1eb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad6c1eb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad6c1eb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad6c1eb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad6c1eb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad6c1eb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad6c1eb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad6c1eb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad6e3f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad6b14c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad6b1575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad6af02d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad6af02d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad6af03808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad6af02944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad6af02944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad6af02944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad6f7e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad6f7ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad6f7d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad6f7fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd83168082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad6912443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x68,0x65,0x61,0x64,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x7a,0xa,0x2d, Step #5: head\012-\012-\012-\012z\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-c0358e839f88b97009dae08660267a1fb1a2d245 Step #5: Base64: aGVhZAotCi0KLQp6Ci0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1683 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 188591872 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564869582d60, 0x56486976b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56486976b720,0x56486b5f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c0358e839f88b97009dae08660267a1fb1a2d245' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1957 processed earlier; will process 9019 files now Step #5: ==60622== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5648600c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564866700728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5648666e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5648666e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5648600cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56486002c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564860026c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5648600bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5648630ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5648630ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5648630ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5648630ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5648630ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5648630ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5648630ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5648630ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5648630ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5648630ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5648652f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56486204d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5648620585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564861e03d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564861e03d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564861e04808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564861e03944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564861e03944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564861e03944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5648666e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5648666ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5648666d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564866700fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27b1e6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56486002543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x44,0x60,0x6e,0x61,0x44,0x60,0x6e,0x69,0x66,0x4d,0x83,0x12, Step #5: DaD`naD`nifM\203\022 Step #5: artifact_prefix='./'; Test unit written to ./oom-b5e0ffb2d679b3c8d4244a101b2576aa48489ea4 Step #5: Base64: RGFEYG5hRGBuaWZNgxI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1684 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 189197896 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5612cd6f3d60, 0x5612cd8dc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5612cd8dc720,0x5612cf7662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5e0ffb2d679b3c8d4244a101b2576aa48489ea4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1958 processed earlier; will process 9018 files now Step #5: ==60658== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612c42362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5612ca871728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5612ca85446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5612ca85438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612c423c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5612c419d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5612c4197c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612c422e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612c725d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612c725d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612c725d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612c725d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612c725d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612c725d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612c725d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612c725d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612c725d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612c725d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5612c946245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5612c61be578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612c61c95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612c5f74d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612c5f74d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612c5f75808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612c5f74944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612c5f74944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612c5f74944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5612ca85694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5612ca85f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5612ca847529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5612ca871fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe0f2927082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5612c419643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x66,0x27,0x40,0x27,0x27,0x29,0x27,0x3f,0x3f,0x3d,0x3f,0x3f,0x3d, Step #5: ff'@'')'??=??= Step #5: artifact_prefix='./'; Test unit written to ./oom-a4208170019630b6695cb8694bcdc17c9dc5996f Step #5: Base64: ZmYnQCcnKSc/Pz0/Pz0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1685 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 189676758 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5601c7effd60, 0x5601c80e871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5601c80e8720,0x5601c9f722c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a4208170019630b6695cb8694bcdc17c9dc5996f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1959 processed earlier; will process 9017 files now Step #5: ==60694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601bea422d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5601c507d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5601c506046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5601c506038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5601bea48652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5601be9a942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5601be9a3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5601bea3a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601c1a698c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601c1a698c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601c1a698c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601c1a698c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601c1a698c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601c1a698c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601c1a698c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601c1a698c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601c1a698c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601c1a698c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601c3c6e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601c09ca578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601c09d55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601c0780d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601c0780d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601c0781808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601c0780944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601c0780944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601c0780944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5601c506294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601c506b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5601c5053529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5601c507dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe79101d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5601be9a243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0x35,0x3e,0x28,0x3f,0x3c,0x38,0x3e,0x28,0x3f,0x3c,0x3e, Step #5: (?<5>(?<8>(?<> Step #5: artifact_prefix='./'; Test unit written to ./oom-8844811418ad05e4bc22053fac920c5d4678068a Step #5: Base64: KD88NT4oPzw4Pig/PD4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1686 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 190157895 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d878f5cd60, 0x55d87914571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d879145720,0x55d87afcf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8844811418ad05e4bc22053fac920c5d4678068a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1960 processed earlier; will process 9016 files now Step #5: ==60730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d86fa9f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d8760da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d8760bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d8760bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d86faa5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d86fa0642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d86fa00c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d86fa97595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d872ac68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d872ac68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d872ac68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d872ac68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d872ac68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d872ac68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d872ac68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d872ac68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d872ac68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d872ac68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d874ccb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d871a27578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d871a325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d8717ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d8717ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d8717de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d8717dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d8717dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d8717dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d8760bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d8760c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d8760b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d8760dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b342db082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d86f9ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x0,0x5b,0x27,0x5d,0x5b,0x28,0x5d,0x5b,0x27,0x5d,0x5b,0x28,0x5d, Step #5: 0\000['][(]['][(] Step #5: artifact_prefix='./'; Test unit written to ./oom-9ee14f29514eb6e82a39d95c2809b41a5065a0c5 Step #5: Base64: MABbJ11bKF1bJ11bKF0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 1687 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 190645327 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560157e1bd60, 0x56015800471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560158004720,0x560159e8e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ee14f29514eb6e82a39d95c2809b41a5065a0c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 1961 processed earlier; will process 9015 files now Step #5: ==60766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56014e95e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560154f99728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560154f7c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560154f7c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56014e964652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56014e8c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56014e8bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56014e956595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601519858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601519858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601519858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601519858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601519858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601519858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601519858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601519858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601519858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601519858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560153b8a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601508e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601508f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56015069cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56015069cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56015069d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56015069c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56015069c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56015069c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560154f7e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560154f877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560154f6f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560154f99fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbef2b25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56014e8be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x2d,0x2d,0x2d,0x2d,0xd,0xe2,0x80,0x8f,0xe1,0xa0,0x8e,0xc4, Step #5: 0:0:0.5\012\355 Step #5: artifact_prefix='./'; Test unit written to ./oom-c9687475e32f3affe45e9d159a97389dd5575bc8 Step #5: Base64: ODowOjMuMi0tPjA6MDowLjUK7Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2088 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 393255969 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8516b6d60, 0x55a85189f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a85189f720,0x55a8537292c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9687475e32f3affe45e9d159a97389dd5575bc8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2472 processed earlier; will process 8504 files now Step #5: #1 pulse cov: 10630 ft: 10631 exec/s: 0 rss: 188Mb Step #5: ==75206== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8481f92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a84e834728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a84e81746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a84e81738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8481ff652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a84816042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a84815ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8481f1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a84b2208c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a84b2208c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a84b2208c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a84b2208c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a84b2208c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a84b2208c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a84b2208c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a84b2208c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a84b2208c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a84b2208c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a84d42545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a84a181578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a84a18c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a849f37d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a849f37d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a849f38808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a849f37944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a849f37944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a849f37944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a84e81994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a84e8227b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a84e80a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a84e834fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f950ddcf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a84815943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x45,0x4e,0x54,0x49,0x54,0x59,0xa,0x42,0xa,0x27,0x3e,0xd6,0x89,0xd6,0x8a,0xd6,0x8a, Step #5: \326\211\326\212\326\212 Step #5: artifact_prefix='./'; Test unit written to ./oom-b5ca8823efb85017d246c88afd528a9ba73070a5 Step #5: Base64: PCFFTlRJVFkKQgonPtaJ1orWig== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2089 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 393809675 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56164fd06d60, 0x56164feef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56164feef720,0x561651d792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5ca8823efb85017d246c88afd528a9ba73070a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2474 processed earlier; will process 8502 files now Step #5: ==75242== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616468492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56164ce84728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56164ce6746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56164ce6738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56164684f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616467b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616467aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561646841595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616498708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616498708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616498708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616498708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616498708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616498708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616498708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616498708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616498708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616498708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56164ba7545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616487d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616487dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561648587d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561648587d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561648588808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561648587944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561648587944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561648587944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56164ce6994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56164ce727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56164ce5a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56164ce84fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1a0d25f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616467a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x50,0x3e,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x0,0x7b,0x24,0x7b,0x3b,0x7b,0x24,0x7b, Step #5:

{{{{{{{{\000{${;{${ Step #5: artifact_prefix='./'; Test unit written to ./oom-0219acc03755ccd172241134a6eb4b62dcac538e Step #5: Base64: PFA+e3t7e3t7e3sAeyR7O3skew== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2090 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 394297543 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558dbb98dd60, 0x558dbbb7671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558dbbb76720,0x558dbda002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0219acc03755ccd172241134a6eb4b62dcac538e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2475 processed earlier; will process 8501 files now Step #5: ==75278== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558db24d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558db8b0b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558db8aee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558db8aee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558db24d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558db243742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558db2431c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558db24c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558db54f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558db54f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558db54f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558db54f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558db54f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558db54f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558db54f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558db54f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558db54f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558db54f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558db76fc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558db4458578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558db44635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558db420ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558db420ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558db420f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558db420e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558db420e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558db420e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558db8af094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558db8af97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558db8ae1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558db8b0bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a575e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558db243043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xc,0x3d,0x2d,0xa,0x3d,0x3d,0x5,0xa,0x3d,0x3d,0x0,0x6d,0xb,0x4e,0x2d,0x3d,0xc,0xa, Step #5: -\014=-\012==\005\012==\000m\013N-=\014\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-390cbdbb225a624945b804c79cf0e96e41f17915 Step #5: Base64: LQw9LQo9PQUKPT0AbQtOLT0MCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2091 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 394795530 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fda8c88d60, 0x55fda8e7171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fda8e71720,0x55fdaacfb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/390cbdbb225a624945b804c79cf0e96e41f17915' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2476 processed earlier; will process 8500 files now Step #5: #1 pulse cov: 3639 ft: 3640 exec/s: 0 rss: 170Mb Step #5: ==75314== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd9f7cb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fda5e06728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fda5de946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fda5de938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd9f7d1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd9f73242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd9f72cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd9f7c3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fda27f28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fda27f28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fda27f28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fda27f28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fda27f28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fda27f28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fda27f28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fda27f28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fda27f28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fda27f28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fda49f745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fda1753578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fda175e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fda1509d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fda1509d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fda150a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fda1509944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fda1509944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fda1509944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fda5deb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fda5df47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fda5ddc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fda5e06fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f99e0d8d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd9f72b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x26,0x73,0x74,0x28,0x72,0x65,0x61,0x6d,0xa,0x31,0x0,0x1e,0xd8,0xae,0x2d,0x0,0x0,0x25, Step #5: i&st(ream\0121\000\036\330\256-\000\000% Step #5: artifact_prefix='./'; Test unit written to ./oom-7eac5c68cc5226db9ba9ab527c9af9d79d6851c5 Step #5: Base64: aSZzdChyZWFtCjEAHtiuLQAAJQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2092 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 395321734 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa9fe52d60, 0x55aaa003b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aaa003b720,0x55aaa1ec52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7eac5c68cc5226db9ba9ab527c9af9d79d6851c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2478 processed earlier; will process 8498 files now Step #5: ==75350== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa969952d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa9cfd0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa9cfb346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa9cfb338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa9699b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa968fc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa968f6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa9698d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa999bc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa999bc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa999bc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa999bc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa999bc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa999bc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa999bc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa999bc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa999bc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa999bc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa9bbc145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa9891d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa989285a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa986d3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa986d3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa986d4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa986d3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa986d3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa986d3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa9cfb594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa9cfbe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa9cfa6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa9cfd0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa528b27082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa968f543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xa,0x9,0xa,0x60,0x2d,0x0,0x60,0xa,0x2f,0xa,0x60,0x60,0x20,0x20,0x20,0x60,0xa,0x9, Step #5: `\012\011\012`-\000`\012/\012`` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-a20def8691eea03fa0785ac2134e0a16a763282b Step #5: Base64: YAoJCmAtAGAKLwpgYCAgIGAKCQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2093 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 395942815 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557e9dd39d60, 0x557e9df2271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557e9df22720,0x557e9fdac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a20def8691eea03fa0785ac2134e0a16a763282b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2479 processed earlier; will process 8497 files now Step #5: ==75386== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e9487c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557e9aeb7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557e9ae9a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557e9ae9a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e94882652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e947e342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e947ddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e94874595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557e978a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557e978a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557e978a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557e978a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557e978a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557e978a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557e978a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557e978a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557e978a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557e978a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557e99aa845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557e96804578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557e9680f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557e965bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557e965bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557e965bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557e965ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557e965ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557e965ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557e9ae9c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557e9aea57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557e9ae8d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557e9aeb7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0bb4a78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e947dc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xf3,0xa0,0x84,0x8f,0xf3,0xa0,0x84,0xac,0xf3,0xa0,0x84,0x87,0xf3,0xa0,0x84,0xac, Step #5: ws:\363\240\204\217\363\240\204\254\363\240\204\207\363\240\204\254 Step #5: artifact_prefix='./'; Test unit written to ./oom-26904b3f9c86243083afb444beb90e259179927a Step #5: Base64: d3M686CEj/OghKzzoISH86CErA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2094 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 396434650 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f819d50d60, 0x55f819f3971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f819f39720,0x55f81bdc32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/26904b3f9c86243083afb444beb90e259179927a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2480 processed earlier; will process 8496 files now Step #5: ==75422== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f8108932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f816ece728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f816eb146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f816eb138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f810899652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f8107fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f8107f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f81088b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f8138ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f8138ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f8138ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f8138ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f8138ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f8138ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f8138ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f8138ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f8138ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f8138ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f815abf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f81281b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f8128265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f8125d1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f8125d1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f8125d2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f8125d1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f8125d1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f8125d1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f816eb394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f816ebc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f816ea4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f816ecefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f14e97f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f8107f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x7b,0x62,0x39,0x7d,0x5c,0x75,0x7b,0x62,0x33,0x7d,0x5c,0x75,0x7b,0x62,0x38,0x7d, Step #5: \"\\u{b9}\\u{b3}\\u{b8} Step #5: artifact_prefix='./'; Test unit written to ./oom-2b3d28c1704f4d9a9fbcdebe123ca3df164d2fe3 Step #5: Base64: Ilx1e2I5fVx1e2IzfVx1e2I4fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2095 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 396917437 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55866b76cd60, 0x55866b95571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55866b955720,0x55866d7df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2b3d28c1704f4d9a9fbcdebe123ca3df164d2fe3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2481 processed earlier; will process 8495 files now Step #5: #1 pulse cov: 3463 ft: 3464 exec/s: 0 rss: 169Mb Step #5: ==75458== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5586622af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5586688ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5586688cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5586688cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5586622b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55866221642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558662210c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5586622a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5586652d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5586652d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5586652d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5586652d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5586652d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5586652d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5586652d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5586652d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5586652d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5586652d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5586674db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558664237578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5586642425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558663fedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558663fedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558663fee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558663fed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558663fed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558663fed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5586688cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5586688d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5586688c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5586688eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f65b2d47082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55866220f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x36,0x30,0x32,0x38,0x37,0x39,0x37,0x30,0x31,0x38,0x33,0x39,0x36,0x36,0x35,0x39,0x31,0x2e, Step #5: 360287970183966591. Step #5: artifact_prefix='./'; Test unit written to ./oom-59af9df1d86e0c8cf08629fa566d75cb611278a7 Step #5: Base64: MzYwMjg3OTcwMTgzOTY2NTkxLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2096 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 397464579 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56331cb03d60, 0x56331ccec71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56331ccec720,0x56331eb762c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/59af9df1d86e0c8cf08629fa566d75cb611278a7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2483 processed earlier; will process 8493 files now Step #5: ==75494== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5633136462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563319c81728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563319c6446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563319c6438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56331364c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633135ad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633135a7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56331363e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56331666d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56331666d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56331666d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56331666d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56331666d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56331666d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56331666d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56331666d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56331666d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56331666d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56331887245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633155ce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633155d95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563315384d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563315384d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563315385808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563315384944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563315384944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563315384944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563319c6694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563319c6f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563319c57529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563319c81fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8035809082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633135a643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xcd,0xb8,0xcd,0xb8,0xcd,0xa9,0xcd,0xb8,0xcd,0xb8,0xcd,0xb9,0xc7,0xb9,0xcd,0xbb,0x2f,0x3e, Step #5: <\315\270\315\270\315\251\315\270\315\270\315\271\307\271\315\273/> Step #5: artifact_prefix='./'; Test unit written to ./oom-2995369c2782bdd776cf3ecdda5c986b88c86c76 Step #5: Base64: PM24zbjNqc24zbjNuce5zbsvPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2097 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 397959551 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ca7c1ed60, 0x560ca7e0771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ca7e07720,0x560ca9c912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2995369c2782bdd776cf3ecdda5c986b88c86c76' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2484 processed earlier; will process 8492 files now Step #5: ==75530== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c9e7612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ca4d9c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ca4d7f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ca4d7f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c9e767652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c9e6c842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c9e6c2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c9e759595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ca17888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ca17888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ca17888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ca17888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ca17888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ca17888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ca17888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ca17888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ca17888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ca17888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ca398d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ca06e9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ca06f45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ca049fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ca049fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ca04a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ca049f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ca049f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ca049f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ca4d8194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ca4d8a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ca4d72529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ca4d9cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5dbfea5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c9e6c143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x12,0x0,0xa,0x9,0x0,0x0,0xa,0x13,0x1,0x2d,0x3a,0x1,0x13,0x3a,0x1,0x5,0x3a,0x1,0x5, Step #5: \022\000\012\011\000\000\012\023\001-:\001\023:\001\005:\001\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-378215f7547b6e5a9617b98191aab0037da59354 Step #5: Base64: EgAKCQAAChMBLToBEzoBBToBBQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2098 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 398448887 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fa91bc2d60, 0x55fa91dab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fa91dab720,0x55fa93c352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/378215f7547b6e5a9617b98191aab0037da59354' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2485 processed earlier; will process 8491 files now Step #5: ==75566== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fa887052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fa8ed40728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fa8ed2346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fa8ed2338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fa8870b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fa8866c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fa88666c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fa886fd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fa8b72c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fa8b72c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fa8b72c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fa8b72c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fa8b72c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fa8b72c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fa8b72c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fa8b72c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fa8b72c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fa8b72c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fa8d93145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fa8a68d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fa8a6985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fa8a443d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fa8a443d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fa8a444808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fa8a443944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fa8a443944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fa8a443944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fa8ed2594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fa8ed2e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fa8ed16529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fa8ed40fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f77270f6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fa8866543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x2,0x72,0x6,0x0,0xe1,0x9e,0x80,0x3a,0xff,0x1,0x2,0x2,0x0,0xff,0xfb,0xff,0xbd, Step #5: \000\000\002r\006\000\341\236\200:\377\001\002\002\000\377\373\377\275 Step #5: artifact_prefix='./'; Test unit written to ./oom-84945298b98a52b144dbd79f39c41ef3865e79aa Step #5: Base64: AAACcgYA4Z6AOv8BAgIA//v/vQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2099 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 398940996 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560850c6ed60, 0x560850e5771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560850e57720,0x560852ce12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/84945298b98a52b144dbd79f39c41ef3865e79aa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2486 processed earlier; will process 8490 files now Step #5: #1 pulse cov: 4060 ft: 4061 exec/s: 0 rss: 170Mb Step #5: ==75602== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608477b12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56084ddec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56084ddcf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56084ddcf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608477b7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56084771842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560847712c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608477a9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56084a7d88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56084a7d88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56084a7d88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56084a7d88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56084a7d88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56084a7d88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56084a7d88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56084a7d88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56084a7d88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56084a7d88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56084c9dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560849739578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608497445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608494efd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608494efd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608494f0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608494ef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608494ef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608494ef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56084ddd194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56084ddda7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56084ddc2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56084ddecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f058e438082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56084771143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x30,0x3d,0x2d,0x49,0x69,0x49,0x36,0x4d,0x32,0x55,0x7a,0x49,0x48,0x30,0x2e,0x65,0x33,0x30,0x2e, Step #5: e0=-IiI6M2UzIH0.e30. Step #5: artifact_prefix='./'; Test unit written to ./oom-b53469b0dae2f2e7f3d1f3d915d500823d9ef982 Step #5: Base64: ZTA9LUlpSTZNMlV6SUgwLmUzMC4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2100 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 399465798 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5628ce5bed60, 0x5628ce7a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5628ce7a7720,0x5628d06312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b53469b0dae2f2e7f3d1f3d915d500823d9ef982' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2488 processed earlier; will process 8488 files now Step #5: #1 pulse cov: 3473 ft: 3474 exec/s: 0 rss: 169Mb Step #5: ==75638== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5628c51012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5628cb73c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628cb71f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628cb71f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5628c5107652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5628c506842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5628c5062c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5628c50f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5628c81288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5628c81288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5628c81288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5628c81288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5628c81288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5628c81288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5628c81288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5628c81288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5628c81288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5628c81288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5628ca32d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5628c7089578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5628c70945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5628c6e3fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5628c6e3fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5628c6e40808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5628c6e3f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5628c6e3f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5628c6e3f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628cb72194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5628cb72a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628cb712529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5628cb73cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f14ea7f3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5628c506143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xce,0x85,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xd6,0xb7,0xcd,0x84,0xcd,0x84, Step #5: \316\205\315\204\315\204\315\204\315\204\315\204\315\204\326\267\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-ec01dcfedd13fa5e08984a4e221534353483b0a3 Step #5: Base64: zoXNhM2EzYTNhM2EzYTWt82EzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2101 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 399997422 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560188c27d60, 0x560188e1071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560188e10720,0x56018ac9a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ec01dcfedd13fa5e08984a4e221534353483b0a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2490 processed earlier; will process 8486 files now Step #5: ==75674== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56017f76a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560185da5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560185d8846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560185d8838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56017f770652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56017f6d142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56017f6cbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56017f762595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601827918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601827918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601827918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601827918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601827918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601827918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601827918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601827918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601827918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601827918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56018499645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601816f2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601816fd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601814a8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601814a8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601814a9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601814a8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601814a8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601814a8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560185d8a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560185d937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560185d7b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560185da5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f32132e7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56017f6ca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x7,0xef,0xad,0xbf,0xef,0xbc,0xbb,0x79,0x7d,0xe1,0xff,0xff,0xf9,0xff,0x4b,0x9,0x3d, Step #5: \000\000\000\007\357\255\277\357\274\273y}\341\377\377\371\377K\011= Step #5: artifact_prefix='./'; Test unit written to ./oom-72ca073d94a95ece92193e2bdf8e64947c38a521 Step #5: Base64: AAAAB++tv++8u3l94f//+f9LCT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2102 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 400483344 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5627f951cd60, 0x5627f970571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5627f9705720,0x5627fb58f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/72ca073d94a95ece92193e2bdf8e64947c38a521' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2491 processed earlier; will process 8485 files now Step #5: #1 pulse cov: 11175 ft: 11176 exec/s: 0 rss: 188Mb Step #5: ==75710== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5627f005f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5627f669a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5627f667d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5627f667d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5627f0065652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5627effc642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5627effc0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5627f0057595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627f30868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627f30868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627f30868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627f30868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627f30868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627f30868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627f30868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627f30868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627f30868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627f30868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5627f528b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5627f1fe7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5627f1ff25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5627f1d9dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5627f1d9dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5627f1d9e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5627f1d9d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5627f1d9d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5627f1d9d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5627f667f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627f66887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5627f6670529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5627f669afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3933233082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5627effbf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x55,0x54,0x20,0x2f,0xa,0x54,0x72,0x61,0x6e,0x73,0x66,0x65,0x72,0x2d,0x65,0x67,0x3a,0xa,0xa, Step #5: PUT /\012Transfer-eg:\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-ebc0dd2cf51ad02718770cd9839239417cb53f49 Step #5: Base64: UFVUIC8KVHJhbnNmZXItZWc6Cgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2103 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 401043808 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556885c55d60, 0x556885e3e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556885e3e720,0x556887cc82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ebc0dd2cf51ad02718770cd9839239417cb53f49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2493 processed earlier; will process 8483 files now Step #5: ==75746== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55687c7982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556882dd3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556882db646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556882db638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55687c79e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55687c6ff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55687c6f9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55687c790595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55687f7bf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55687f7bf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55687f7bf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55687f7bf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55687f7bf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55687f7bf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55687f7bf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55687f7bf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55687f7bf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55687f7bf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5568819c445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55687e720578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55687e72b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55687e4d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55687e4d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55687e4d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55687e4d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55687e4d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55687e4d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556882db894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556882dc17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556882da9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556882dd3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1a77b78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55687c6f843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x24,0x3a,0x28,0x30,0x2e,0xd,0x31,0x2e,0xd,0x30,0x2e,0xd,0x36,0x2e,0x7b, Step #5: $3::{$:(0.\0151.\0150.\0156.{ Step #5: artifact_prefix='./'; Test unit written to ./oom-ab168f04e41e5262f79fdc4dca5b193ed3828502 Step #5: Base64: JDM6OnskOigwLg0xLg0wLg02Lns= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2104 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 401538232 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ebe8715d60, 0x55ebe88fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ebe88fe720,0x55ebea7882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ab168f04e41e5262f79fdc4dca5b193ed3828502' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2494 processed earlier; will process 8482 files now Step #5: ==75782== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ebdf2582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ebe5893728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ebe587646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ebe587638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ebdf25e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ebdf1bf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ebdf1b9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ebdf250595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ebe227f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ebe227f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ebe227f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ebe227f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ebe227f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ebe227f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ebe227f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ebe227f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ebe227f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ebe227f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ebe448445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ebe11e0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ebe11eb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ebe0f96d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ebe0f96d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ebe0f97808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ebe0f96944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ebe0f96944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ebe0f96944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ebe587894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ebe58817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ebe5869529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ebe5893fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6600c00082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ebdf1b843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3a,0x20,0x78,0x6d,0x6c,0x3a,0x69,0x64,0x3d,0x22,0x78,0xe3,0x80,0x87,0xe3,0x80,0x87,0x22,0x3e, Step #5: <: xml:id=\"x\343\200\207\343\200\207\"> Step #5: artifact_prefix='./'; Test unit written to ./oom-aebe11cad1e394baaa406e9e889514e9865e2a13 Step #5: Base64: PDogeG1sOmlkPSJ444CH44CHIj4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2105 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 402032009 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b238e14d60, 0x55b238ffd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b238ffd720,0x55b23ae872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aebe11cad1e394baaa406e9e889514e9865e2a13' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2495 processed earlier; will process 8481 files now Step #5: ==75818== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b22f9572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b235f92728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b235f7546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b235f7538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b22f95d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b22f8be42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b22f8b8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b22f94f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b23297e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b23297e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b23297e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b23297e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b23297e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b23297e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b23297e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b23297e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b23297e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b23297e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b234b8345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b2318df578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b2318ea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b231695d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b231695d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b231696808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b231695944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b231695944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b231695944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b235f7794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b235f807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b235f68529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b235f92fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa708752082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b22f8b743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27, Step #5: ''''''''''''''''''' Step #5: artifact_prefix='./'; Test unit written to ./oom-c720753720809b720c757e9b484d8d7995ec2d75 Step #5: Base64: ICcnJycnJycnJycnJycnJycnJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2106 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 402520870 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560dba837d60, 0x560dbaa2071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560dbaa20720,0x560dbc8aa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c720753720809b720c757e9b484d8d7995ec2d75' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2496 processed earlier; will process 8480 files now Step #5: #1 pulse cov: 3873 ft: 3874 exec/s: 0 rss: 171Mb Step #5: ==75854== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560db137a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560db79b5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560db799846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560db799838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560db1380652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560db12e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560db12dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560db1372595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560db43a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560db43a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560db43a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560db43a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560db43a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560db43a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560db43a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560db43a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560db43a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560db43a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560db65a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560db3302578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560db330d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560db30b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560db30b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560db30b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560db30b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560db30b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560db30b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560db799a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560db79a37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560db798b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560db79b5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78d1bef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560db12da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4f,0x3a,0x53,0x2d,0x31,0x2d,0x30,0x78,0x46,0x46,0x46,0x46,0x46,0x46,0x46,0x46,0x46,0x42,0x42,0x45, Step #5: O:S-1-0xFFFFFFFFFBBE Step #5: artifact_prefix='./'; Test unit written to ./oom-6d0747f370b44449304155ccb388c62c0ee70b5d Step #5: Base64: TzpTLTEtMHhGRkZGRkZGRkZCQkU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2107 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 403058314 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565024501d60, 0x5650246ea71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5650246ea720,0x5650265742c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6d0747f370b44449304155ccb388c62c0ee70b5d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2498 processed earlier; will process 8478 files now Step #5: ==75890== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56501b0442d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56502167f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56502166246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56502166238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56501b04a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56501afab42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56501afa5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56501b03c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56501e06b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56501e06b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56501e06b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56501e06b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56501e06b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56501e06b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56501e06b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56501e06b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56501e06b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56501e06b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56502027045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56501cfcc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56501cfd75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56501cd82d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56501cd82d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56501cd83808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56501cd82944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56501cd82944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56501cd82944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56502166494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56502166d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565021655529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56502167ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f17ce5b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56501afa443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x2a,0xa,0x3d,0xa,0x1,0xa,0x1,0xa,0x3d,0x2a,0xa,0x3d,0xa,0x1,0xa,0x1,0xa,0xa,0xa, Step #5: +*\012=\012\001\012\001\012=*\012=\012\001\012\001\012\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-212453b42605a326cf191e05eaa31065b7e9e5d9 Step #5: Base64: KyoKPQoBCgEKPSoKPQoBCgEKCgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2108 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 403555503 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556956b6ed60, 0x556956d5771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556956d57720,0x556958be12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/212453b42605a326cf191e05eaa31065b7e9e5d9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2499 processed earlier; will process 8477 files now Step #5: #1 pulse cov: 4065 ft: 4066 exec/s: 0 rss: 169Mb Step #5: #2 pulse cov: 4385 ft: 4676 exec/s: 0 rss: 170Mb Step #5: ==75926== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55694d6b12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556953cec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556953ccf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556953ccf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55694d6b7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55694d61842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55694d612c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55694d6a9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569506d88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569506d88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569506d88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569506d88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569506d88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569506d88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569506d88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569506d88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569506d88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569506d88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569528dd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55694f639578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55694f6445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55694f3efd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55694f3efd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55694f3f0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55694f3ef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55694f3ef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55694f3ef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556953cd194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556953cda7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556953cc2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556953cecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe18f24e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55694d61143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0x75,0x6a,0x75,0x75,0x75,0x75,0x6a,0x75,0x6a,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x3e, Step #5: (? Step #5: artifact_prefix='./'; Test unit written to ./oom-d866e7b05e4d9bc36a3290fba7a3c6023e49e16a Step #5: Base64: KD88dWp1dXV1anVqdXV1dXV1dT4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2109 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 404129441 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55837bc8fd60, 0x55837be7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55837be78720,0x55837dd022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d866e7b05e4d9bc36a3290fba7a3c6023e49e16a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2502 processed earlier; will process 8474 files now Step #5: ==75962== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583727d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558378e0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558378df046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558378df038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5583727d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55837273942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558372733c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5583727ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583757f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583757f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583757f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583757f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583757f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583757f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583757f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583757f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583757f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583757f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5583779fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55837475a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5583747655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558374510d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558374510d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558374511808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558374510944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558374510944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558374510944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558378df294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558378dfb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558378de3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558378e0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcea02b8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55837273243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x68,0xa,0x68,0x6d,0x74,0x78,0x61,0x61,0x61,0x61,0xa7,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x6d, Step #5: \012h\012hmtxaaaa\247aaaaaaam Step #5: artifact_prefix='./'; Test unit written to ./oom-a7d10c2d5658639955a0ee635e8d55fa6a7d3693 Step #5: Base64: CmgKaG10eGFhYWGnYWFhYWFhYW0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2110 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 404617187 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562617160d60, 0x56261734971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562617349720,0x5626191d32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a7d10c2d5658639955a0ee635e8d55fa6a7d3693' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2503 processed earlier; will process 8473 files now Step #5: ==75998== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56260dca32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5626142de728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5626142c146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5626142c138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56260dca9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56260dc0a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56260dc04c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56260dc9b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562610cca8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562610cca8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562610cca8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562610cca8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562610cca8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562610cca8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562610cca8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562610cca8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562610cca8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562610cca8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562612ecf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56260fc2b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56260fc365a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56260f9e1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56260f9e1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56260f9e2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56260f9e1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56260f9e1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56260f9e1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5626142c394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5626142cc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5626142b4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5626142defa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f728d009082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56260dc0343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x45,0x78,0x65,0x63,0x5d,0xa,0x4c,0x69,0x6d,0x69,0x74,0x41,0x53,0x3d,0x35,0x32,0x4b,0x3a,0x31, Step #5: [Exec]\012LimitAS=52K:1 Step #5: artifact_prefix='./'; Test unit written to ./oom-0169a3da37061bea62cbee657c985dc362e3c832 Step #5: Base64: W0V4ZWNdCkxpbWl0QVM9NTJLOjE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2111 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 405104920 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561874f81d60, 0x56187516a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56187516a720,0x561876ff42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0169a3da37061bea62cbee657c985dc362e3c832' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2504 processed earlier; will process 8472 files now Step #5: ==76034== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56186bac42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5618720ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5618720e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5618720e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56186baca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56186ba2b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56186ba25c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56186babc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56186eaeb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56186eaeb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56186eaeb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56186eaeb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56186eaeb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56186eaeb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56186eaeb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56186eaeb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56186eaeb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56186eaeb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561870cf045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56186da4c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56186da575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56186d802d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56186d802d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56186d803808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56186d802944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56186d802944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56186d802944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5618720e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5618720ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5618720d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5618720fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f86e88de082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56186ba2443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0x77,0x3e,0x28,0x3f,0x3c,0x57,0x3e,0x28,0x3f,0x3c,0x6d,0x3e,0x28,0x3f,0x3c,0x36,0x3e, Step #5: (?(?(?(?<6> Step #5: artifact_prefix='./'; Test unit written to ./oom-fe57c25bba47e0d947974d6ef658a9aa93a79083 Step #5: Base64: KD88dz4oPzxXPig/PG0+KD88Nj4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2112 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 405593309 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561adf94ad60, 0x561adfb3371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561adfb33720,0x561ae19bd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fe57c25bba47e0d947974d6ef658a9aa93a79083' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2505 processed earlier; will process 8471 files now Step #5: ==76070== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ad648d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561adcac8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561adcaab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561adcaab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ad6493652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ad63f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ad63eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ad6485595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ad94b48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ad94b48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ad94b48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ad94b48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ad94b48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ad94b48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ad94b48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ad94b48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ad94b48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ad94b48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561adb6b945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ad8415578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ad84205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ad81cbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ad81cbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ad81cc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ad81cb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ad81cb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ad81cb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561adcaad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561adcab67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561adca9e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561adcac8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7eff65c76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ad63ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x45,0x78,0x65,0x63,0x5d,0xa,0x4c,0x69,0x6d,0x69,0x74,0x43,0x50,0x55,0x3d,0x2e,0x30,0x34,0x39, Step #5: [Exec]\012LimitCPU=.049 Step #5: artifact_prefix='./'; Test unit written to ./oom-f8c56219edc93d5c468804e99ccc726459b24eb2 Step #5: Base64: W0V4ZWNdCkxpbWl0Q1BVPS4wNDk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2113 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 406080759 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c059274d60, 0x55c05945d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c05945d720,0x55c05b2e72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f8c56219edc93d5c468804e99ccc726459b24eb2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2506 processed earlier; will process 8470 files now Step #5: #1 pulse cov: 3725 ft: 3726 exec/s: 0 rss: 168Mb Step #5: ==76106== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c04fdb72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c0563f2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c0563d546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c0563d538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c04fdbd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c04fd1e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c04fd18c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c04fdaf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c052dde8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c052dde8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c052dde8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c052dde8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c052dde8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c052dde8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c052dde8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c052dde8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c052dde8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c052dde8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c054fe345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c051d3f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c051d4a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c051af5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c051af5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c051af6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c051af5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c051af5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c051af5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c0563d794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0563e07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0563c8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c0563f2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe19727082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c04fd1743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdc,0x8c,0xe,0x27,0x9,0xdc,0x8c,0xe,0x27,0x9,0x0,0xa,0xe,0x27,0x0,0xa,0xe,0x27,0x9,0x30, Step #5: \334\214\016'\011\334\214\016'\011\000\012\016'\000\012\016'\0110 Step #5: artifact_prefix='./'; Test unit written to ./oom-2881e88f971b23acfa90febc1a0dd038a46de4c0 Step #5: Base64: 3IwOJwncjA4nCQAKDicACg4nCTA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2114 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 406624047 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b2b1b3fd60, 0x55b2b1d2871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b2b1d28720,0x55b2b3bb22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2881e88f971b23acfa90febc1a0dd038a46de4c0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2508 processed earlier; will process 8468 files now Step #5: ==76142== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b2a86822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b2aecbd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b2aeca046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b2aeca038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b2a8688652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b2a85e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b2a85e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b2a867a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b2ab6a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b2ab6a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b2ab6a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b2ab6a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b2ab6a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b2ab6a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b2ab6a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b2ab6a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b2ab6a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b2ab6a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b2ad8ae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b2aa60a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b2aa6155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b2aa3c0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b2aa3c0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b2aa3c1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b2aa3c0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b2aa3c0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b2aa3c0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b2aeca294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b2aecab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b2aec93529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b2aecbdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbae5830082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b2a85e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x7,0xef,0xad,0xbf,0xef,0xbc,0xbb,0xff,0xf9,0xe1,0xff,0x79,0x7d,0xff,0x4b,0x9,0x3d, Step #5: \000\000\000\007\357\255\277\357\274\273\377\371\341\377y}\377K\011= Step #5: artifact_prefix='./'; Test unit written to ./oom-a148e4adb01d0deb4637a993b417c6af5db9403b Step #5: Base64: AAAAB++tv++8u//54f95ff9LCT0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2115 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 407109080 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55797918bd60, 0x55797937471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557979374720,0x55797b1fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a148e4adb01d0deb4637a993b417c6af5db9403b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2509 processed earlier; will process 8467 files now Step #5: ==76178== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55796fcce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557976309728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5579762ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5579762ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55796fcd4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55796fc3542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55796fc2fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55796fcc6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557972cf58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557972cf58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557972cf58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557972cf58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557972cf58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557972cf58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557972cf58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557972cf58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557972cf58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557972cf58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557974efa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557971c56578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557971c615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557971a0cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557971a0cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557971a0d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557971a0c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557971a0c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557971a0c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5579762ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5579762f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5579762df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557976309fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f20b8a98082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55796fc2e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7a,0x3c,0xdb,0xbe,0x7e,0x34,0x7e,0x3c,0xdb,0xbe,0x7e,0x34,0x2c,0xbe,0xbe,0x3e,0x21,0x2c,0xbe,0x7e, Step #5: z<\333\276~4~<\333\276~4,\276\276>!,\276~ Step #5: artifact_prefix='./'; Test unit written to ./oom-4c5cf0388b2f5b5292557c19f2d9cef8dadf3a80 Step #5: Base64: ejzbvn40fjzbvn40LL6+PiEsvn4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2116 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 407620998 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55592cb5fd60, 0x55592cd4871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55592cd48720,0x55592ebd22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4c5cf0388b2f5b5292557c19f2d9cef8dadf3a80' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2510 processed earlier; will process 8466 files now Step #5: ==76214== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5559236a22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555929cdd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555929cc046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555929cc038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5559236a8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55592360942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555923603c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55592369a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5559266c98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5559266c98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5559266c98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5559266c98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5559266c98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5559266c98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5559266c98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5559266c98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5559266c98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5559266c98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5559288ce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55592562a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5559256355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5559253e0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5559253e0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5559253e1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5559253e0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5559253e0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5559253e0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555929cc294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555929ccb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555929cb3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555929cddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f551d2ca082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55592360243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x70,0x73,0x0,0x73,0x63,0x65,0x6e,0x74,0x20,0x0,0x44,0x65,0x6e,0xe2,0x81,0x9f,0x4d,0xf6,0xff,0x7f, Step #5: ps\000scent \000Den\342\201\237M\366\377\177 Step #5: artifact_prefix='./'; Test unit written to ./oom-ea7d07d8067084573214d04c00cc16e98879ef38 Step #5: Base64: cHMAc2NlbnQgAERlbuKBn032/38= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2117 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 408108618 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a47e025d60, 0x55a47e20e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a47e20e720,0x55a4800982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ea7d07d8067084573214d04c00cc16e98879ef38' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2511 processed earlier; will process 8465 files now Step #5: #1 pulse cov: 3885 ft: 3886 exec/s: 0 rss: 170Mb Step #5: ==76250== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a474b682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a47b1a3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a47b18646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a47b18638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a474b6e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a474acf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a474ac9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a474b60595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a477b8f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a477b8f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a477b8f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a477b8f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a477b8f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a477b8f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a477b8f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a477b8f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a477b8f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a477b8f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a479d9445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a476af0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a476afb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4768a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4768a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4768a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4768a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4768a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4768a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a47b18894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a47b1917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a47b179529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a47b1a3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f499d7c6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a474ac843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x27,0x3c,0x3c,0x7b,0x27,0x3c,0x7b,0x7b,0x27,0x3c,0x3c,0x7b,0x27,0x3c,0x7b,0x27,0x3c,0x2c,0x7b, Step #5: {'<<{'<{{'<<{'<{'<,{ Step #5: artifact_prefix='./'; Test unit written to ./oom-1bcfb011a792215876f2876d7ef1a53bfd4472cc Step #5: Base64: eyc8PHsnPHt7Jzw8eyc8eyc8LHs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2118 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 408643207 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1b590ad60, 0x55e1b5af371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1b5af3720,0x55e1b797d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1bcfb011a792215876f2876d7ef1a53bfd4472cc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2513 processed earlier; will process 8463 files now Step #5: ==76286== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1ac44d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1b2a88728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1b2a6b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1b2a6b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1ac453652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1ac3b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1ac3aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1ac445595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1af4748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1af4748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1af4748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1af4748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1af4748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1af4748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1af4748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1af4748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1af4748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1af4748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1b167945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1ae3d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1ae3e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1ae18bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1ae18bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1ae18c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1ae18b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1ae18b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1ae18b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1b2a6d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1b2a767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1b2a5e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1b2a88fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4e3e7f0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1ac3ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0x75,0x24,0x33,0x9,0x6e,0x75,0x24,0x33,0x9,0x6e,0x75,0x24,0x33,0x9,0x6e,0x75,0x24,0x33,0x9, Step #5: nu$3\011nu$3\011nu$3\011nu$3\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-51b72f3bfa9e757c6fc6057e432e7f553dee67f2 Step #5: Base64: bnUkMwludSQzCW51JDMJbnUkMwk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2119 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 409137831 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605eea05d60, 0x5605eebee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605eebee720,0x5605f0a782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/51b72f3bfa9e757c6fc6057e432e7f553dee67f2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2514 processed earlier; will process 8462 files now Step #5: ==76322== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605e55482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605ebb83728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605ebb6646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605ebb6638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605e554e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605e54af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605e54a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605e5540595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605e856f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605e856f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605e856f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605e856f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605e856f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605e856f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605e856f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605e856f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605e856f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605e856f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605ea77445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605e74d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605e74db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605e7286d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605e7286d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605e7287808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605e7286944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605e7286944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605e7286944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605ebb6894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605ebb717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605ebb59529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605ebb83fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6c05a6b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605e54a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x60,0x0,0x0,0x0,0x60,0x49,0x4e,0x54,0x20,0x45,0x50,0x48,0x45,0x4d,0x45,0x52,0x41,0x4c,0xa, Step #5: \012`\000\000\000`INT EPHEMERAL\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-25c836d015c21846f398d84736d536767d24d2f0 Step #5: Base64: CmAAAABgSU5UIEVQSEVNRVJBTAo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2120 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 409766297 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556dc1395d60, 0x556dc157e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556dc157e720,0x556dc34082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/25c836d015c21846f398d84736d536767d24d2f0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2515 processed earlier; will process 8461 files now Step #5: ==76358== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556db7ed82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556dbe513728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556dbe4f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556dbe4f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556db7ede652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556db7e3f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556db7e39c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556db7ed0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556dbaeff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556dbaeff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556dbaeff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556dbaeff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556dbaeff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556dbaeff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556dbaeff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556dbaeff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556dbaeff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556dbaeff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556dbd10445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556db9e60578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556db9e6b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556db9c16d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556db9c16d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556db9c17808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556db9c16944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556db9c16944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556db9c16944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556dbe4f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556dbe5017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556dbe4e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556dbe513fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4b0ef17082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556db7e3843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x6d,0x2e,0x73,0x77,0x61,0x70,0xa,0x69,0x6e,0x61,0x63,0x74,0x69,0x76,0x65,0x2d,0x65,0x6e,0x1, Step #5: \000m.swap\012inactive-en\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-d66719d6706ecad78d3e26f3325b9e5339e9f08c Step #5: Base64: AG0uc3dhcAppbmFjdGl2ZS1lbgE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2121 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 410254218 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55af72a8dd60, 0x55af72c7671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55af72c76720,0x55af74b002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d66719d6706ecad78d3e26f3325b9e5339e9f08c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2516 processed earlier; will process 8460 files now Step #5: ==76394== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55af695d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55af6fc0b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55af6fbee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55af6fbee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55af695d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55af6953742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55af69531c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55af695c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55af6c5f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55af6c5f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55af6c5f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55af6c5f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55af6c5f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55af6c5f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55af6c5f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55af6c5f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55af6c5f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55af6c5f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55af6e7fc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55af6b558578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55af6b5635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55af6b30ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55af6b30ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55af6b30f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55af6b30e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55af6b30e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55af6b30e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55af6fbf094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55af6fbf97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55af6fbe1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55af6fc0bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efedd234082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55af6953043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x54,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x24,0x4f,0x3a,0x1a, Step #5: $T\000\000\000\000\000\000\000\000\000\000\000\000\000\000$O:\032 Step #5: artifact_prefix='./'; Test unit written to ./oom-1957ca57ae4bd36edfc0daf156d3804e9552dbf1 Step #5: Base64: JFQAAAAAAAAAAAAAAAAAACRPOho= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2122 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 410750825 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5611536e7d60, 0x5611538d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5611538d0720,0x56115575a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1957ca57ae4bd36edfc0daf156d3804e9552dbf1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2517 processed earlier; will process 8459 files now Step #5: ==76430== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56114a22a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561150865728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56115084846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56115084838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56114a230652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56114a19142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56114a18bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56114a222595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56114d2518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56114d2518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56114d2518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56114d2518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56114d2518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56114d2518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56114d2518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56114d2518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56114d2518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56114d2518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56114f45645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56114c1b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56114c1bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56114bf68d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56114bf68d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56114bf69808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56114bf68944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56114bf68944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56114bf68944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56115084a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5611508537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56115083b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561150865fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8aa7cf7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56114a18a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x10,0xf0,0x92,0x85,0xb2,0xf0,0x91,0x84,0xb2,0xf0,0x93,0x83,0xa2,0xf0,0x93,0x83,0xa2, Step #5: \000\000\000\020\360\222\205\262\360\221\204\262\360\223\203\242\360\223\203\242 Step #5: artifact_prefix='./'; Test unit written to ./oom-861241947a6aed463b665e5797fd5ff68b876cf9 Step #5: Base64: AAAAEPCShbLwkYSy8JODovCTg6I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2123 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 411238068 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56346e53fd60, 0x56346e72871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56346e728720,0x5634705b22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/861241947a6aed463b665e5797fd5ff68b876cf9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2518 processed earlier; will process 8458 files now Step #5: ==76466== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634650822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56346b6bd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56346b6a046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56346b6a038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563465088652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563464fe942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563464fe3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56346507a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634680a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634680a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634680a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634680a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634680a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634680a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634680a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634680a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634680a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634680a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56346a2ae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56346700a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634670155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563466dc0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563466dc0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563466dc1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563466dc0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563466dc0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563466dc0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56346b6a294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56346b6ab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56346b693529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56346b6bdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f694c7e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563464fe243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x0,0x0,0x1,0xe2,0x80,0xae,0xf3,0xa0,0x81,0x8b,0x1d,0xe2,0x80,0x81,0x0,0x58, Step #5: ID3\004\000\000\001\342\200\256\363\240\201\213\035\342\200\201\000X Step #5: artifact_prefix='./'; Test unit written to ./oom-618e52bc78cda352a263eb1d4995e1dd87ded28e Step #5: Base64: SUQzBAAAAeKArvOggYsd4oCBAFg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2124 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 411726746 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5573521f2d60, 0x5573523db71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5573523db720,0x5573542652c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/618e52bc78cda352a263eb1d4995e1dd87ded28e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2519 processed earlier; will process 8457 files now Step #5: ==76502== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557348d352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55734f370728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55734f35346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55734f35338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557348d3b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557348c9c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557348c96c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557348d2d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55734bd5c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55734bd5c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55734bd5c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55734bd5c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55734bd5c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55734bd5c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55734bd5c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55734bd5c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55734bd5c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55734bd5c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55734df6145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55734acbd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55734acc85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55734aa73d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55734aa73d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55734aa74808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55734aa73944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55734aa73944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55734aa73944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55734f35594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55734f35e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55734f346529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55734f370fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1642a72082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557348c9543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x3a,0x31,0x9,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f, Step #5: 3:1\011________________ Step #5: artifact_prefix='./'; Test unit written to ./oom-a0f26938647bb5f5fac41f5b196b7085a1b2c162 Step #5: Base64: MzoxCV9fX19fX19fX19fX19fX18= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2125 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 412210248 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587bd0cdd60, 0x5587bd2b671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5587bd2b6720,0x5587bf1402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a0f26938647bb5f5fac41f5b196b7085a1b2c162' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2520 processed earlier; will process 8456 files now Step #5: ==76538== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5587b3c102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5587ba24b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5587ba22e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5587ba22e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5587b3c16652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5587b3b7742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5587b3b71c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5587b3c08595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5587b6c378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5587b6c378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5587b6c378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5587b6c378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5587b6c378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5587b6c378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5587b6c378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5587b6c378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5587b6c378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5587b6c378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5587b8e3c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5587b5b98578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587b5ba35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5587b594ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5587b594ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5587b594f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5587b594e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5587b594e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5587b594e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5587ba23094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5587ba2397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5587ba221529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5587ba24bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f74013c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5587b3b7043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x53,0x3a,0xe3,0x8c,0x96,0xcd,0x84,0xcd,0x96,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: wS:\343\214\226\315\204\315\226\315\204\315\204\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-c6eac8c3b05cd46574c29fca8c04b5f4de15a9ae Step #5: Base64: d1M644yWzYTNls2EzYTNhM2EzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2126 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 412693135 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d632ff7d60, 0x55d6331e071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d6331e0720,0x55d63506a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c6eac8c3b05cd46574c29fca8c04b5f4de15a9ae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2521 processed earlier; will process 8455 files now Step #5: ==76574== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d629b3a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d630175728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d63015846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d63015838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d629b40652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d629aa142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d629a9bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d629b32595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d62cb618c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d62cb618c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d62cb618c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d62cb618c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d62cb618c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d62cb618c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d62cb618c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d62cb618c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d62cb618c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d62cb618c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d62ed6645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d62bac2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d62bacd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d62b878d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d62b878d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d62b879808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d62b878944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d62b878944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d62b878944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d63015a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d6301637b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d63014b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d630175fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3516bab082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d629a9a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0xa,0x24,0x7e,0x8,0x24,0x2d,0x2b,0x24,0x2d,0x2b,0x24,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x9c, Step #5: ~\012$~\010$-+$-+$\377\377\377\377\377\377\377\234 Step #5: artifact_prefix='./'; Test unit written to ./oom-d722996e1a87d094b062b53c4db28c21b6e18724 Step #5: Base64: fgokfggkLSskLSsk/////////5w= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2127 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 413184290 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7b2067d60, 0x55b7b225071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7b2250720,0x55b7b40da2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d722996e1a87d094b062b53c4db28c21b6e18724' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2522 processed earlier; will process 8454 files now Step #5: ==76610== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7a8baa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7af1e5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7af1c846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7af1c838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7a8bb0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7a8b1142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7a8b0bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7a8ba2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7abbd18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7abbd18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7abbd18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7abbd18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7abbd18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7abbd18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7abbd18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7abbd18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7abbd18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7abbd18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7addd645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7aab32578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7aab3d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7aa8e8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7aa8e8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7aa8e9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7aa8e8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7aa8e8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7aa8e8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7af1ca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7af1d37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7af1bb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7af1e5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7244c48082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7a8b0a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x44,0x73,0x74,0x65,0x72,0x61,0x6d,0x60,0x6e,0x61,0x44,0x60,0x6e,0x69,0x66,0x4d,0x83,0x12, Step #5: DaDsteram`naD`nifM\203\022 Step #5: artifact_prefix='./'; Test unit written to ./oom-cf4eaf7ea933c10d75cddf0d32c8d23be3ca3eeb Step #5: Base64: RGFEc3RlcmFtYG5hRGBuaWZNgxI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2128 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 413811206 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562c9dbb7d60, 0x562c9dda071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562c9dda0720,0x562c9fc2a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cf4eaf7ea933c10d75cddf0d32c8d23be3ca3eeb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2523 processed earlier; will process 8453 files now Step #5: #1 pulse cov: 3770 ft: 3771 exec/s: 0 rss: 168Mb Step #5: ==76646== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562c946fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562c9ad35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562c9ad1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562c9ad1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562c94700652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562c9466142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562c9465bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562c946f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562c977218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562c977218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562c977218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562c977218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562c977218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562c977218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562c977218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562c977218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562c977218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562c977218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562c9992645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562c96682578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562c9668d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562c96438d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562c96438d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562c96439808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562c96438944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562c96438944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562c96438944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562c9ad1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562c9ad237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562c9ad0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562c9ad35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd9089a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562c9465a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0xa8,0xf0,0x9d,0x85,0xa8,0xf0,0x9d,0x85,0xa8,0xf0,0x9d,0x85,0xa8,0xf0,0x9d,0x85,0xa8,0xcd,0x80, Step #5: \315\250\360\235\205\250\360\235\205\250\360\235\205\250\360\235\205\250\315\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-d4bd08cf0dfbdc0c5258b3157cb5eb80b4f7d6ad Step #5: Base64: zajwnYWo8J2FqPCdhajwnYWozYA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2129 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 414342113 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a78869d60, 0x558a78a5271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a78a52720,0x558a7a8dc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d4bd08cf0dfbdc0c5258b3157cb5eb80b4f7d6ad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2525 processed earlier; will process 8451 files now Step #5: ==76682== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a6f3ac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a759e7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a759ca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a759ca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a6f3b2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a6f31342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a6f30dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a6f3a4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a723d38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a723d38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a723d38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a723d38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a723d38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a723d38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a723d38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a723d38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a723d38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a723d38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a745d845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a71334578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a7133f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a710ead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a710ead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a710eb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a710ea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a710ea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a710ea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a759cc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a759d57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a759bd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a759e7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc5575d3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a6f30c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x10,0x65,0x6e,0x76,0x3a,0x20,0x24,0x7b,0x7b,0x20,0x73,0x20,0x24,0x7b,0x7b,0x7d,0x7d, Step #5: \000\000\000\020env: ${{ s ${{}} Step #5: artifact_prefix='./'; Test unit written to ./oom-3816de000a450f8b4591ed584d10a73a1bc19a18 Step #5: Base64: AAAAEGVudjogJHt7IHMgJHt7fX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2130 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 414847615 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559539819d60, 0x559539a0271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559539a02720,0x55953b88c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3816de000a450f8b4591ed584d10a73a1bc19a18' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2526 processed earlier; will process 8450 files now Step #5: ==76718== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55953035c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559536997728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55953697a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55953697a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559530362652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5595302c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5595302bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559530354595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5595333838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5595333838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5595333838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5595333838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5595333838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5595333838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5595333838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5595333838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5595333838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5595333838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55953558845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5595322e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5595322ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55953209ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55953209ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55953209b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55953209a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55953209a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55953209a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55953697c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5595369857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55953696d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559536997fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1dad16e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5595302bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x32,0x32,0x33,0x33,0x37,0x32,0x30,0x33,0x36,0x38,0x35,0x34,0x37,0x37,0x35,0x38,0x30,0x36,0x2e, Step #5: 9223372036854775806. Step #5: artifact_prefix='./'; Test unit written to ./oom-b1fd4ece36c7592038bb8163599c077c734b4a10 Step #5: Base64: OTIyMzM3MjAzNjg1NDc3NTgwNi4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2131 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 415334257 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5576c329ed60, 0x5576c348771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5576c3487720,0x5576c53112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b1fd4ece36c7592038bb8163599c077c734b4a10' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2527 processed earlier; will process 8449 files now Step #5: ==76754== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5576b9de12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5576c041c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5576c03ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5576c03ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5576b9de7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5576b9d4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5576b9d42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5576b9dd9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5576bce088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5576bce088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5576bce088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5576bce088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5576bce088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5576bce088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5576bce088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5576bce088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5576bce088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5576bce088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5576bf00d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5576bbd69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5576bbd745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5576bbb1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5576bbb1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5576bbb20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5576bbb1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5576bbb1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5576bbb1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5576c040194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5576c040a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5576c03f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5576c041cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f51280f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5576b9d4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4b,0x44,0x45,0x4f,0x42,0xec,0xfe,0x0,0xfe,0xf8,0x0,0x65,0x7e,0xe4,0x61,0x72,0x69,0x3d,0x7e,0xe4, Step #5: KDEOB\354\376\000\376\370\000e~\344ari=~\344 Step #5: artifact_prefix='./'; Test unit written to ./oom-9d89daaebfeb96e318f2e83420f50746a3401780 Step #5: Base64: S0RFT0Ls/gD++ABlfuRhcmk9fuQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2132 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 415819744 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563f2d970d60, 0x563f2db5971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563f2db59720,0x563f2f9e32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9d89daaebfeb96e318f2e83420f50746a3401780' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2528 processed earlier; will process 8448 files now Step #5: ==76790== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563f244b32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563f2aaee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563f2aad146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563f2aad138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563f244b9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563f2441a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563f24414c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563f244ab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563f274da8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563f274da8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563f274da8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563f274da8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563f274da8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563f274da8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563f274da8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563f274da8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563f274da8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563f274da8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563f296df45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563f2643b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563f264465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563f261f1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563f261f1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563f261f2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563f261f1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563f261f1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563f261f1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563f2aad394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563f2aadc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563f2aac4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563f2aaeefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc60e1b8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563f2441343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0xbd,0x73,0x74,0x3b,0x6d,0x62,0xdf,0xbd,0x73,0x4e,0x3b,0x6d,0x62,0xdf,0xbd,0x73,0x74,0x4e,0x3b, Step #5: \337\275st;mb\337\275sN;mb\337\275stN; Step #5: artifact_prefix='./'; Test unit written to ./oom-c1a9bce9520dd004faf1dca21d63a90c84d50bad Step #5: Base64: 371zdDttYt+9c047bWLfvXN0Tjs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2133 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 416316962 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb0ed43d60, 0x55fb0ef2c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb0ef2c720,0x55fb10db62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c1a9bce9520dd004faf1dca21d63a90c84d50bad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2529 processed earlier; will process 8447 files now Step #5: ==76826== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fb058862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fb0bec1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fb0bea446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fb0bea438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fb0588c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fb057ed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fb057e7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fb0587e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fb088ad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fb088ad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fb088ad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fb088ad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fb088ad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fb088ad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fb088ad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fb088ad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fb088ad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fb088ad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fb0aab245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fb0780e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fb078195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fb075c4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fb075c4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fb075c5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fb075c4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fb075c4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fb075c4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fb0bea694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fb0beaf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fb0be97529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fb0bec1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f42e2f83082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fb057e643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x51,0x31,0x32,0x5c,0x31,0xe1,0x9f,0xa3,0xe1,0x9e,0xa3,0x2f,0x78,0x28,0x3f,0x30,0x91,0x31,0x5d, Step #5: MQ12\\1\341\237\243\341\236\243/x(?0\2211] Step #5: artifact_prefix='./'; Test unit written to ./oom-affbebda7d435d0786de16269843a834e2ad300e Step #5: Base64: TVExMlwx4Z+j4Z6jL3goPzCRMV0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2134 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 416808261 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5584bd3e0d60, 0x5584bd5c971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5584bd5c9720,0x5584bf4532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/affbebda7d435d0786de16269843a834e2ad300e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2530 processed earlier; will process 8446 files now Step #5: #1 pulse cov: 3589 ft: 3590 exec/s: 0 rss: 167Mb Step #5: ==76862== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584b3f232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5584ba55e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5584ba54146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5584ba54138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5584b3f29652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5584b3e8a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584b3e84c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5584b3f1b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584b6f4a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584b6f4a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584b6f4a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584b6f4a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584b6f4a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584b6f4a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584b6f4a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584b6f4a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584b6f4a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584b6f4a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5584b914f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5584b5eab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584b5eb65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584b5c61d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584b5c61d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584b5c62808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584b5c61944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584b5c61944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584b5c61944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5584ba54394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5584ba54c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5584ba534529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5584ba55efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f43bae9a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584b3e8343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x2d,0x2d,0x2d,0x32,0x45,0x2d,0x47,0x42,0x49,0x4e,0x20,0x2d,0x2d,0x27,0x2d,0x2d,0xa,0x2d,0xd3, Step #5: ---2E-GBIN --'--\012-\323 Step #5: artifact_prefix='./'; Test unit written to ./oom-a93dc797480d69ce795cf1ab9e4d599deda4fe01 Step #5: Base64: IC0tLTJFLUdCSU4gLS0nLS0KLdM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2135 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 417356339 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bacd24ed60, 0x55bacd43771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bacd437720,0x55bacf2c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a93dc797480d69ce795cf1ab9e4d599deda4fe01' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2532 processed earlier; will process 8444 files now Step #5: ==76898== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bac3d912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55baca3cc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55baca3af46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55baca3af38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bac3d97652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bac3cf842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bac3cf2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bac3d89595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bac6db88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bac6db88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bac6db88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bac6db88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bac6db88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bac6db88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bac6db88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bac6db88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bac6db88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bac6db88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bac8fbd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bac5d19578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bac5d245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bac5acfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bac5acfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bac5ad0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bac5acf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bac5acf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bac5acf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55baca3b194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55baca3ba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55baca3a2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55baca3ccfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5182f2c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bac3cf143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x2d,0x33,0x2d,0x36,0x20,0x38,0x3a,0x30,0x3a,0x39,0x2b,0x31,0x31,0x34,0x37,0x31,0x34,0xd1,0xad, Step #5: 0-3-6 8:0:9+114714\321\255 Step #5: artifact_prefix='./'; Test unit written to ./oom-e4113a0de4f2bb08c782faf1f47ecf94e0ec0cbf Step #5: Base64: MC0zLTYgODowOjkrMTE0NzE00a0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2136 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 417846389 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d2149bfd60, 0x55d214ba871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d214ba8720,0x55d216a322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e4113a0de4f2bb08c782faf1f47ecf94e0ec0cbf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2533 processed earlier; will process 8443 files now Step #5: ==76934== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d20b5022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d211b3d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d211b2046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d211b2038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d20b508652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d20b46942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d20b463c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d20b4fa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d20e5298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d20e5298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d20e5298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d20e5298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d20e5298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d20e5298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d20e5298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d20e5298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d20e5298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d20e5298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d21072e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d20d48a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d20d4955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d20d240d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d20d240d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d20d241808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d20d240944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d20d240944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d20d240944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d211b2294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d211b2b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d211b13529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d211b3dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2065158082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d20b46243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x7b,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57,0x57, Step #5: f{WWWWWWWWWWWWWWWWWW Step #5: artifact_prefix='./'; Test unit written to ./oom-88812db5f4425965a1ca9c99382114c2295a8590 Step #5: Base64: ZntXV1dXV1dXV1dXV1dXV1dXV1c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2137 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 418338544 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bf6111cd60, 0x55bf6130571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bf61305720,0x55bf6318f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/88812db5f4425965a1ca9c99382114c2295a8590' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2534 processed earlier; will process 8442 files now Step #5: ==76970== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bf57c5f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bf5e29a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bf5e27d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bf5e27d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bf57c65652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bf57bc642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bf57bc0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bf57c57595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bf5ac868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bf5ac868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bf5ac868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bf5ac868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bf5ac868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bf5ac868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bf5ac868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bf5ac868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bf5ac868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bf5ac868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bf5ce8b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bf59be7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bf59bf25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bf5999dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bf5999dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bf5999e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bf5999d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bf5999d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bf5999d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bf5e27f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bf5e2887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bf5e270529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bf5e29afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd6132b5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bf57bbf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x31,0x44,0x73,0x30,0x0,0x0,0x0,0x0,0x0,0x5,0x69,0x0,0xf3,0xa0,0x84,0x81, Step #5: ID3\0041Ds0\000\000\000\000\000\005i\000\363\240\204\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-be711afdf2cf49fbdbaf98397b3fd91d1248ef6c Step #5: Base64: SUQzBDFEczAAAAAAAAVpAPOghIE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2138 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 418826196 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d3399dd60, 0x558d33b8671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d33b86720,0x558d35a102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be711afdf2cf49fbdbaf98397b3fd91d1248ef6c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2535 processed earlier; will process 8441 files now Step #5: ==77006== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d2a4e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d30b1b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d30afe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d30afe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d2a4e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d2a44742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d2a441c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d2a4d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d2d5078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d2d5078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d2d5078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d2d5078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d2d5078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d2d5078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d2d5078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d2d5078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d2d5078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d2d5078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d2f70c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d2c468578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d2c4735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d2c21ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d2c21ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d2c21f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d2c21e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d2c21e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d2c21e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d30b0094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d30b097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d30af1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d30b1bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc012c34082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d2a44043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x4a,0x50,0x22,0x50, Step #5: Step #5: Step #5: #0 0x558d0c6962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d12cd1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d12cb446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d12cb438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d0c69c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d0c5fd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d0c5f7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d0c68e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d0f6bd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d0f6bd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d0f6bd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d0f6bd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d0f6bd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d0f6bd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d0f6bd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d0f6bd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d0f6bd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d0f6bd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d118c245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d0e61e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d0e6295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d0e3d4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d0e3d4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d0e3d5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d0e3d4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d0e3d4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d0e3d4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d12cb694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d12cbf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d12ca7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d12cd1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd5404d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d0c5f643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x2d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d, Step #5: \012-\012=\012=\012=\012=\012=\012=\012=\012=\012= Step #5: artifact_prefix='./'; Test unit written to ./oom-337b75236ef66284dc05d3d8011a81f7f8e01c98 Step #5: Base64: Ci0KPQo9Cj0KPQo9Cj0KPQo9Cj0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2140 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 419800510 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55648934ed60, 0x55648953771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556489537720,0x55648b3c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/337b75236ef66284dc05d3d8011a81f7f8e01c98' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2537 processed earlier; will process 8439 files now Step #5: ==77078== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55647fe912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564864cc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564864af46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564864af38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55647fe97652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55647fdf842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55647fdf2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55647fe89595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556482eb88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556482eb88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556482eb88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556482eb88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556482eb88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556482eb88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556482eb88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556482eb88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556482eb88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556482eb88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564850bd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556481e19578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556481e245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556481bcfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556481bcfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556481bd0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556481bcf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556481bcf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556481bcf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564864b194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564864ba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5564864a2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564864ccfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2673dd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55647fdf143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xed,0x88,0x87,0xcd,0x8f,0xec,0x88,0x87,0xcd,0x8f,0xed,0x88,0x87,0xcd,0x8f,0xed,0x88,0x87,0xcd,0x8f, Step #5: \355\210\207\315\217\354\210\207\315\217\355\210\207\315\217\355\210\207\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-eec680296d07d2a1ec2bed3a077de19fa313f7a0 Step #5: Base64: 7YiHzY/siIfNj+2Ih82P7YiHzY8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2141 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 420283329 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559c190d6d60, 0x559c192bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559c192bf720,0x559c1b1492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eec680296d07d2a1ec2bed3a077de19fa313f7a0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2538 processed earlier; will process 8438 files now Step #5: #1 pulse cov: 4275 ft: 4276 exec/s: 0 rss: 169Mb Step #5: ==77114== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559c0fc192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559c16254728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559c1623746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559c1623738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559c0fc1f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559c0fb8042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559c0fb7ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559c0fc11595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559c12c408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559c12c408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559c12c408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559c12c408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559c12c408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559c12c408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559c12c408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559c12c408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559c12c408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559c12c408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559c14e4545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559c11ba1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559c11bac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559c11957d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559c11957d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559c11958808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559c11957944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559c11957944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559c11957944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559c1623994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559c162427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559c1622a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559c16254fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa7f2eaf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559c0fb7943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2a,0x1,0x4,0x4,0x0,0x0,0x0,0x0,0x0,0x0,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0xd8,0xbd,0x2a, Step #5: *\001\004\004\000\000\000\000\000\000\004\004\004\004\004\004\004\330\275* Step #5: artifact_prefix='./'; Test unit written to ./oom-99ff02219e7c301ab75913a21ce003a2a66b77a9 Step #5: Base64: KgEEBAAAAAAAAAQEBAQEBATYvSo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2142 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 420833021 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56555ed0fd60, 0x56555eef871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56555eef8720,0x565560d822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/99ff02219e7c301ab75913a21ce003a2a66b77a9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2540 processed earlier; will process 8436 files now Step #5: ==77150== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5655558522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56555be8d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56555be7046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56555be7038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565555858652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5655557b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5655557b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56555584a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5655588798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5655588798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5655588798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5655588798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5655588798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5655588798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5655588798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5655588798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5655588798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5655588798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56555aa7e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5655577da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5655577e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565557590d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565557590d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565557591808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565557590944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565557590944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565557590944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56555be7294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56555be7b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56555be63529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56555be8dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faf49e58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5655557b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x51,0x31,0x32,0x5c,0x31,0xe1,0x9f,0xa3,0xe1,0x9f,0xa3,0x2f,0x78,0x28,0x3f,0x30,0x91,0x31,0x5d, Step #5: MQ12\\1\341\237\243\341\237\243/x(?0\2211] Step #5: artifact_prefix='./'; Test unit written to ./oom-f44d4e06b990fedb814f1946c8e51ab680198c24 Step #5: Base64: TVExMlwx4Z+j4Z+jL3goPzCRMV0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2143 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 421453923 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5601bf03cd60, 0x5601bf22571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5601bf225720,0x5601c10af2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f44d4e06b990fedb814f1946c8e51ab680198c24' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2541 processed earlier; will process 8435 files now Step #5: #1 pulse cov: 3784 ft: 3785 exec/s: 0 rss: 171Mb Step #5: #2 pulse cov: 4102 ft: 4228 exec/s: 0 rss: 172Mb Step #5: ==77186== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601b5b7f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5601bc1ba728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5601bc19d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5601bc19d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5601b5b85652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5601b5ae642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5601b5ae0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5601b5b77595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601b8ba68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601b8ba68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601b8ba68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601b8ba68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601b8ba68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601b8ba68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601b8ba68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601b8ba68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601b8ba68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601b8ba68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601badab45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601b7b07578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601b7b125a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601b78bdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601b78bdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601b78be808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601b78bd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601b78bd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601b78bd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5601bc19f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601bc1a87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5601bc190529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5601bc1bafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0614812082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5601b5adf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x0,0x5b,0x5b,0x27,0x13,0x0,0x0,0x0,0x27,0x5d,0x5b,0x28,0x5d,0x5b,0x27,0x5d,0x5b,0x28,0x0, Step #5: 0\000[['\023\000\000\000'][(]['][(\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0180023cb5f11410c56dde5e038ce6ebb047f68e Step #5: Base64: MABbWycTAAAAJ11bKF1bJ11bKAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2144 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 422125916 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562739004d60, 0x5627391ed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5627391ed720,0x56273b0772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0180023cb5f11410c56dde5e038ce6ebb047f68e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2544 processed earlier; will process 8432 files now Step #5: ==77222== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56272fb472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562736182728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56273616546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56273616538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56272fb4d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56272faae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56272faa8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56272fb3f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562732b6e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562732b6e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562732b6e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562732b6e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562732b6e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562732b6e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562732b6e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562732b6e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562732b6e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562732b6e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562734d7345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562731acf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562731ada5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562731885d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562731885d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562731886808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562731885944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562731885944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562731885944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56273616794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627361707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562736158529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562736182fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feabbba9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56272faa743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x0,0x20,0x1,0x11,0x47,0x0,0x54,0x49,0x54,0x31,0x0,0x68,0x68,0x43,0xda,0x0, Step #5: ID3\003\000 \001\021G\000TIT1\000hhC\332\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0e17f62b20819e86618e63a974bd0f8ca65aae11 Step #5: Base64: SUQzAwAgARFHAFRJVDEAaGhD2gA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2145 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 422624007 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56252a1b4d60, 0x56252a39d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56252a39d720,0x56252c2272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0e17f62b20819e86618e63a974bd0f8ca65aae11' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2545 processed earlier; will process 8431 files now Step #5: ==77258== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562520cf72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562527332728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56252731546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56252731538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562520cfd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562520c5e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562520c58c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562520cef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562523d1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562523d1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562523d1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562523d1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562523d1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562523d1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562523d1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562523d1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562523d1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562523d1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562525f2345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562522c7f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562522c8a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562522a35d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562522a35d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562522a36808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562522a35944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562522a35944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562522a35944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56252731794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625273207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562527308529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562527332fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f18b69ab082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562520c5743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11,0x23,0x22,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x5c,0x50,0x22, Step #5: \021#\"\\P\\P\\P\\P\\P\\P\\P\\P\" Step #5: artifact_prefix='./'; Test unit written to ./oom-2ac893c3f1a8262206d60b0b9de08e40c2c83944 Step #5: Base64: ESMiXFBcUFxQXFBcUFxQXFBcUCI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2146 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 423112186 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0db1f6d60, 0x55c0db3df71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c0db3df720,0x55c0dd2692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2ac893c3f1a8262206d60b0b9de08e40c2c83944' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2546 processed earlier; will process 8430 files now Step #5: ==77294== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0d1d392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c0d8374728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c0d835746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c0d835738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c0d1d3f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c0d1ca042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c0d1c9ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c0d1d31595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c0d4d608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c0d4d608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c0d4d608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c0d4d608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c0d4d608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c0d4d608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c0d4d608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c0d4d608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c0d4d608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c0d4d608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c0d6f6545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c0d3cc1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c0d3ccc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c0d3a77d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c0d3a77d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c0d3a78808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c0d3a77944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c0d3a77944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c0d3a77944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c0d835994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0d83627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0d834a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c0d8374fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f165d149082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c0d1c9943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0xcd,0x8f,0xa,0xf0,0x9d,0x9f,0x95,0xa,0x6e,0x2d,0x9d,0x95,0x2d,0x9f,0xa,0xcd,0x2d, Step #5: ---\315\217\012\360\235\237\225\012n-\235\225-\237\012\315- Step #5: artifact_prefix='./'; Test unit written to ./oom-183ffd0b3a603cf6fe41dd8be33bec3db877faf4 Step #5: Base64: LS0tzY8K8J2flQpuLZ2VLZ8KzS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2147 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 423604608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55653766fd60, 0x55653785871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556537858720,0x5565396e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/183ffd0b3a603cf6fe41dd8be33bec3db877faf4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2547 processed earlier; will process 8429 files now Step #5: #1 pulse cov: 4059 ft: 4060 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 4335 ft: 4534 exec/s: 0 rss: 173Mb Step #5: #4 pulse cov: 4539 ft: 5201 exec/s: 0 rss: 175Mb Step #5: ==77330== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55652e1b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5565347ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5565347d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5565347d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55652e1b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55652e11942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55652e113c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55652e1aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5565311d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5565311d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5565311d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5565311d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5565311d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5565311d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5565311d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5565311d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5565311d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5565311d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5565333de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55653013a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5565301455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55652fef0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55652fef0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55652fef1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55652fef0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55652fef0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55652fef0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5565347d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5565347db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5565347c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5565347edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc9243c6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55652e11243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0xa4,0xd7,0xa9,0x28,0x1,0x9,0x32,0x31,0x34,0x37,0x34,0x38,0x33,0x36,0x34,0x38,0x74, Step #5: \363\240\200\244\327\251(\001\0112147483648t Step #5: artifact_prefix='./'; Test unit written to ./oom-99a3e98c024165cd39af192f340207f83117d6cb Step #5: Base64: 86CApNepKAEJMjE0NzQ4MzY0OHQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2148 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 424300816 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559d6a1d7d60, 0x559d6a3c071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559d6a3c0720,0x559d6c24a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/99a3e98c024165cd39af192f340207f83117d6cb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2553 processed earlier; will process 8423 files now Step #5: ==77366== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559d60d1a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559d67355728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559d6733846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559d6733838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559d60d20652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559d60c8142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559d60c7bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559d60d12595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559d63d418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559d63d418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559d63d418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559d63d418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559d63d418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559d63d418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559d63d418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559d63d418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559d63d418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559d63d418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559d65f4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559d62ca2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559d62cad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559d62a58d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559d62a58d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559d62a59808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559d62a58944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559d62a58944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559d62a58944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559d6733a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559d673437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559d6732b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559d67355fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7baf735082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559d60c7a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x3,0x0,0x1,0x4,0x3,0x2,0x4,0x3,0x1,0x2,0x0,0x1,0x4,0x3,0x2,0x4,0x0,0x1,0x2, Step #5: \000\003\000\001\004\003\002\004\003\001\002\000\001\004\003\002\004\000\001\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-b69a1f1c7e1e4318e12bf7f2793dbefa625f962e Step #5: Base64: AAMAAQQDAgQDAQIAAQQDAgQAAQI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2149 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 424781867 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556eab743d60, 0x556eab92c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556eab92c720,0x556ead7b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b69a1f1c7e1e4318e12bf7f2793dbefa625f962e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2554 processed earlier; will process 8422 files now Step #5: #1 pulse cov: 3771 ft: 3772 exec/s: 0 rss: 168Mb Step #5: ==77402== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ea22862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556ea88c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556ea88a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556ea88a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ea228c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ea21ed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ea21e7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ea227e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ea52ad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ea52ad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ea52ad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ea52ad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ea52ad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ea52ad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ea52ad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ea52ad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ea52ad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ea52ad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ea74b245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ea420e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ea42195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ea3fc4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ea3fc4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ea3fc5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ea3fc4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ea3fc4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ea3fc4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556ea88a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556ea88af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556ea8897529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556ea88c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe7a8e6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ea21e643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d,0x20,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0x20,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0x20,0xc2,0xa0, Step #5: m \302\240\302\240\302\240\302\240 \302\240\302\240\302\240 \302\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-47668854d5e0dc966cd062dd073c2e4b31b132c2 Step #5: Base64: bSDCoMKgwqDCoCDCoMKgwqAgwqA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2150 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 425316769 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562804899d60, 0x562804a8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562804a82720,0x56280690c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/47668854d5e0dc966cd062dd073c2e4b31b132c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2556 processed earlier; will process 8420 files now Step #5: ==77438== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5627fb3dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562801a17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5628019fa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5628019fa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5627fb3e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5627fb34342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5627fb33dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5627fb3d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627fe4038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627fe4038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627fe4038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627fe4038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627fe4038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627fe4038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627fe4038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627fe4038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627fe4038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627fe4038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56280060845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5627fd364578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5627fd36f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5627fd11ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5627fd11ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5627fd11b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5627fd11a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5627fd11a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5627fd11a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5628019fc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562801a057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5628019ed529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562801a17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c78b9a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5627fb33c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x6d,0x3a,0x69,0x2e,0x3e,0x3c,0x78,0x6d,0x75,0x3a,0x69,0x3e,0xff,0xff,0xff,0xff,0xff,0xff,0xff, Step #5: \377\377\377\377\377\377\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-197ad27000380a5cd110a36432abbb5d7b05a2b9 Step #5: Base64: PG06aS4+PHhtdTppPv////////8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2151 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 425790746 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f57cf2d60, 0x561f57edb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f57edb720,0x561f59d652c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/197ad27000380a5cd110a36432abbb5d7b05a2b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2557 processed earlier; will process 8419 files now Step #5: ==77474== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f4e8352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f54e70728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f54e5346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f54e5338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f4e83b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f4e79c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f4e796c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f4e82d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f5185c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f5185c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f5185c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f5185c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f5185c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f5185c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f5185c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f5185c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f5185c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f5185c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f53a6145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f507bd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f507c85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f50573d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f50573d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f50574808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f50573944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f50573944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f50573944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f54e5594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f54e5e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f54e46529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f54e70fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f987ba25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f4e79543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x2d,0x2d,0x72,0x69,0x66,0x42,0x45,0x62,0x6b,0x47,0x49,0x4e,0x6d,0x45,0x4e,0x3d,0x20,0xab,0x39, Step #5: s--rifBEbkGINmEN= \2539 Step #5: artifact_prefix='./'; Test unit written to ./oom-d5903c0e9cf50633b46b84cc3b6714f4c6876cf0 Step #5: Base64: cy0tcmlmQkVia0dJTm1FTj0gqzk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2152 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 426279774 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f6bf9ddd60, 0x55f6bfbc671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f6bfbc6720,0x55f6c1a502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d5903c0e9cf50633b46b84cc3b6714f4c6876cf0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2558 processed earlier; will process 8418 files now Step #5: #1 pulse cov: 3608 ft: 3609 exec/s: 0 rss: 170Mb Step #5: ==77510== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f6b65202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f6bcb5b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f6bcb3e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f6bcb3e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f6b6526652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f6b648742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f6b6481c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f6b6518595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f6b95478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f6b95478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f6b95478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f6b95478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f6b95478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f6b95478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f6b95478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f6b95478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f6b95478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f6b95478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f6bb74c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f6b84a8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f6b84b35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f6b825ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f6b825ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f6b825f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f6b825e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f6b825e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f6b825e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f6bcb4094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f6bcb497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f6bcb31529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f6bcb5bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7bcab66082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f6b648043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x2b,0xc,0x20,0x2b,0x2d,0xa,0x2b,0xc,0x20,0x2b,0x2d,0x2d,0x0,0x63,0xa,0xa,0x2b,0xc,0x36, Step #5: \012+\014 +-\012+\014 +--\000c\012\012+\0146 Step #5: artifact_prefix='./'; Test unit written to ./oom-f7600c50b48bd50465043bc58a80fd3437c5b607 Step #5: Base64: CisMICstCisMICstLQBjCgorDDY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2153 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 426820268 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55907ad69d60, 0x55907af5271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55907af52720,0x55907cddc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7600c50b48bd50465043bc58a80fd3437c5b607' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2560 processed earlier; will process 8416 files now Step #5: ==77546== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5590718ac2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559077ee7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559077eca46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559077eca38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5590718b2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55907181342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55907180dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5590718a4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5590748d38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5590748d38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5590748d38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5590748d38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5590748d38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5590748d38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5590748d38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5590748d38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5590748d38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5590748d38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559076ad845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559073834578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55907383f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5590735ead3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5590735ead3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5590735eb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5590735ea944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5590735ea944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5590735ea944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559077ecc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559077ed57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559077ebd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559077ee7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe73ba7e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55907180c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0xa,0xa,0x2d,0x20,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x24,0x24,0xa,0x2d,0x20, Step #5: x--\012\012- GIN ----$$\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-c85410282e108279cb8071b8ac14c2d456cfb0f3 Step #5: Base64: eC0tCgotIEdJTiAtLS0tJCQKLSA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2154 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 427325956 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b1457e5d60, 0x55b1459ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b1459ce720,0x55b1478582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c85410282e108279cb8071b8ac14c2d456cfb0f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2561 processed earlier; will process 8415 files now Step #5: ==77582== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b13c3282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b142963728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b14294646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b14294638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b13c32e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b13c28f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b13c289c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b13c320595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b13f34f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b13f34f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b13f34f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b13f34f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b13f34f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b13f34f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b13f34f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b13f34f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b13f34f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b13f34f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b14155445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b13e2b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b13e2bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b13e066d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b13e066d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b13e067808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b13e066944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b13e066944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b13e066944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b14294894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1429517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b142939529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b142963fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe67aa63082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b13c28843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x4f,0x27,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xca,0xb6,0xd1,0x81,0x27, Step #5: dO'\321\241'E'\\\321\241'E'\\\312\266\321\201' Step #5: artifact_prefix='./'; Test unit written to ./oom-645cae80dc0a915b10b13ae311d63529a5fbf58d Step #5: Base64: ZE8n0aEnRSdc0aEnRSdcyrbRgSc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2155 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 427825780 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f8784add60, 0x55f87869671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f878696720,0x55f87a5202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/645cae80dc0a915b10b13ae311d63529a5fbf58d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2562 processed earlier; will process 8414 files now Step #5: ==77618== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f86eff02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f87562b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f87560e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f87560e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f86eff6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f86ef5742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f86ef51c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f86efe8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f8720178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f8720178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f8720178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f8720178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f8720178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f8720178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f8720178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f8720178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f8720178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f8720178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f87421c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f870f78578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f870f835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f870d2ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f870d2ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f870d2f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f870d2e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f870d2e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f870d2e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f87561094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f8756197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f875601529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f87562bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff3bc0e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f86ef5043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xc,0x0,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x0,0x0,0x0,0x0,0x0,0x0,0x2,0xff,0x0, Step #5: -\014\000oooooooo\000\000\000\000\000\000\002\377\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-70fabd6dc689c9890637ccd9187f77be23ec4cff Step #5: Base64: LQwAb29vb29vb28AAAAAAAAC/wA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2156 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 428310324 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556f43971d60, 0x556f43b5a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556f43b5a720,0x556f459e42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70fabd6dc689c9890637ccd9187f77be23ec4cff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2563 processed earlier; will process 8413 files now Step #5: ==77654== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556f3a4b42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556f40aef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556f40ad246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556f40ad238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556f3a4ba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556f3a41b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556f3a415c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556f3a4ac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556f3d4db8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556f3d4db8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556f3d4db8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556f3d4db8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556f3d4db8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556f3d4db8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556f3d4db8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556f3d4db8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556f3d4db8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556f3d4db8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556f3f6e045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556f3c43c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556f3c4475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556f3c1f2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556f3c1f2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556f3c1f3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556f3c1f2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556f3c1f2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556f3c1f2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556f40ad494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556f40add7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556f40ac5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556f40aeffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd84c7a9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556f3a41443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x2b,0xa,0x2b,0xa,0x2b,0x2b,0xa,0xa,0x2b,0xa,0x2b,0x2b,0xa,0xa,0x2b,0xa,0x2b,0xdc, Step #5: +\012+\012+\012++\012\012+\012++\012\012+\012+\334 Step #5: artifact_prefix='./'; Test unit written to ./oom-7d6881a0fe5fd9b0c81de1e95e18426ee0a3b0ab Step #5: Base64: KworCisKKysKCisKKysKCisKK9w= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2157 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 428814091 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5636cd33dd60, 0x5636cd52671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5636cd526720,0x5636cf3b02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d6881a0fe5fd9b0c81de1e95e18426ee0a3b0ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2564 processed earlier; will process 8412 files now Step #5: ==77690== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5636c3e802d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5636ca4bb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5636ca49e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5636ca49e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5636c3e86652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5636c3de742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5636c3de1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5636c3e78595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5636c6ea78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5636c6ea78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5636c6ea78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5636c6ea78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5636c6ea78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5636c6ea78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5636c6ea78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5636c6ea78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5636c6ea78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5636c6ea78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5636c90ac45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5636c5e08578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5636c5e135a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5636c5bbed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5636c5bbed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5636c5bbf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5636c5bbe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5636c5bbe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5636c5bbe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5636ca4a094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5636ca4a97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5636ca491529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5636ca4bbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd38d71b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5636c3de043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xed,0x85,0x92,0x3e,0x3c,0xed,0x85,0x92,0x3e,0x3c,0xed,0x85,0x92,0x3e,0x3c,0xed,0x85,0x92,0x3e, Step #5: <\355\205\222><\355\205\222><\355\205\222><\355\205\222> Step #5: artifact_prefix='./'; Test unit written to ./oom-54abc6ab60f4dc17f8437f1a97aac950e703480e Step #5: Base64: PO2Fkj487YWSPjzthZI+PO2Fkj4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2158 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 429292343 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a44bc58d60, 0x55a44be4171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a44be41720,0x55a44dccb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/54abc6ab60f4dc17f8437f1a97aac950e703480e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2565 processed earlier; will process 8411 files now Step #5: ==77726== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a44279b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a448dd6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a448db946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a448db938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4427a1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a44270242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a4426fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a442793595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4457c28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4457c28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4457c28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4457c28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4457c28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4457c28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4457c28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4457c28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4457c28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4457c28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a4479c745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a444723578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a44472e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4444d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4444d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4444da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4444d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4444d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4444d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a448dbb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a448dc47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a448dac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a448dd6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f99810cc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a4426fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e,0x7a,0x4d,0x35,0x4d,0x6a,0x41,0x30,0x4d,0x54,0x4d,0x33,0x4d,0x57,0x55,0x79,0x4d,0x31,0x2e,0x2e, Step #5: NzM5MjA0MTM3MWUyM1.. Step #5: artifact_prefix='./'; Test unit written to ./oom-c7a2bd38ac725a53422db900eb66d1858cf811d5 Step #5: Base64: TnpNNU1qQTBNVE0zTVdVeU0xLi4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2159 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 429784356 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55886aa13d60, 0x55886abfc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55886abfc720,0x55886ca862c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c7a2bd38ac725a53422db900eb66d1858cf811d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2566 processed earlier; will process 8410 files now Step #5: #1 pulse cov: 3649 ft: 3650 exec/s: 0 rss: 168Mb Step #5: ==77762== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5588615562d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558867b91728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558867b7446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558867b7438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55886155c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5588614bd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5588614b7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55886154e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55886457d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55886457d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55886457d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55886457d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55886457d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55886457d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55886457d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55886457d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55886457d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55886457d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55886678245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5588634de578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5588634e95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558863294d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558863294d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558863295808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558863294944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558863294944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558863294944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558867b7694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558867b7f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558867b67529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558867b91fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2e4babb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5588614b643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x10,0x43,0x6f,0x6e,0x74,0x65,0x6e,0x74,0x2d,0x74,0x79,0x70,0x65,0x3a,0xe3,0x80,0x8d, Step #5: \000\000\000\020Content-type:\343\200\215 Step #5: artifact_prefix='./'; Test unit written to ./oom-d4610c54bd3afd5d1f79f7bb314fb4b6cb745036 Step #5: Base64: AAAAEENvbnRlbnQtdHlwZTrjgI0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2160 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 430317537 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556cf14edd60, 0x556cf16d671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556cf16d6720,0x556cf35602c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d4610c54bd3afd5d1f79f7bb314fb4b6cb745036' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2568 processed earlier; will process 8408 files now Step #5: ==77798== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556ce80302d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556cee66b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556cee64e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556cee64e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556ce8036652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556ce7f9742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556ce7f91c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556ce8028595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ceb0578c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ceb0578c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ceb0578c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ceb0578c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ceb0578c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ceb0578c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ceb0578c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ceb0578c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ceb0578c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ceb0578c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ced25c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ce9fb8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ce9fc35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ce9d6ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ce9d6ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ce9d6f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ce9d6e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ce9d6e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ce9d6e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556cee65094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556cee6597b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556cee641529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556cee66bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd2d1b47082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556ce7f9043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcc,0xbf,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0x93, Step #5: \314\277\314\264\314\264\314\264\314\264\314\264\314\264\314\264\314\264\314\223 Step #5: artifact_prefix='./'; Test unit written to ./oom-b8cc7a2c804199cc221c327f2231fba344357eae Step #5: Base64: zL/MtMy0zLTMtMy0zLTMtMy0zJM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2161 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 430809372 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562fb4435d60, 0x562fb461e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562fb461e720,0x562fb64a82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b8cc7a2c804199cc221c327f2231fba344357eae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2569 processed earlier; will process 8407 files now Step #5: #1 pulse cov: 3735 ft: 3736 exec/s: 0 rss: 171Mb Step #5: ==77834== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562faaf782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562fb15b3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562fb159646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562fb159638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562faaf7e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562faaedf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562faaed9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562faaf70595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562fadf9f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562fadf9f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562fadf9f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562fadf9f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562fadf9f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562fadf9f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562fadf9f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562fadf9f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562fadf9f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562fadf9f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562fb01a445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562facf00578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562facf0b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562faccb6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562faccb6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562faccb7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562faccb6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562faccb6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562faccb6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562fb159894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562fb15a17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562fb1589529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562fb15b3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5daa569082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562faaed843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x3f,0x3a,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x29, Step #5: ^(?:$|$|$|$|$|$|$|$) Step #5: artifact_prefix='./'; Test unit written to ./oom-785b33ad9fcf0b949b8e2163d26ad370344444d6 Step #5: Base64: Xig/OiR8JHwkfCR8JHwkfCR8JCk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2162 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 431340080 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557660072d60, 0x55766025b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55766025b720,0x5576620e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/785b33ad9fcf0b949b8e2163d26ad370344444d6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2571 processed earlier; will process 8405 files now Step #5: ==77870== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557656bb52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55765d1f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55765d1d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55765d1d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557656bbb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557656b1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557656b16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557656bad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557659bdc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557659bdc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557659bdc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557659bdc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557659bdc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557659bdc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557659bdc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557659bdc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557659bdc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557659bdc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55765bde145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557658b3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557658b485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5576588f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5576588f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5576588f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5576588f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5576588f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5576588f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55765d1d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55765d1de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55765d1c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55765d1f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1159271082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557656b1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x31,0x5c,0x28,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0x5f,0xf8,0x35, Step #5: ^1\\(______________\3705 Step #5: artifact_prefix='./'; Test unit written to ./oom-1dc7b1782df1227db7a69d51b1a372cb1b5bc8ba Step #5: Base64: XjFcKF9fX19fX19fX19fX19f+DU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2163 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 431826758 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5614c252bd60, 0x5614c271471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5614c2714720,0x5614c459e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1dc7b1782df1227db7a69d51b1a372cb1b5bc8ba' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2572 processed earlier; will process 8404 files now Step #5: ==77906== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614b906e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5614bf6a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5614bf68c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5614bf68c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614b9074652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5614b8fd542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5614b8fcfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614b9066595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5614bc0958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5614bc0958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5614bc0958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5614bc0958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5614bc0958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5614bc0958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5614bc0958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5614bc0958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5614bc0958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5614bc0958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5614be29a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5614baff6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5614bb0015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5614badacd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5614badacd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5614badad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5614badac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5614badac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5614badac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5614bf68e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5614bf6977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5614bf67f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5614bf6a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdbf939b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5614b8fce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xa,0xd8,0x80,0x4,0x0,0x0,0xa,0x2d,0x20,0x0,0x7e,0x3a,0xd8,0x80,0x0,0x1,0x0,0x0,0x20, Step #5: \000\012\330\200\004\000\000\012- \000~:\330\200\000\001\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-aa514ef15822da56c3aa525b3ad64f550b805527 Step #5: Base64: AArYgAQAAAotIAB+OtiAAAEAACA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2164 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 432316574 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560f14e5d60, 0x5560f16ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560f16ce720,0x5560f35582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aa514ef15822da56c3aa525b3ad64f550b805527' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2573 processed earlier; will process 8403 files now Step #5: #1 pulse cov: 3589 ft: 3590 exec/s: 0 rss: 168Mb Step #5: #2 pulse cov: 3869 ft: 4060 exec/s: 0 rss: 169Mb Step #5: ==77942== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560e80282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560ee663728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560ee64646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560ee64638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560e802e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560e7f8f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560e7f89c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560e8020595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560eb04f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560eb04f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560eb04f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560eb04f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560eb04f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560eb04f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560eb04f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560eb04f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560eb04f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560eb04f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560ed25445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560e9fb0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560e9fbb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560e9d66d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560e9d66d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560e9d67808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560e9d66944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560e9d66944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560e9d66944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560ee64894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560ee6517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560ee639529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560ee663fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e97c8a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560e7f8843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xd5,0x8c,0x2d,0x41,0x3b,0x41,0x2d,0x4b,0x24,0x41,0x2d,0x41,0x3b,0x47,0x2c,0x4f,0x24, Step #5: ws:\325\214-A;A-K$A-A;G,O$ Step #5: artifact_prefix='./'; Test unit written to ./oom-b6bef490b1b41b0c4640667428d50e46bdc827ef Step #5: Base64: d3M61YwtQTtBLUskQS1BO0csTyQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2165 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 432907758 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55faeb188d60, 0x55faeb37171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55faeb371720,0x55faed1fb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6bef490b1b41b0c4640667428d50e46bdc827ef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2576 processed earlier; will process 8400 files now Step #5: ==77978== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fae1ccb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fae8306728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fae82e946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fae82e938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fae1cd1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fae1c3242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fae1c2cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fae1cc3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fae4cf28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fae4cf28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fae4cf28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fae4cf28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fae4cf28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fae4cf28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fae4cf28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fae4cf28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fae4cf28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fae4cf28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fae6ef745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fae3c53578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fae3c5e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fae3a09d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fae3a09d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fae3a0a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fae3a09944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fae3a09944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fae3a09944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fae82eb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fae82f47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fae82dc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fae8306fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9bf7b53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fae1c2b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0xb,0x2d,0x2d,0x2d,0x2d,0x2d,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x73,0x20,0x69,0x66,0x20,0x30, Step #5: s\013-----\000\001\000\000\000\000\000\000s if 0 Step #5: artifact_prefix='./'; Test unit written to ./oom-6bc26a58e0fbdcef88245f908cf5f2164cac93dc Step #5: Base64: cwstLS0tLQABAAAAAAAAcyBpZiAw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2166 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 433399601 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56394d2e0d60, 0x56394d4c971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56394d4c9720,0x56394f3532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6bc26a58e0fbdcef88245f908cf5f2164cac93dc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2577 processed earlier; will process 8399 files now Step #5: #1 pulse cov: 3672 ft: 3673 exec/s: 0 rss: 168Mb Step #5: ==78014== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563943e232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56394a45e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56394a44146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56394a44138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563943e29652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563943d8a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563943d84c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563943e1b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563946e4a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563946e4a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563946e4a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563946e4a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563946e4a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563946e4a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563946e4a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563946e4a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563946e4a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563946e4a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56394904f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563945dab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563945db65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563945b61d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563945b61d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563945b62808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563945b61944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563945b61944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563945b61944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56394a44394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56394a44c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56394a434529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56394a45efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7803f2b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563943d8343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x38,0x34,0x34,0x36,0x37,0x34,0x34,0x30,0x37,0x33,0x37,0x30,0x39,0x35,0x35,0x31,0x36,0x31,0x35,0x2e, Step #5: 18446744073709551615. Step #5: artifact_prefix='./'; Test unit written to ./oom-9e6bc4f3f71db47053fbda5f0842ffa536cf179d Step #5: Base64: MTg0NDY3NDQwNzM3MDk1NTE2MTUu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2167 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 433960958 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f919c7ed60, 0x55f919e6771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f919e67720,0x55f91bcf12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9e6bc4f3f71db47053fbda5f0842ffa536cf179d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2579 processed earlier; will process 8397 files now Step #5: ==78050== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f9107c12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f916dfc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f916ddf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f916ddf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9107c7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f91072842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f910722c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9107b9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9137e88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9137e88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9137e88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9137e88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9137e88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9137e88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9137e88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9137e88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9137e88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9137e88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9159ed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f912749578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9127545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9124ffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9124ffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f912500808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9124ff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9124ff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9124ff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f916de194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f916dea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f916dd2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f916dfcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f93f576a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f91072143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x0,0x0,0x20,0x0,0x23,0x24,0x28,0x1e,0x1e,0x24,0x2f,0x0,0x23,0x24,0x28,0x1e,0x1e,0x24,0x2f, Step #5: = \000\000 \000#$(\036\036$/\000#$(\036\036$/ Step #5: artifact_prefix='./'; Test unit written to ./oom-ad8bd83e027e6454a6d072b1e4acc38dffb592e1 Step #5: Base64: PSAAACAAIyQoHh4kLwAjJCgeHiQv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2168 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 434461547 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556de16ded60, 0x556de18c771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556de18c7720,0x556de37512c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ad8bd83e027e6454a6d072b1e4acc38dffb592e1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2580 processed earlier; will process 8396 files now Step #5: #1 pulse cov: 3549 ft: 3550 exec/s: 0 rss: 171Mb Step #5: ==78086== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556dd82212d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556dde85c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556dde83f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556dde83f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556dd8227652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556dd818842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556dd8182c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556dd8219595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ddb2488c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ddb2488c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ddb2488c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ddb2488c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ddb2488c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ddb2488c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ddb2488c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ddb2488c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ddb2488c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ddb2488c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ddd44d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556dda1a9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556dda1b45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556dd9f5fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556dd9f5fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556dd9f60808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556dd9f5f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556dd9f5f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556dd9f5f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556dde84194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556dde84a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556dde832529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556dde85cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4719d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556dd818143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xb,0x73,0x2d,0x2d,0x28,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x73,0xd7,0xa4,0x37,0x20,0x38,0x20,0x30, Step #5: -\013s--(\001\000\000\000\000\000\000s\327\2447 8 0 Step #5: artifact_prefix='./'; Test unit written to ./oom-f6d3940cc32d44d8f6e5538dae92c49494386803 Step #5: Base64: LQtzLS0oAQAAAAAAAHPXpDcgOCAw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2169 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 434992018 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5641823a8d60, 0x56418259171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564182591720,0x56418441b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f6d3940cc32d44d8f6e5538dae92c49494386803' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2582 processed earlier; will process 8394 files now Step #5: ==78122== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564178eeb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56417f526728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56417f50946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56417f50938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564178ef1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564178e5242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564178e4cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564178ee3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56417bf128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56417bf128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56417bf128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56417bf128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56417bf128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56417bf128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56417bf128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56417bf128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56417bf128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56417bf128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56417e11745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56417ae73578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56417ae7e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56417ac29d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56417ac29d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56417ac2a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56417ac29944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56417ac29944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56417ac29944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56417f50b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56417f5147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56417f4fc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56417f526fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f577530a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564178e4b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x61,0x6c,0x69,0x67,0x6e,0x20,0x30,0x2c,0x2c,0x2d,0x32,0x38,0x33,0x35,0x79,0x30,0x37,0x39,0x36,0x3b, Step #5: .align 0,,-2835y0796; Step #5: artifact_prefix='./'; Test unit written to ./oom-400e94d8557d0288198062276a59043c7eda9908 Step #5: Base64: LmFsaWduIDAsLC0yODM1eTA3OTY7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2170 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 435482874 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d0ba22d60, 0x556d0bc0b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d0bc0b720,0x556d0da952c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/400e94d8557d0288198062276a59043c7eda9908' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2583 processed earlier; will process 8393 files now Step #5: #1 pulse cov: 3728 ft: 3729 exec/s: 0 rss: 171Mb Step #5: ==78158== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d025652d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d08ba0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d08b8346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d08b8338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d0256b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d024cc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d024c6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d0255d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d0558c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d0558c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d0558c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d0558c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d0558c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d0558c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d0558c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d0558c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d0558c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d0558c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d0779145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d044ed578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d044f85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d042a3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d042a3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d042a4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d042a3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d042a3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d042a3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d08b8594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d08b8e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d08b76529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d08ba0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe141bbf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d024c543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0xa,0x67,0x20,0x4b,0xa,0x3a,0x3d,0x3f,0xa,0x3a,0x3d,0x3f,0xa,0x3a,0x3d,0x3f,0xa,0x3a,0x3d,0x3f, Step #5: t\012g K\012:=?\012:=?\012:=?\012:=? Step #5: artifact_prefix='./'; Test unit written to ./oom-a43ebe0194c45fea334c53fd5cfc26478628335b Step #5: Base64: dApnIEsKOj0/Cjo9Pwo6PT8KOj0/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2171 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 436011658 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56244e1bbd60, 0x56244e3a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56244e3a4720,0x56245022e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a43ebe0194c45fea334c53fd5cfc26478628335b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2585 processed earlier; will process 8391 files now Step #5: ==78194== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562444cfe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56244b339728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56244b31c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56244b31c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562444d04652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562444c6542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562444c5fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562444cf6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562447d258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562447d258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562447d258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562447d258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562447d258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562447d258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562447d258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562447d258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562447d258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562447d258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562449f2a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562446c86578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562446c915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562446a3cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562446a3cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562446a3d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562446a3c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562446a3c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562446a3c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56244b31e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56244b3277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56244b30f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56244b339fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc820a85082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562444c5e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x26,0x73,0x74,0x69,0x26,0x28,0x72,0x65,0x61,0x6d,0xa,0x31,0x0,0x1e,0xd8,0xae,0x2d,0x0,0x0,0x25, Step #5: i&sti&(ream\0121\000\036\330\256-\000\000% Step #5: artifact_prefix='./'; Test unit written to ./oom-69045ae31ad26dc16ac17473b92663e06af0e8db Step #5: Base64: aSZzdGkmKHJlYW0KMQAe2K4tAAAl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2172 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 436501187 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d146600d60, 0x55d1467e971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d1467e9720,0x55d1486732c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/69045ae31ad26dc16ac17473b92663e06af0e8db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2586 processed earlier; will process 8390 files now Step #5: ==78230== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d13d1432d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d14377e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d14376146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d14376138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d13d149652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d13d0aa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d13d0a4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d13d13b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d14016a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d14016a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d14016a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d14016a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d14016a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d14016a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d14016a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d14016a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d14016a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d14016a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d14236f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d13f0cb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d13f0d65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d13ee81d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d13ee81d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d13ee82808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d13ee81944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d13ee81944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d13ee81944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d14376394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d14376c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d143754529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d14377efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a71df0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d13d0a343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x41,0x54,0x54,0x4c,0x49,0x53,0x54,0xd,0x61,0x9,0x6e,0x9,0x49,0x44,0x9,0x27,0x66,0x27,0x9, Step #5: Step #5: Step #5: #0 0x55f1381a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f13e7e2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f13e7c546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f13e7c538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f1381ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f13810e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f138108c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f13819f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f13b1ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f13b1ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f13b1ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f13b1ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f13b1ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f13b1ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f13b1ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f13b1ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f13b1ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f13b1ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f13d3d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f13a12f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f13a13a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f139ee5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f139ee5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f139ee6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f139ee5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f139ee5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f139ee5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f13e7c794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f13e7d07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f13e7b8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f13e7e2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff5ad138082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f13810743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x1,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0xd,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0, Step #5: \000\000\001\000\000\000\001\000\000\000\000\015\000\000\000\000\001\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-89e49cf98afe11121131ae967fbf2ba17f2750b4 Step #5: Base64: AAABAAAAAQAAAAANAAAAAAEAAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2174 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 437490674 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564b7f1e4d60, 0x564b7f3cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564b7f3cd720,0x564b812572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/89e49cf98afe11121131ae967fbf2ba17f2750b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2588 processed earlier; will process 8388 files now Step #5: ==78302== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564b75d272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564b7c362728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564b7c34546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564b7c34538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564b75d2d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564b75c8e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564b75c88c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564b75d1f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564b78d4e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564b78d4e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564b78d4e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564b78d4e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564b78d4e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564b78d4e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564b78d4e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564b78d4e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564b78d4e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564b78d4e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564b7af5345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564b77caf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564b77cba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564b77a65d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564b77a65d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564b77a66808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564b77a65944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564b77a65944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564b77a65944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564b7c34794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564b7c3507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564b7c338529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564b7c362fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa429b48082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564b75c8743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x70,0x6f,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x73,0x74,0x21, Step #5: pouuuuuuuuuuuuuuuust! Step #5: artifact_prefix='./'; Test unit written to ./oom-2107250090e1f42628243aada7484a33b5e83aa5 Step #5: Base64: cG91dXV1dXV1dXV1dXV1dXV1c3Qh Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2175 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 437987782 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559500c78d60, 0x559500e6171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559500e61720,0x559502ceb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2107250090e1f42628243aada7484a33b5e83aa5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2589 processed earlier; will process 8387 files now Step #5: ==78338== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5594f77bb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5594fddf6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5594fddd946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5594fddd938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5594f77c1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5594f772242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5594f771cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5594f77b3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5594fa7e28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5594fa7e28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5594fa7e28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5594fa7e28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5594fa7e28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5594fa7e28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5594fa7e28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5594fa7e28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5594fa7e28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5594fa7e28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5594fc9e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5594f9743578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5594f974e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5594f94f9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5594f94f9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5594f94fa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5594f94f9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5594f94f9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5594f94f9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5594fdddb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5594fdde47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5594fddcc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5594fddf6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faedaa59082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5594f771b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x59,0x0,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x24,0x59,0x2a,0x2a,0x2e,0x2a,0x2a,0x28,0xd8,0x2f,0x2f,0x0, Step #5: $Y\000******$Y**.**(\330//\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-a13ecbe5e62cf5b3b78d1ceaf49aadc31cf4a004 Step #5: Base64: JFkAKioqKioqJFkqKi4qKijYLy8A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2176 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 438484784 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5593b83bad60, 0x5593b85a371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5593b85a3720,0x5593ba42d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a13ecbe5e62cf5b3b78d1ceaf49aadc31cf4a004' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2590 processed earlier; will process 8386 files now Step #5: ==78374== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5593aeefd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593b5538728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593b551b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593b551b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5593aef03652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5593aee6442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5593aee5ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5593aeef5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5593b1f248c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5593b1f248c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5593b1f248c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5593b1f248c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5593b1f248c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5593b1f248c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5593b1f248c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5593b1f248c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5593b1f248c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5593b1f248c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593b412945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5593b0e85578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5593b0e905a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5593b0c3bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5593b0c3bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5593b0c3c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5593b0c3b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5593b0c3b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5593b0c3b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593b551d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593b55267b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593b550e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593b5538fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f12a35cc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5593aee5d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0xae,0x24,0x24,0x64,0x63,0x24,0xef,0xbe,0x96,0x24,0x24,0x24,0x24,0xca,0xb7,0x24,0x25,0x25, Step #5: \363\240\200\256$$dc$\357\276\226$$$$\312\267$%% Step #5: artifact_prefix='./'; Test unit written to ./oom-f83082dd7d5411017947e772f8870e53dfa9f9b3 Step #5: Base64: 86CAriQkZGMk776WJCQkJMq3JCUl Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2177 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 438986163 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557238d51d60, 0x557238f3a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557238f3a720,0x55723adc42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f83082dd7d5411017947e772f8870e53dfa9f9b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2591 processed earlier; will process 8385 files now Step #5: ==78410== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55722f8942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557235ecf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557235eb246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557235eb238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55722f89a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55722f7fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55722f7f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55722f88c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5572328bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5572328bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5572328bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5572328bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5572328bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5572328bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5572328bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5572328bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5572328bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5572328bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557234ac045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55723181c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5572318275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5572315d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5572315d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5572315d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5572315d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5572315d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5572315d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557235eb494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557235ebd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557235ea5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557235ecffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb6b343082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55722f7f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe7,0x9f,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x89,0xaa,0xed,0x8d,0xaa,0xe9,0x8d,0xaa,0xed,0x8d,0xaa, Step #5: \347\237\252\355\215\252\355\215\252\355\211\252\355\215\252\351\215\252\355\215\252 Step #5: artifact_prefix='./'; Test unit written to ./oom-71703dc7bbc53e2428409b180c29331f66f075f0 Step #5: Base64: 55+q7Y2q7Y2q7Ymq7Y2q6Y2q7Y2q Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2178 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 439471618 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559647dc1d60, 0x559647faa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559647faa720,0x559649e342c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71703dc7bbc53e2428409b180c29331f66f075f0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2592 processed earlier; will process 8384 files now Step #5: ==78446== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55963e9042d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559644f3f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559644f2246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559644f2238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55963e90a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55963e86b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55963e865c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55963e8fc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55964192b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55964192b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55964192b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55964192b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55964192b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55964192b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55964192b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55964192b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55964192b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55964192b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559643b3045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55964088c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5596408975a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559640642d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559640642d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559640643808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559640642944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559640642944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559640642944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559644f2494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559644f2d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559644f15529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559644f3ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0bf1e93082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55963e86443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x74,0x61,0x72,0x74,0x78,0x72,0x65,0x66,0x20,0x35,0x20,0x34,0x36,0x30,0x37,0x30,0x35,0x30,0x32,0x30, Step #5: startxref 5 460705020 Step #5: artifact_prefix='./'; Test unit written to ./oom-49903469d4344a5ac98de821c912754016b16f05 Step #5: Base64: c3RhcnR4cmVmIDUgNDYwNzA1MDIw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2179 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 439965005 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56119abf6d60, 0x56119addf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56119addf720,0x56119cc692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/49903469d4344a5ac98de821c912754016b16f05' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2593 processed earlier; will process 8383 files now Step #5: ==78482== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5611917392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561197d74728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561197d5746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561197d5738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56119173f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5611916a042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56119169ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561191731595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5611947608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5611947608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5611947608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5611947608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5611947608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5611947608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5611947608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5611947608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5611947608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5611947608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56119696545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5611936c1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5611936cc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561193477d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561193477d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561193478808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561193477944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561193477944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561193477944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561197d5994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561197d627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561197d4a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561197d74fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd094749082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56119169943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0xc0,0xa4,0x0, Step #5: $$$$$$$$$$$$$$$$$$\300\244\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-8c3834fb95c7ac876143adaea19fc320050c4bfb Step #5: Base64: JCQkJCQkJCQkJCQkJCQkJCQkwKQA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2180 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 440464485 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558233cdfd60, 0x558233ec871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558233ec8720,0x558235d522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8c3834fb95c7ac876143adaea19fc320050c4bfb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2594 processed earlier; will process 8382 files now Step #5: #1 pulse cov: 3647 ft: 3648 exec/s: 0 rss: 169Mb Step #5: ==78518== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55822a8222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558230e5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558230e4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558230e4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55822a828652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55822a78942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55822a783c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55822a81a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55822d8498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55822d8498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55822d8498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55822d8498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55822d8498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55822d8498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55822d8498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55822d8498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55822d8498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55822d8498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55822fa4e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55822c7aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55822c7b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55822c560d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55822c560d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55822c561808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55822c560944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55822c560944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55822c560944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558230e4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558230e4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558230e33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558230e5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f88c7c6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55822a78243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x81,0xb7,0xf3,0xa0,0xb7,0xb7,0xf3,0xa0,0x81,0xa7,0xf3,0xa0,0xb7,0x81,0xf2,0xa0,0x81,0xb7,0xf3, Step #5: \363\240\201\267\363\240\267\267\363\240\201\247\363\240\267\201\362\240\201\267\363 Step #5: artifact_prefix='./'; Test unit written to ./oom-fc0b0df96b5c365f74d1b40689198e39bd732ea8 Step #5: Base64: 86CBt/Ogt7fzoIGn86C3gfKggbfz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2181 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 440991770 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55df6e7ecd60, 0x55df6e9d571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55df6e9d5720,0x55df7085f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc0b0df96b5c365f74d1b40689198e39bd732ea8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2596 processed earlier; will process 8380 files now Step #5: #1 pulse cov: 3869 ft: 3870 exec/s: 0 rss: 171Mb Step #5: ==78554== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55df6532f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55df6b96a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55df6b94d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55df6b94d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55df65335652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55df6529642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55df65290c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55df65327595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55df683568c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55df683568c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55df683568c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55df683568c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55df683568c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55df683568c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55df683568c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55df683568c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55df683568c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55df683568c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55df6a55b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55df672b7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55df672c25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55df6706dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55df6706dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55df6706e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55df6706d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55df6706d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55df6706d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55df6b94f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55df6b9587b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55df6b940529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55df6b96afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f852bb9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55df6528f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x72,0x3a,0x45,0x3e,0x3c,0x44,0x3a,0x45,0x3e,0x3c,0x44,0x3a,0x45,0x3e,0x3c,0x2f,0x3c,0x2f,0x3c,0x2f, Step #5: Step #5: Step #5: #0 0x558cd61932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558cdc7ce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558cdc7b146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558cdc7b138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558cd6199652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558cd60fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558cd60f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558cd618b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558cd91ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558cd91ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558cd91ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558cd91ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558cd91ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558cd91ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558cd91ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558cd91ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558cd91ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558cd91ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558cdb3bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558cd811b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558cd81265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558cd7ed1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558cd7ed1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558cd7ed2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558cd7ed1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558cd7ed1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558cd7ed1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558cdc7b394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558cdc7bc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558cdc7a4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558cdc7cefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f11955c0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558cd60f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xea,0x80,0xa6,0xcd,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\352\200\246\315\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-f7df179eb08c50bb87720528687b27e8945c2740 Step #5: Base64: SUQzSU0zBOKArgTqgKbNnu/9uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2183 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 441996776 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560599de7d60, 0x560599fd071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560599fd0720,0x56059be5a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7df179eb08c50bb87720528687b27e8945c2740' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2599 processed earlier; will process 8377 files now Step #5: ==78626== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56059092a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560596f65728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560596f4846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560596f4838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560590930652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56059089142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56059088bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560590922595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605939518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605939518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605939518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605939518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605939518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605939518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605939518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605939518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605939518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605939518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560595b5645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605928b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605928bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560592668d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560592668d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560592669808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560592668944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560592668944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560592668944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560596f4a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560596f537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560596f3b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560596f65fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f26ebe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56059088a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd5,0x9a,0x6d,0x61,0x78,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x70,0x32, Step #5: \325\232max''''''''''''''p2 Step #5: artifact_prefix='./'; Test unit written to ./oom-ecc2922c1ab131d1b8a3e556e9a4854bd580d91b Step #5: Base64: 1ZptYXgnJycnJycnJycnJycnJ3Ay Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2184 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 442494291 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c1d6e57d60, 0x55c1d704071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c1d7040720,0x55c1d8eca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ecc2922c1ab131d1b8a3e556e9a4854bd580d91b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2600 processed earlier; will process 8376 files now Step #5: ==78662== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c1cd99a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c1d3fd5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c1d3fb846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c1d3fb838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c1cd9a0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c1cd90142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c1cd8fbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c1cd992595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1d09c18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1d09c18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1d09c18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1d09c18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1d09c18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1d09c18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1d09c18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1d09c18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1d09c18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1d09c18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c1d2bc645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c1cf922578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c1cf92d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c1cf6d8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c1cf6d8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c1cf6d9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c1cf6d8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c1cf6d8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c1cf6d8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c1d3fba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c1d3fc37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c1d3fab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c1d3fd5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f92fa82f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c1cd8fa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x11,0x43,0x6f,0x4e,0x74,0x65,0x6e,0x74,0x2d,0x74,0x79,0x70,0x65,0x3a,0xe3,0x80,0x82,0xff, Step #5: \000\000\000\021CoNtent-type:\343\200\202\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-1e46135377bb20ce2fe4d8495688e73535fc66e7 Step #5: Base64: AAAAEUNvTnRlbnQtdHlwZTrjgIL/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2185 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 442984030 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555fbc2a6d60, 0x555fbc48f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555fbc48f720,0x555fbe3192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1e46135377bb20ce2fe4d8495688e73535fc66e7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2601 processed earlier; will process 8375 files now Step #5: ==78698== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555fb2de92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555fb9424728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555fb940746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555fb940738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555fb2def652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555fb2d5042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555fb2d4ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555fb2de1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555fb5e108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555fb5e108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555fb5e108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555fb5e108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555fb5e108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555fb5e108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555fb5e108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555fb5e108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555fb5e108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555fb5e108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555fb801545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555fb4d71578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555fb4d7c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555fb4b27d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555fb4b27d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555fb4b28808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555fb4b27944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555fb4b27944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555fb4b27944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555fb940994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555fb94127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555fb93fa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555fb9424fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc417e42082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555fb2d4943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0x38,0x34,0x34,0x32,0x37,0x34,0x34,0x30,0x37,0x33,0x37,0x30,0x38,0x32,0x37,0x30,0x35,0x39,0x34,0x2e, Step #5: 18442744073708270594. Step #5: artifact_prefix='./'; Test unit written to ./oom-3cc562f730076af648f050b328a3889d1b9c4b31 Step #5: Base64: MTg0NDI3NDQwNzM3MDgyNzA1OTQu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2186 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 443471780 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564f4c416d60, 0x564f4c5ff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564f4c5ff720,0x564f4e4892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3cc562f730076af648f050b328a3889d1b9c4b31' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2602 processed earlier; will process 8374 files now Step #5: ==78734== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564f42f592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564f49594728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564f4957746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564f4957738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564f42f5f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564f42ec042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564f42ebac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564f42f51595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564f45f808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564f45f808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564f45f808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564f45f808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564f45f808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564f45f808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564f45f808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564f45f808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564f45f808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564f45f808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564f4818545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564f44ee1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564f44eec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564f44c97d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564f44c97d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564f44c98808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564f44c97944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564f44c97944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564f44c97944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564f4957994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564f495827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564f4956a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564f49594fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faab4286082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564f42eb943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x49,0x4c,0x45,0x20,0x27,0x20,0x27,0x59,0xa,0x46,0x49,0x4c,0x45,0x20,0x27,0x20,0x27,0x27,0x95,0x27, Step #5: FILE ' 'Y\012FILE ' ''\225' Step #5: artifact_prefix='./'; Test unit written to ./oom-a5ffcf13a24ab1885833c570a9b63cfc22d1f2f7 Step #5: Base64: RklMRSAnICdZCkZJTEUgJyAnJ5Un Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2187 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 443967342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625812e5d60, 0x5625814ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625814ce720,0x5625833582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a5ffcf13a24ab1885833c570a9b63cfc22d1f2f7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2603 processed earlier; will process 8373 files now Step #5: ==78770== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562577e282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56257e463728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56257e44646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56257e44638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562577e2e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562577d8f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562577d89c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562577e20595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56257ae4f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56257ae4f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56257ae4f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56257ae4f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56257ae4f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56257ae4f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56257ae4f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56257ae4f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56257ae4f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56257ae4f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56257d05445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562579db0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562579dbb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562579b66d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562579b66d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562579b67808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562579b66944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562579b66944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562579b66944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56257e44894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56257e4517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56257e439529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56257e463fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6101d62082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562577d8843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e,0xd,0x60,0x31,0xd,0xa,0x4e,0xd,0x60,0x31,0xd,0xa,0x60,0xd,0x68,0xd,0x60,0xd,0x0,0x3d,0xa, Step #5: N\015`1\015\012N\015`1\015\012`\015h\015`\015\000=\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-5cd4ebc48a3725576b0c21e3472a4b648f030f24 Step #5: Base64: Tg1gMQ0KTg1gMQ0KYA1oDWANAD0K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2188 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 444579732 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a6a4ab7d60, 0x55a6a4ca071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a6a4ca0720,0x55a6a6b2a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5cd4ebc48a3725576b0c21e3472a4b648f030f24' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2604 processed earlier; will process 8372 files now Step #5: ==78806== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a69b5fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a6a1c35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a6a1c1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a6a1c1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a69b600652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a69b56142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a69b55bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a69b5f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a69e6218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a69e6218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a69e6218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a69e6218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a69e6218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a69e6218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a69e6218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a69e6218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a69e6218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a69e6218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a6a082645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a69d582578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a69d58d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a69d338d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a69d338d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a69d339808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a69d338944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a69d338944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a69d338944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a6a1c1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a6a1c237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a6a1c0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a6a1c35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7aa97f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a69b55a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x43,0x44,0x2,0x0,0x0,0x0,0x1a,0x2,0x2,0x2,0x2,0x2,0x2,0x2,0x2,0x2,0x2,0x2,0x2,0x2, Step #5: \001CD\002\000\000\000\032\002\002\002\002\002\002\002\002\002\002\002\002\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-7e9bf9dd5eda60afd31f75736561eeee8ca3377d Step #5: Base64: AUNEAgAAABoCAgICAgICAgICAgIC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2189 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 445071086 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f1206f9d60, 0x55f1208e271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f1208e2720,0x55f12276c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7e9bf9dd5eda60afd31f75736561eeee8ca3377d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2605 processed earlier; will process 8371 files now Step #5: #1 pulse cov: 3738 ft: 3739 exec/s: 0 rss: 170Mb Step #5: #2 pulse cov: 4088 ft: 4305 exec/s: 0 rss: 171Mb Step #5: ==78842== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f11723c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f11d877728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f11d85a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f11d85a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f117242652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f1171a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f11719dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f117234595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f11a2638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f11a2638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f11a2638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f11a2638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f11a2638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f11a2638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f11a2638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f11a2638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f11a2638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f11a2638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f11c46845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f1191c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f1191cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f118f7ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f118f7ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f118f7b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f118f7a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f118f7a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f118f7a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f11d85c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f11d8657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f11d84d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f11d877fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff06fbac082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f11719c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x20,0x28,0x2d,0xa,0xa,0xa,0x2d,0xa,0x2d,0xa,0x2f,0x0,0xa,0x1,0x3b,0xa,0x63,0xa,0xa,0x60, Step #5: ` (-\012\012\012-\012-\012/\000\012\001;\012c\012\012` Step #5: artifact_prefix='./'; Test unit written to ./oom-af30e532d98019141f67693432c43b9974d8e580 Step #5: Base64: YCAoLQoKCi0KLQovAAoBOwpjCgpg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2190 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 445807435 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559d30e63d60, 0x559d3104c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559d3104c720,0x559d32ed62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af30e532d98019141f67693432c43b9974d8e580' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2609 processed earlier; will process 8367 files now Step #5: ==78878== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559d279a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559d2dfe1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559d2dfc446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559d2dfc438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559d279ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559d2790d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559d27907c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559d2799e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559d2a9cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559d2a9cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559d2a9cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559d2a9cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559d2a9cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559d2a9cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559d2a9cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559d2a9cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559d2a9cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559d2a9cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559d2cbd245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559d2992e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559d299395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559d296e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559d296e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559d296e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559d296e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559d296e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559d296e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559d2dfc694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559d2dfcf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559d2dfb7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559d2dfe1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f157482a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559d2790643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xcd,0x8f,0x5c,0x55,0xf3,0xa0,0x80,0xa2,0xe0,0xb9,0x84,0x30,0x30,0x31,0x44,0x30,0x30,0x30,0x30,0x22, Step #5: \"\315\217\\U\363\240\200\242\340\271\204001D0000\" Step #5: artifact_prefix='./'; Test unit written to ./oom-0f6620b03b66b3d213af6c0f2e37cb6b5c5d4675 Step #5: Base64: Is2PXFXzoICi4LmEMDAxRDAwMDAi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2191 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 446289713 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55859fb95d60, 0x55859fd7e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55859fd7e720,0x5585a1c082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f6620b03b66b3d213af6c0f2e37cb6b5c5d4675' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2610 processed earlier; will process 8366 files now Step #5: ==78914== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585966d82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55859cd13728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55859ccf646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55859ccf638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585966de652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55859663f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558596639c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585966d0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585996ff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585996ff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585996ff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585996ff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585996ff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585996ff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585996ff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585996ff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585996ff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585996ff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55859b90445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558598660578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55859866b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558598416d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558598416d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558598417808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558598416944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558598416944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558598416944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55859ccf894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55859cd017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55859cce9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55859cd13fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb915853082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55859663843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11,0xdc,0xb0,0x8,0x6f,0xcc,0xb0,0x4e,0x6f,0xdc,0xb0,0x9,0x6f,0xcc,0xb0,0x4e,0xcb,0x6f,0x6f,0x6f,0x6f, Step #5: \021\334\260\010o\314\260No\334\260\011o\314\260N\313oooo Step #5: artifact_prefix='./'; Test unit written to ./oom-8ae65df35cec1c4656b957c7a430de9b6ddaf11b Step #5: Base64: EdywCG/MsE5v3LAJb8ywTstvb29v Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2192 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 446782103 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559d57559d60, 0x559d5774271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559d57742720,0x559d595cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ae65df35cec1c4656b957c7a430de9b6ddaf11b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2611 processed earlier; will process 8365 files now Step #5: ==78950== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559d4e09c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559d546d7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559d546ba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559d546ba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559d4e0a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559d4e00342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559d4dffdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559d4e094595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559d510c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559d510c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559d510c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559d510c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559d510c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559d510c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559d510c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559d510c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559d510c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559d510c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559d532c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559d50024578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559d5002f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559d4fddad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559d4fddad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559d4fddb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559d4fdda944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559d4fdda944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559d4fdda944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559d546bc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559d546c57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559d546ad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559d546d7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc5038f3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559d4dffc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x90,0xe1,0x9a,0x80,0x0,0x54,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x37,0x20,0x30,0x20,0x35,0x4d,0x39, Step #5: \333\220\341\232\200\000T\000\000\000\000\000\000\0007 0 5M9 Step #5: artifact_prefix='./'; Test unit written to ./oom-0606063a7c9357596dfd017fe0f51e908249752e Step #5: Base64: 25DhmoAAVAAAAAAAAAA3IDAgNU05 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2193 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 447276858 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5635399ead60, 0x563539bd371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563539bd3720,0x56353ba5d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0606063a7c9357596dfd017fe0f51e908249752e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2612 processed earlier; will process 8364 files now Step #5: ==78986== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56353052d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563536b68728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563536b4b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563536b4b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563530533652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56353049442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56353048ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563530525595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5635335548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5635335548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5635335548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5635335548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5635335548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5635335548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5635335548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5635335548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5635335548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5635335548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56353575945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5635324b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5635324c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56353226bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56353226bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56353226c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56353226b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56353226b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56353226b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563536b4d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563536b567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563536b3e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563536b68fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f272d87d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56353048d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe0,0xad,0x87,0xe0,0xad,0x97,0xe0,0xad,0x87,0xe0,0xad,0x97,0xe0,0xad,0x87,0xe0,0xad,0x97, Step #5: ws:\340\255\207\340\255\227\340\255\207\340\255\227\340\255\207\340\255\227 Step #5: artifact_prefix='./'; Test unit written to ./oom-0ef85646cbecfb143ee07b4e6c75ad97d4b34bc3 Step #5: Base64: d3M64K2H4K2X4K2H4K2X4K2H4K2X Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2194 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 447777555 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c3c9a0bd60, 0x55c3c9bf471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c3c9bf4720,0x55c3cba7e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0ef85646cbecfb143ee07b4e6c75ad97d4b34bc3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2613 processed earlier; will process 8363 files now Step #5: ==79022== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c3c054e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c3c6b89728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c3c6b6c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c3c6b6c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c3c0554652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c3c04b542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c3c04afc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c3c0546595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c3c35758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c3c35758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c3c35758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c3c35758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c3c35758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c3c35758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c3c35758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c3c35758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c3c35758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c3c35758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c3c577a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c3c24d6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c3c24e15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c3c228cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c3c228cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c3c228d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c3c228c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c3c228c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c3c228c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c3c6b6e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c3c6b777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c3c6b5f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c3c6b89fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8944d4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c3c04ae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x13,0x3a,0x11,0xa,0xf,0x78,0x6e,0x2d,0x2d,0x0,0x0,0xf0,0x91,0x84,0xa4,0x0,0xf0,0x91,0x8c,0xa4, Step #5: \012\023:\021\012\017xn--\000\000\360\221\204\244\000\360\221\214\244 Step #5: artifact_prefix='./'; Test unit written to ./oom-c608f35ad9cffb5b25b641d87ca8a06a47e6c821 Step #5: Base64: ChM6EQoPeG4tLQAA8JGEpADwkYyk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2195 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 448268960 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564fda53bd60, 0x564fda72471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564fda724720,0x564fdc5ae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c608f35ad9cffb5b25b641d87ca8a06a47e6c821' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2614 processed earlier; will process 8362 files now Step #5: #1 pulse cov: 3880 ft: 3881 exec/s: 0 rss: 170Mb Step #5: ==79058== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564fd107e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564fd76b9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564fd769c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564fd769c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564fd1084652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564fd0fe542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564fd0fdfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564fd1076595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564fd40a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564fd40a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564fd40a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564fd40a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564fd40a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564fd40a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564fd40a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564fd40a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564fd40a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564fd40a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564fd62aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564fd3006578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564fd30115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564fd2dbcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564fd2dbcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564fd2dbd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564fd2dbc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564fd2dbc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564fd2dbc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564fd769e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564fd76a77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564fd768f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564fd76b9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd42b7b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564fd0fde43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x5b,0x5b,0x5b,0x68,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x0,0x3a,0x3a,0x3a,0x5d, Step #5: ?[[[h:::::::::::\000:::] Step #5: artifact_prefix='./'; Test unit written to ./oom-aa2e2549f2e6862e353fa95c7a6160ff8e675d95 Step #5: Base64: P1tbW2g6Ojo6Ojo6Ojo6OgA6Ojpd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2196 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 448813494 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5610c1f82d60, 0x5610c216b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5610c216b720,0x5610c3ff52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aa2e2549f2e6862e353fa95c7a6160ff8e675d95' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2616 processed earlier; will process 8360 files now Step #5: #1 pulse cov: 3620 ft: 3621 exec/s: 0 rss: 170Mb Step #5: #2 pulse cov: 4057 ft: 4276 exec/s: 0 rss: 171Mb Step #5: ==79094== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5610b8ac52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5610bf100728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5610bf0e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5610bf0e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5610b8acb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5610b8a2c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5610b8a26c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5610b8abd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5610bbaec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5610bbaec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5610bbaec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5610bbaec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5610bbaec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5610bbaec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5610bbaec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5610bbaec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5610bbaec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5610bbaec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5610bdcf145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5610baa4d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5610baa585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5610ba803d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5610ba803d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5610ba804808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5610ba803944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5610ba803944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5610ba803944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5610bf0e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5610bf0ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5610bf0d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5610bf100fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f453c9e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5610b8a2543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0xa,0x0,0x0,0x6c,0x1,0x60,0x54,0x43,0x4f,0x0,0x0,0x1,0x60,0x54,0x43,0x4f,0x1, Step #5: ID3\002\012\000\000l\001`TCO\000\000\001`TCO\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-73be53fb3d84729454b0e7d83ee78c9520022819 Step #5: Base64: SUQzAgoAAGwBYFRDTwAAAWBUQ08B Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2197 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 449501623 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55de4b3bdd60, 0x55de4b5a671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55de4b5a6720,0x55de4d4302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/73be53fb3d84729454b0e7d83ee78c9520022819' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2619 processed earlier; will process 8357 files now Step #5: ==79130== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55de41f002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55de4853b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55de4851e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55de4851e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55de41f06652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55de41e6742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55de41e61c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55de41ef8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55de44f278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55de44f278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55de44f278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55de44f278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55de44f278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55de44f278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55de44f278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55de44f278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55de44f278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55de44f278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55de4712c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55de43e88578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55de43e935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55de43c3ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55de43c3ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55de43c3f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55de43c3e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55de43c3e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55de43c3e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55de4852094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55de485297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55de48511529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55de4853bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a4e4d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55de41e6043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x27,0x30,0x22,0xe,0x0,0x29,0x54,0x49,0x54,0x31,0x0,0x1,0x97,0x32,0xe,0x68,0x43, Step #5: ID3\003'0\"\016\000)TIT1\000\001\2272\016hC Step #5: artifact_prefix='./'; Test unit written to ./oom-c28537438f0434ad9182a23a20bd5fad8b18ff04 Step #5: Base64: SUQzAycwIg4AKVRJVDEAAZcyDmhD Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2198 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 450001481 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56510d4ccd60, 0x56510d6b571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56510d6b5720,0x56510f53f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c28537438f0434ad9182a23a20bd5fad8b18ff04' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2620 processed earlier; will process 8356 files now Step #5: #1 pulse cov: 3775 ft: 3776 exec/s: 0 rss: 170Mb Step #5: ==79166== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56510400f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56510a64a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56510a62d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56510a62d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565104015652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565103f7642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565103f70c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565104007595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5651070368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5651070368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5651070368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5651070368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5651070368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5651070368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5651070368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5651070368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5651070368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5651070368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56510923b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565105f97578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565105fa25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565105d4dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565105d4dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565105d4e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565105d4d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565105d4d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565105d4d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56510a62f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56510a6387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56510a620529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56510a64afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a7bd77082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565103f6f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x17,0x3e,0x7e,0x76,0x28,0x4d,0x54,0x58,0x22,0x49,0x44,0x30,0x2,0xdc,0x0,0xdb,0x2f, Step #5: ID3\002\027>~v(MTX\"ID0\002\334\000\333/ Step #5: artifact_prefix='./'; Test unit written to ./oom-1aca9380ad4289a32e8eada963b8cbafd058d1c1 Step #5: Base64: SUQzAhc+fnYoTVRYIklEMALcANsv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2199 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 450542601 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e0f8ce1d60, 0x55e0f8eca71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e0f8eca720,0x55e0fad542c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1aca9380ad4289a32e8eada963b8cbafd058d1c1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2622 processed earlier; will process 8354 files now Step #5: ==79202== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e0ef8242d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e0f5e5f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e0f5e4246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e0f5e4238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e0ef82a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e0ef78b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e0ef785c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e0ef81c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e0f284b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e0f284b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e0f284b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e0f284b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e0f284b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e0f284b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e0f284b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e0f284b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e0f284b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e0f284b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e0f4a5045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e0f17ac578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e0f17b75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e0f1562d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e0f1562d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e0f1563808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e0f1562944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e0f1562944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e0f1562944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e0f5e4494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e0f5e4d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e0f5e35529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e0f5e5ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd843bef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e0ef78443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x13,0x12,0x11,0xa,0xf,0x2f,0x2f,0x2b,0x62,0x75,0x69,0x6c,0x64,0xb,0x21,0x76,0xf0,0x91,0xb0,0xb2, Step #5: \012\023\022\021\012\017//+build\013!v\360\221\260\262 Step #5: artifact_prefix='./'; Test unit written to ./oom-7183f51a2c37c713cd20eee3ee0e10900336ce74 Step #5: Base64: ChMSEQoPLy8rYnVpbGQLIXbwkbCy Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2200 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 451029135 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c5d04f2d60, 0x55c5d06db71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c5d06db720,0x55c5d25652c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7183f51a2c37c713cd20eee3ee0e10900336ce74' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2623 processed earlier; will process 8353 files now Step #5: #1 pulse cov: 3736 ft: 3737 exec/s: 0 rss: 170Mb Step #5: ==79238== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5c70352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c5cd670728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c5cd65346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c5cd65338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c5c703b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c5c6f9c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c5c6f96c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c5c702d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c5ca05c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c5ca05c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c5ca05c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c5ca05c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c5ca05c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c5ca05c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c5ca05c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c5ca05c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c5ca05c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c5ca05c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c5cc26145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c5c8fbd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c5c8fc85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c5c8d73d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c5c8d73d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c5c8d74808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c5c8d73944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c5c8d73944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c5c8d73944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c5cd65594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c5cd65e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c5cd646529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c5cd670fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f946e7e0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c5c6f9543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x4,0x2f,0x44,0x6c,0x78,0x2,0x54,0x58,0x58,0x50,0x0,0x63,0x0,0x75,0x53,0x4c,0x54, Step #5: ID3\002\004/Dlx\002TXXP\000c\000uSLT Step #5: artifact_prefix='./'; Test unit written to ./oom-55f70458ec74ead5d7fd4c477069a967f4295663 Step #5: Base64: SUQzAgQvRGx4AlRYWFAAYwB1U0xU Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2201 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 451557980 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0cbd6ad60, 0x55a0cbf5371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0cbf53720,0x55a0cdddd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/55f70458ec74ead5d7fd4c477069a967f4295663' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2625 processed earlier; will process 8351 files now Step #5: ==79274== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0c28ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0c8ee8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0c8ecb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0c8ecb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0c28b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0c281442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0c280ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0c28a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0c58d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0c58d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0c58d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0c58d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0c58d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0c58d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0c58d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0c58d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0c58d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0c58d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0c7ad945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0c4835578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0c48405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0c45ebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0c45ebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0c45ec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0c45eb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0c45eb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0c45eb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0c8ecd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0c8ed67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0c8ebe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0c8ee8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f86da53c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0c280d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x4e,0x2d,0x2d,0xe2,0x81,0x97,0xe2,0x81,0x97,0xa,0x78,0x4e,0x2d,0x2d,0xe2,0x81,0x97,0xe2,0x81,0x97, Step #5: xN--\342\201\227\342\201\227\012xN--\342\201\227\342\201\227 Step #5: artifact_prefix='./'; Test unit written to ./oom-31a6a2f08ebeadd20f01a84412a2713d87497838 Step #5: Base64: eE4tLeKBl+KBlwp4Ti0t4oGX4oGX Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2202 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 452051909 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5636474d8d60, 0x5636476c171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5636476c1720,0x56364954b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/31a6a2f08ebeadd20f01a84412a2713d87497838' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2626 processed earlier; will process 8350 files now Step #5: ==79310== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56363e01b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563644656728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56364463946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56364463938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56363e021652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56363df8242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56363df7cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56363e013595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5636410428c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5636410428c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5636410428c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5636410428c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5636410428c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5636410428c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5636410428c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5636410428c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5636410428c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5636410428c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56364324745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56363ffa3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56363ffae5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56363fd59d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56363fd59d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56363fd5a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56363fd59944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56363fd59944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56363fd59944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56364463b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5636446447b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56364462c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563644656fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f33263d5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56363df7b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x0,0x2d,0xe1,0xb7,0xbe,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf,0xbf, Step #5: [\000-\341\267\276\277\277\277\277\277\277\277\277\277\277\277\277\277\277\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-14204873edccf399be5995a0fc294bd1ab6b2158 Step #5: Base64: WwAt4be+v7+/v7+/v7+/v7+/v7+/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2203 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 452542914 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564ddec37d60, 0x564ddee2071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564ddee20720,0x564de0caa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/14204873edccf399be5995a0fc294bd1ab6b2158' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2627 processed earlier; will process 8349 files now Step #5: ==79346== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564dd577a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ddbdb5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ddbd9846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ddbd9838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564dd5780652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564dd56e142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564dd56dbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564dd5772595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564dd87a18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564dd87a18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564dd87a18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564dd87a18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564dd87a18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564dd87a18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564dd87a18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564dd87a18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564dd87a18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564dd87a18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564dda9a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564dd7702578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564dd770d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564dd74b8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564dd74b8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564dd74b9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564dd74b8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564dd74b8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564dd74b8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ddbd9a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ddbda37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ddbd8b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ddbdb5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f34e5982082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564dd56da43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d, Step #5: a\\u{D}\\u{D}\\u{D}\\u{D} Step #5: artifact_prefix='./'; Test unit written to ./oom-1814d056e23c281d62859e805fc918471f95cf35 Step #5: Base64: YVx1e0R9XHV7RH1cdXtEfVx1e0R9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2204 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 453031941 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557bfe030d60, 0x557bfe21971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557bfe219720,0x557c000a32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1814d056e23c281d62859e805fc918471f95cf35' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2628 processed earlier; will process 8348 files now Step #5: #1 pulse cov: 3481 ft: 3482 exec/s: 0 rss: 171Mb Step #5: ==79382== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557bf4b732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557bfb1ae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557bfb19146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557bfb19138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557bf4b79652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557bf4ada42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557bf4ad4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557bf4b6b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557bf7b9a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557bf7b9a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557bf7b9a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557bf7b9a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557bf7b9a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557bf7b9a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557bf7b9a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557bf7b9a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557bf7b9a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557bf7b9a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557bf9d9f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557bf6afb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557bf6b065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557bf68b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557bf68b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557bf68b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557bf68b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557bf68b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557bf68b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557bfb19394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557bfb19c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557bfb184529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557bfb1aefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc7b5e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557bf4ad343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x24,0x36,0x3a,0x5b,0x7b,0x24,0x34,0x3a,0x22,0xb,0xb,0x22,0x7d,0x5d,0x7d,0x24, Step #5: $3::{$6:[{$4:\"\013\013\"}]}$ Step #5: artifact_prefix='./'; Test unit written to ./oom-37dc60adf01f02d47d64c02dcf95ba1aaa559514 Step #5: Base64: JDM6OnskNjpbeyQ0OiILCyJ9XX0k Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2205 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 453576511 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562465e13d60, 0x562465ffc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562465ffc720,0x562467e862c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/37dc60adf01f02d47d64c02dcf95ba1aaa559514' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2630 processed earlier; will process 8346 files now Step #5: ==79418== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56245c9562d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562462f91728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562462f7446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562462f7438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56245c95c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56245c8bd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56245c8b7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56245c94e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56245f97d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56245f97d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56245f97d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56245f97d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56245f97d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56245f97d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56245f97d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56245f97d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56245f97d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56245f97d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562461b8245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56245e8de578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56245e8e95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56245e694d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56245e694d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56245e695808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56245e694944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56245e694944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56245e694944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562462f7694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562462f7f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562462f67529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562462f91fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f67b29c7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56245c8b643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x59,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x24,0x59,0x2a,0x2a,0x2e,0x2a,0x2a,0x28,0xd8,0x2f,0x2f,0x0, Step #5: $Y*******$Y**.**(\330//\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-6c76efb884b695b842d319e74faf13e59ccb261d Step #5: Base64: JFkqKioqKioqJFkqKi4qKijYLy8A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2206 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 454091859 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560915d35d60, 0x560915f1e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560915f1e720,0x560917da82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6c76efb884b695b842d319e74faf13e59ccb261d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2631 processed earlier; will process 8345 files now Step #5: ==79454== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56090c8782d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560912eb3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560912e9646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560912e9638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56090c87e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56090c7df42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56090c7d9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56090c870595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56090f89f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56090f89f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56090f89f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56090f89f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56090f89f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56090f89f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56090f89f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56090f89f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56090f89f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56090f89f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560911aa445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56090e800578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56090e80b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56090e5b6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56090e5b6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56090e5b7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56090e5b6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56090e5b6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56090e5b6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560912e9894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560912ea17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560912e89529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560912eb3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feac0d17082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56090c7d843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x11,0x0,0x0,0x0,0xd,0x5b,0x30,0xf4,0x84,0x91,0x9d,0xf4,0x8f,0xbf,0x90,0x5d,0x3a,0xd, Step #5: \000\000\000\021\000\000\000\015[0\364\204\221\235\364\217\277\220]:\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-85123617b00e13933efd5b4932564741a1a22480 Step #5: Base64: AAAAEQAAAA1bMPSEkZ30j7+QXToN Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2207 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 454586467 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55856d8e2d60, 0x55856dacb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55856dacb720,0x55856f9552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/85123617b00e13933efd5b4932564741a1a22480' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 2632 processed earlier; will process 8344 files now Step #5: ==79490== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585644252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55856aa60728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55856aa4346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55856aa4338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55856442b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55856438c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558564386c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55856441d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55856744c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55856744c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55856744c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55856744c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55856744c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55856744c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55856744c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55856744c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55856744c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55856744c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55856965145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585663ad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585663b85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558566163d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558566163d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558566164808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558566163944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558566163944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558566163944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55856aa4594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55856aa4e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55856aa36529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55856aa60fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1541163082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55856438543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x48,0x54,0x4d,0x4d,0x22, Step #5: Step #5: Step #5: #0 0x5649d08042d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5649d6e3f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5649d6e2246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5649d6e2238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5649d080a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5649d076b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5649d0765c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5649d07fc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5649d382b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5649d382b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5649d382b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5649d382b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5649d382b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5649d382b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5649d382b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5649d382b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5649d382b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5649d382b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5649d5a3045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5649d278c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5649d27975a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5649d2542d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5649d2542d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5649d2543808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5649d2542944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5649d2542944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5649d2542944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5649d6e2494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5649d6e2d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5649d6e15529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5649d6e3ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f46d4529082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5649d076443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x2d,0x2d,0x3c,0x21,0x2d,0x2d,0x3c,0x53,0x3e,0x3e,0x17,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e, Step #5: 0:0.8\0000:0.0-->0:0.3 Step #5: artifact_prefix='./'; Test unit written to ./oom-983f0829b9a524806be6d952246c649a1d2ceab2 Step #5: Base64: MDowLjMwLS0+MDowLjgAMDowLjAtLT4wOjAuMw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2530 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 663378336 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a05217dd60, 0x55a05236671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a052366720,0x55a0541f02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/983f0829b9a524806be6d952246c649a1d2ceab2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3052 processed earlier; will process 7924 files now Step #5: ==91118== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a048cc02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a04f2fb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a04f2de46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a04f2de38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a048cc6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a048c2742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a048c21c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a048cb8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a04bce78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a04bce78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a04bce78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a04bce78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a04bce78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a04bce78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a04bce78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a04bce78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a04bce78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a04bce78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a04deec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a04ac48578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a04ac535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a04a9fed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a04a9fed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a04a9ff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a04a9fe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a04a9fe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a04a9fe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a04f2e094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a04f2e97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a04f2d1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a04f2fbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6516171082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a048c2043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x3f,0x4e,0x3f,0x8,0x23,0x31,0x23,0x31,0x23,0x31,0x25,0x1,0x0,0x0,0x0,0x0,0x23,0x31,0x25,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x86, Step #5: %?N?\010#1#1#1%\001\000\000\000\000#1%\001\000\000\000\000\000\000\206 Step #5: artifact_prefix='./'; Test unit written to ./oom-bc9018dfa397ff23adc5c4f541e17c656a47f075 Step #5: Base64: JT9OPwgjMSMxIzElAQAAAAAjMSUBAAAAAAAAhg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2531 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 663879886 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a1c425fd60, 0x55a1c444871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a1c4448720,0x55a1c62d22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bc9018dfa397ff23adc5c4f541e17c656a47f075' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3053 processed earlier; will process 7923 files now Step #5: ==91154== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a1bada22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a1c13dd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a1c13c046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a1c13c038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a1bada8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1bad0942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1bad03c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a1bad9a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1bddc98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1bddc98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1bddc98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1bddc98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1bddc98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1bddc98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1bddc98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1bddc98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1bddc98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1bddc98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a1bffce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a1bcd2a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a1bcd355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a1bcae0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a1bcae0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a1bcae1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a1bcae0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a1bcae0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a1bcae0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a1c13c294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a1c13cb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a1c13b3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a1c13ddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f016f60f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1bad0243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x67,0x3e,0x3c,0x67,0x3e,0x3c,0x67,0x3e,0x3c,0x2f,0x67,0xd,0x3c,0x2f,0x67,0xd,0x3c,0x67,0x3e,0x3c,0x2f,0x67,0xd,0x3c,0x2f,0x67,0xd, Step #5: Step #5: Step #5: #0 0x55a1588962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a15eed1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a15eeb446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a15eeb438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a15889c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1587fd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1587f7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a15888e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a15b8bd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a15b8bd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a15b8bd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a15b8bd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a15b8bd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a15b8bd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a15b8bd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a15b8bd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a15b8bd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a15b8bd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a15dac245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a15a81e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a15a8295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a15a5d4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a15a5d4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a15a5d5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a15a5d4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a15a5d4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a15a5d4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a15eeb694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a15eebf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a15eea7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a15eed1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba35ab3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1587f643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf2,0xb0,0x81,0x9f,0xe7,0xa4,0x80,0xef,0x9d,0x80,0xef,0xa4,0x9f,0xe7,0xa4,0x80,0xef,0xa4,0x9f,0xef,0xa4,0x8d,0xef,0x9e,0x80,0xef,0xa4,0xbf, Step #5: \362\260\201\237\347\244\200\357\235\200\357\244\237\347\244\200\357\244\237\357\244\215\357\236\200\357\244\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-83cbccb049fa351a0f240ff87e3b5cc4379c9bae Step #5: Base64: 8rCBn+ekgO+dgO+kn+ekgO+kn++kje+egO+kvw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2533 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 664886959 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa861dfd60, 0x55aa863c871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa863c8720,0x55aa882522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/83cbccb049fa351a0f240ff87e3b5cc4379c9bae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3055 processed earlier; will process 7921 files now Step #5: ==91226== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa7cd222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa8335d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa8334046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa8334038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa7cd28652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa7cc8942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa7cc83c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa7cd1a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa7fd498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa7fd498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa7fd498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa7fd498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa7fd498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa7fd498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa7fd498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa7fd498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa7fd498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa7fd498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa81f4e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa7ecaa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa7ecb55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa7ea60d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa7ea60d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa7ea61808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa7ea60944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa7ea60944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa7ea60944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa8334294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa8334b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa83333529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa8335dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ea88fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa7cc8243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x7f,0x7f,0x0,0x0,0x28,0x0,0x72,0x0,0x0,0x28,0x0,0x64,0x64,0x0,0x0,0x28,0x0,0x72,0x0,0x0,0x2c,0x0,0x64,0x64,0x64,0x64, Step #5: = \177\177\000\000(\000r\000\000(\000dd\000\000(\000r\000\000,\000dddd Step #5: artifact_prefix='./'; Test unit written to ./oom-d4dd9193a79073f922b55514a5bf8f0e997da8c8 Step #5: Base64: PSB/fwAAKAByAAAoAGRkAAAoAHIAACwAZGRkZA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2534 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 665388848 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ce42079d60, 0x55ce4226271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ce42262720,0x55ce440ec2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d4dd9193a79073f922b55514a5bf8f0e997da8c8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3056 processed earlier; will process 7920 files now Step #5: ==91262== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ce38bbc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ce3f1f7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ce3f1da46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ce3f1da38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ce38bc2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ce38b2342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ce38b1dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ce38bb4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ce3bbe38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ce3bbe38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ce3bbe38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ce3bbe38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ce3bbe38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ce3bbe38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ce3bbe38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ce3bbe38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ce3bbe38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ce3bbe38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ce3dde845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ce3ab44578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ce3ab4f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ce3a8fad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ce3a8fad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ce3a8fb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ce3a8fa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ce3a8fa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ce3a8fa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ce3f1dc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ce3f1e57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ce3f1cd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ce3f1f7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f34b85ea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ce38b1c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x39,0x2,0x0,0x0,0x29,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x29,0x55,0xdc,0x83, Step #5: ID9\002\000\000)\000\000\000\000\000\000\000\000\000\000\000\000\000\000\001\000\000)U\334\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-11b4a9ea7cb8791c3aeb2652e00f9ee8f1cfd15b Step #5: Base64: SUQ5AgAAKQAAAAAAAAAAAAAAAAAAAQAAKVXcgw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2535 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 665883950 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d7c673d60, 0x558d7c85c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d7c85c720,0x558d7e6e62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11b4a9ea7cb8791c3aeb2652e00f9ee8f1cfd15b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3057 processed earlier; will process 7919 files now Step #5: ==91298== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d731b62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d797f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d797d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d797d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d731bc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d7311d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d73117c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d731ae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d761dd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d761dd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d761dd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d761dd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d761dd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d761dd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d761dd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d761dd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d761dd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d761dd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d783e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d7513e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d751495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d74ef4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d74ef4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d74ef5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d74ef4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d74ef4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d74ef4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d797d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d797df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d797c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d797f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f983b954082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d7311643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe3,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0x27, Step #5: ws:\341\254\221\341\254\265\341\254\221\341\254\265\343\254\221\341\254\265\341\254\221\341\254\265' Step #5: artifact_prefix='./'; Test unit written to ./oom-7b6c2e819782f3bd00110b441c48d2ddf70a392d Step #5: Base64: d3M64ayR4ay14ayR4ay146yR4ay14ayR4ay1Jw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2536 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 666374439 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56413b7fad60, 0x56413b9e371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56413b9e3720,0x56413d86d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7b6c2e819782f3bd00110b441c48d2ddf70a392d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3058 processed earlier; will process 7918 files now Step #5: ==91334== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56413233d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564138978728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56413895b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56413895b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564132343652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5641322a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56413229ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564132335595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5641353648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5641353648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5641353648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5641353648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5641353648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5641353648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5641353648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5641353648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5641353648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5641353648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56413756945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5641342c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5641342d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56413407bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56413407bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56413407c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56413407b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56413407b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56413407b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56413895d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5641389667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56413894e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564138978fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbede77b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56413229d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xe3,0x80,0x80,0x2d,0x2d,0x31,0x3f,0x5c,0x6f,0xdd,0xe3,0xdd,0x5c,0x72,0x5c,0x6e,0xf3,0x3b,0x5c,0x6e,0x3b,0x5c,0x6f,0xdd,0xe3,0xdd,0x3b, Step #5: -\343\200\200--1?\\o\335\343\335\\r\\n\363;\\n;\\o\335\343\335; Step #5: artifact_prefix='./'; Test unit written to ./oom-3b25cc952762f14203f432d7cbad932e0981ea10 Step #5: Base64: LeOAgC0tMT9cb93j3VxyXG7zO1xuO1xv3ePdOw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2537 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 666876650 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563ed3262d60, 0x563ed344b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563ed344b720,0x563ed52d52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3b25cc952762f14203f432d7cbad932e0981ea10' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3059 processed earlier; will process 7917 files now Step #5: ==91370== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563ec9da52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563ed03e0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563ed03c346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563ed03c338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563ec9dab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563ec9d0c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563ec9d06c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563ec9d9d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563eccdcc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563eccdcc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563eccdcc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563eccdcc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563eccdcc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563eccdcc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563eccdcc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563eccdcc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563eccdcc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563eccdcc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563ecefd145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563ecbd2d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563ecbd385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563ecbae3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563ecbae3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563ecbae4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563ecbae3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563ecbae3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563ecbae3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563ed03c594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563ed03ce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563ed03b6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563ed03e0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e05b69082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563ec9d0543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x18,0xe2,0x83,0xb9,0xe2,0x81,0x84,0xe1,0xa7,0xb9,0xe2,0x81,0x84,0xe2,0xa6,0xb8,0xe2,0x80,0x85,0xe2,0xa7,0x84,0xe2,0xa6,0x8f, Step #5: \000\000\000\030\342\203\271\342\201\204\341\247\271\342\201\204\342\246\270\342\200\205\342\247\204\342\246\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-42fd447ecad002bda97af61d955cc761f4aac797 Step #5: Base64: AAAAGOKDueKBhOGnueKBhOKmuOKAheKnhOKmjw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2538 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 667372438 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5600d081ed60, 0x5600d0a0771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5600d0a07720,0x5600d28912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/42fd447ecad002bda97af61d955cc761f4aac797' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3060 processed earlier; will process 7916 files now Step #5: #1 pulse cov: 12914 ft: 12915 exec/s: 0 rss: 190Mb Step #5: #2 pulse cov: 13648 ft: 14575 exec/s: 0 rss: 192Mb Step #5: ==91406== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600c73612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5600cd99c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5600cd97f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5600cd97f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5600c7367652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600c72c842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600c72c2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600c7359595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600ca3888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600ca3888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600ca3888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600ca3888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600ca3888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600ca3888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600ca3888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600ca3888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600ca3888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600ca3888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600cc58d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5600c92e9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600c92f45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600c909fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600c909fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600c90a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600c909f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600c909f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600c909f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5600cd98194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5600cd98a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5600cd972529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5600cd99cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7554e5b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600c72c143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x70,0x3e,0x73,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0xc,0x92,0x0,0x0,0x0,0x0,0x0, Step #5:

s\014\014\014\014\014\014\014\014\014\014\014\014\014\014\014\014\014\014\222\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-70a8912b8e760f7c59a606bd87da11b98f84d46e Step #5: Base64: PHA+cwwMDAwMDAwMDAwMDAwMDAwMDJIAAAAAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2539 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 667984578 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56250675cd60, 0x56250694571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562506945720,0x5625087cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/70a8912b8e760f7c59a606bd87da11b98f84d46e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3063 processed earlier; will process 7913 files now Step #5: ==91442== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5624fd29f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625038da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625038bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625038bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5624fd2a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5624fd20642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5624fd200c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5624fd297595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5625002c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5625002c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5625002c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5625002c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5625002c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5625002c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5625002c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5625002c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5625002c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5625002c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625024cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5624ff227578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5624ff2325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5624fefddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5624fefddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5624fefde808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5624fefdd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5624fefdd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5624fefdd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625038bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625038c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625038b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625038dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb279530082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5624fd1ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x9,0x2b,0xa,0xa,0x9,0xa,0x9,0x2b,0x9,0x2b,0xa,0x73,0x74,0x72,0x65,0x61,0x6d,0x9,0xd5,0x81,0x81,0x8b,0x7e,0x7e,0x7e,0xeb,0x7e, Step #5: +\011+\012\012\011\012\011+\011+\012stream\011\325\201\201\213~~~\353~ Step #5: artifact_prefix='./'; Test unit written to ./oom-91df885d213e44ac92c73d3cce1e95595cb19150 Step #5: Base64: KwkrCgoJCgkrCSsKc3RyZWFtCdWBgYt+fn7rfg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2540 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 668488788 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559c65c1ad60, 0x559c65e0371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559c65e03720,0x559c67c8d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/91df885d213e44ac92c73d3cce1e95595cb19150' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3064 processed earlier; will process 7912 files now Step #5: ==91478== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559c5c75d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559c62d98728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559c62d7b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559c62d7b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559c5c763652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559c5c6c442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559c5c6bec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559c5c755595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559c5f7848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559c5f7848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559c5f7848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559c5f7848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559c5f7848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559c5f7848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559c5f7848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559c5f7848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559c5f7848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559c5f7848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559c6198945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559c5e6e5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559c5e6f05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559c5e49bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559c5e49bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559c5e49c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559c5e49b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559c5e49b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559c5e49b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559c62d7d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559c62d867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559c62d6e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559c62d98fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd48f441082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559c5c6bd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x57,0x6b,0x73,0x42,0x57,0x6b,0x73,0x42,0x57,0x60,0x21,0x57,0x73,0x3a,0x57,0x60,0x21,0x57,0x60,0x21,0x57,0x6b,0x73,0x3a,0x57,0x60,0x21, Step #5: BWksBWksBW`!Ws:W`!W`!Wks:W`! Step #5: artifact_prefix='./'; Test unit written to ./oom-94a6105106f397c1d54e4211f616f65551218909 Step #5: Base64: Qldrc0JXa3NCV2AhV3M6V2AhV2AhV2tzOldgIQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2541 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 669110737 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5559a6941d60, 0x5559a6b2a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5559a6b2a720,0x5559a89b42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/94a6105106f397c1d54e4211f616f65551218909' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3065 processed earlier; will process 7911 files now Step #5: ==91514== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55599d4842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5559a3abf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5559a3aa246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5559a3aa238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55599d48a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55599d3eb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55599d3e5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55599d47c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5559a04ab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5559a04ab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5559a04ab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5559a04ab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5559a04ab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5559a04ab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5559a04ab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5559a04ab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5559a04ab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5559a04ab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5559a26b045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55599f40c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55599f4175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55599f1c2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55599f1c2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55599f1c3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55599f1c2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55599f1c2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55599f1c2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5559a3aa494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559a3aad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5559a3a95529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5559a3abffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4ad07e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55599d3e443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0xa,0x2b,0xa,0xa,0x2b,0xa,0x2b,0x63,0xa,0x2b,0xa,0x2b,0x56,0xa,0x56,0xa,0x2b,0x63,0xa,0x2b,0xa,0x2b,0x56,0xa,0x56,0xa,0x2b, Step #5: c\012+\012\012+\012+c\012+\012+V\012V\012+c\012+\012+V\012V\012+ Step #5: artifact_prefix='./'; Test unit written to ./oom-5e3315950651a2e6f698b711d11fb138bed442ab Step #5: Base64: YworCgorCitjCisKK1YKVgorYworCitWClYKKw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2542 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 669614203 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556e6a636d60, 0x556e6a81f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556e6a81f720,0x556e6c6a92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5e3315950651a2e6f698b711d11fb138bed442ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3066 processed earlier; will process 7910 files now Step #5: ==91550== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556e611792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556e677b4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556e6779746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556e6779738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556e6117f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556e610e042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556e610dac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556e61171595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556e641a08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556e641a08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556e641a08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556e641a08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556e641a08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556e641a08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556e641a08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556e641a08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556e641a08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556e641a08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556e663a545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556e63101578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556e6310c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556e62eb7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556e62eb7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556e62eb8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556e62eb7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556e62eb7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556e62eb7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556e6779994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556e677a27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556e6778a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556e677b4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1dbb7fc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556e610d943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0x5b,0x32,0x2e,0x9,0x32,0x2e,0x9,0xd,0x30,0x2e,0x9,0x39,0x2e,0x9,0xd,0x32,0x2e,0x9,0x34,0x2e,0x9, Step #5: trailer[2.\0112.\011\0150.\0119.\011\0152.\0114.\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-6ba1a753ef348da82fb1f369ffb4465ee3166495 Step #5: Base64: dHJhaWxlclsyLgkyLgkNMC4JOS4JDTIuCTQuCQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2543 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 670112372 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556e84171d60, 0x556e8435a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556e8435a720,0x556e861e42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ba1a753ef348da82fb1f369ffb4465ee3166495' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3067 processed earlier; will process 7909 files now Step #5: #1 pulse cov: 3649 ft: 3650 exec/s: 0 rss: 170Mb Step #5: ==91586== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556e7acb42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556e812ef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556e812d246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556e812d238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556e7acba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556e7ac1b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556e7ac15c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556e7acac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556e7dcdb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556e7dcdb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556e7dcdb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556e7dcdb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556e7dcdb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556e7dcdb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556e7dcdb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556e7dcdb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556e7dcdb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556e7dcdb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556e7fee045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556e7cc3c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556e7cc475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556e7c9f2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556e7c9f2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556e7c9f3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556e7c9f2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556e7c9f2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556e7c9f2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556e812d494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556e812dd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556e812c5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556e812effa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb001474082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556e7ac1443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x49,0x4c,0x45,0x20,0x27,0x20,0x42,0x49,0x4e,0x41,0x52,0x59,0xa,0x46,0x49,0x4c,0x45,0x20,0x27,0x20,0x42,0x49,0x4e,0x41,0x52,0x59,0xa, Step #5: FILE ' BINARY\012FILE ' BINARY\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-238cb311269bcb8a2d8f9dab4c433c2b16316945 Step #5: Base64: RklMRSAnIEJJTkFSWQpGSUxFICcgQklOQVJZCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2544 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 670649588 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c08cd25d60, 0x55c08cf0e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c08cf0e720,0x55c08ed982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/238cb311269bcb8a2d8f9dab4c433c2b16316945' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3069 processed earlier; will process 7907 files now Step #5: ==91622== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0838682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c089ea3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c089e8646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c089e8638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c08386e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c0837cf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c0837c9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c083860595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c08688f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c08688f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c08688f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c08688f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c08688f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c08688f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c08688f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c08688f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c08688f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c08688f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c088a9445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c0857f0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c0857fb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c0855a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c0855a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c0855a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c0855a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c0855a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c0855a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c089e8894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c089e917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c089e79529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c089ea3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcd41614082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c0837c843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x78,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5, Step #5: ws:x\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-beb4209ee4cd1d3f5c469161389e197fa72da8e4 Step #5: Base64: d3M6eOGsteGsteGsteGsteGsteGsteGsteGstQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2545 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 671146779 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563f77905d60, 0x563f77aee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563f77aee720,0x563f799782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/beb4209ee4cd1d3f5c469161389e197fa72da8e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3070 processed earlier; will process 7906 files now Step #5: #1 pulse cov: 13763 ft: 13764 exec/s: 0 rss: 192Mb Step #5: ==91658== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563f6e4482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563f74a83728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563f74a6646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563f74a6638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563f6e44e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563f6e3af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563f6e3a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563f6e440595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563f7146f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563f7146f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563f7146f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563f7146f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563f7146f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563f7146f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563f7146f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563f7146f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563f7146f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563f7146f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563f7367445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563f703d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563f703db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563f70186d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563f70186d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563f70187808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563f70186944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563f70186944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563f70186944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563f74a6894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563f74a717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563f74a59529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563f74a83fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f96e1626082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563f6e3a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x18,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0x7a,0x3a,0xa,0x20,0x20,0xce,0x90,0xd1,0x8c,0xca,0x88,0xcd,0x9b,0x21,0x6e,0x61,0x3a, Step #5: \000\000\000\030jobs:\012 z:\012 \316\220\321\214\312\210\315\233!na: Step #5: artifact_prefix='./'; Test unit written to ./oom-227a943a14bf2dd754352cf0cbf6589de8ac8c4c Step #5: Base64: AAAAGGpvYnM6CiB6OgogIM6Q0YzKiM2bIW5hOg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2546 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 671726979 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bfb8c98d60, 0x55bfb8e8171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bfb8e81720,0x55bfbad0b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/227a943a14bf2dd754352cf0cbf6589de8ac8c4c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3072 processed earlier; will process 7904 files now Step #5: ==91694== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bfaf7db2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bfb5e16728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bfb5df946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bfb5df938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bfaf7e1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bfaf74242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bfaf73cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bfaf7d3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bfb28028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bfb28028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bfb28028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bfb28028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bfb28028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bfb28028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bfb28028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bfb28028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bfb28028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bfb28028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bfb4a0745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bfb1763578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bfb176e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bfb1519d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bfb1519d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bfb151a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bfb1519944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bfb1519944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bfb1519944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bfb5dfb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bfb5e047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bfb5dec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bfb5e16fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27bb1de082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bfaf73b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x26,0x37,0x9,0x5b,0x26,0x38,0x9,0x2e,0x32,0x35,0xde,0xa4,0x2c,0x2a,0x38,0x2c,0x2a,0x38,0x5d,0x2c,0x2a,0x37,0x2c,0x2a,0x37,0x5d,0x2c, Step #5: [&7\011[&8\011.25\336\244,*8,*8],*7,*7], Step #5: artifact_prefix='./'; Test unit written to ./oom-a4e283d833bd01827a6499b60f76f97526b26aad Step #5: Base64: WyY3CVsmOAkuMjXepCwqOCwqOF0sKjcsKjddLA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2547 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 672231054 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56393730ad60, 0x5639374f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5639374f3720,0x56393937d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a4e283d833bd01827a6499b60f76f97526b26aad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3073 processed earlier; will process 7903 files now Step #5: ==91730== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56392de4d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563934488728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56393446b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56393446b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56392de53652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56392ddb442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56392ddaec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56392de45595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563930e748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563930e748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563930e748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563930e748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563930e748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563930e748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563930e748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563930e748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563930e748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563930e748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56393307945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56392fdd5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56392fde05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56392fb8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56392fb8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56392fb8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56392fb8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56392fb8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56392fb8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56393446d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5639344767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56393445e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563934488fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ce8614082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56392ddad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0x8a,0x2d,0x2d,0xbf,0x39,0x3f,0x5c,0x97,0x80,0xdf,0xdb,0x9c,0x5c,0x97,0x80,0xdf,0xdb,0x9c,0xa1,0x81,0xa4,0x1a,0x3a,0xdf,0xdb,0x73, Step #5: \343\200\212--\2779?\\\227\200\337\333\234\\\227\200\337\333\234\241\201\244\032:\337\333s Step #5: artifact_prefix='./'; Test unit written to ./oom-2fa892c74ac5d64b7db6ec1de1e2416340a604a3 Step #5: Base64: 44CKLS2/OT9cl4Df25xcl4Df25yhgaQaOt/bcw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2548 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 672729067 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d6c43ecd60, 0x55d6c45d571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d6c45d5720,0x55d6c645f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2fa892c74ac5d64b7db6ec1de1e2416340a604a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3074 processed earlier; will process 7902 files now Step #5: ==91766== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d6baf2f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d6c156a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d6c154d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d6c154d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d6baf35652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d6bae9642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d6bae90c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d6baf27595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d6bdf568c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d6bdf568c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d6bdf568c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d6bdf568c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d6bdf568c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d6bdf568c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d6bdf568c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d6bdf568c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d6bdf568c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d6bdf568c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d6c015b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d6bceb7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d6bcec25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d6bcc6dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d6bcc6dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d6bcc6e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d6bcc6d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d6bcc6d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d6bcc6d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d6c154f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d6c15587b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d6c1540529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d6c156afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8819376082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d6bae8f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0x21,0xcd,0x81,0x2a,0xcd,0x81,0x21,0xcd,0x81,0x2a,0xcd,0x81,0x21,0xcd,0x81,0x2a,0xcd,0x81,0x21,0xcd,0x81,0x2a,0xcd,0x81, Step #5: \016ws:!\315\201*\315\201!\315\201*\315\201!\315\201*\315\201!\315\201*\315\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-67cff63e9eb8b859c856d679ca59ef1f4d712b39 Step #5: Base64: DndzOiHNgSrNgSHNgSrNgSHNgSrNgSHNgSrNgQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2549 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 673239802 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581e4072d60, 0x5581e425b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581e425b720,0x5581e60e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/67cff63e9eb8b859c856d679ca59ef1f4d712b39' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3075 processed earlier; will process 7901 files now Step #5: #1 pulse cov: 4091 ft: 4092 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 4569 ft: 4727 exec/s: 0 rss: 173Mb Step #5: ==91802== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581dabb52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581e11f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581e11d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581e11d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581dabbb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581dab1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581dab16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581dabad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581ddbdc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581ddbdc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581ddbdc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581ddbdc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581ddbdc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581ddbdc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581ddbdc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581ddbdc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581ddbdc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581ddbdc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581dfde145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581dcb3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581dcb485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581dc8f3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581dc8f3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581dc8f4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581dc8f3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581dc8f3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581dc8f3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581e11d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581e11de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581e11c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581e11f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa4c065e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581dab1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x1,0x0,0x0,0x0,0x1,0x0,0x21,0x57,0x0,0x0,0x2,0x61,0x76,0x61,0x72,0x0,0x0,0x0,0x22,0x0,0x0,0x0,0xa,0xdc,0xb2,0xff,0xda,0xdc, Step #5: \000\001\000\000\000\001\000!W\000\000\002avar\000\000\000\"\000\000\000\012\334\262\377\332\334 Step #5: artifact_prefix='./'; Test unit written to ./oom-19f7b4d67ecf549b05ccdee378f567ee47c3c82a Step #5: Base64: AAEAAAABACFXAAACYXZhcgAAACIAAAAK3LL/2tw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2550 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 673815020 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d600367d60, 0x55d60055071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d600550720,0x55d6023da2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/19f7b4d67ecf549b05ccdee378f567ee47c3c82a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3078 processed earlier; will process 7898 files now Step #5: #1 pulse cov: 3829 ft: 3830 exec/s: 0 rss: 169Mb Step #5: ==91838== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d5f6eaa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d5fd4e5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d5fd4c846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d5fd4c838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d5f6eb0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d5f6e1142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d5f6e0bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d5f6ea2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d5f9ed18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d5f9ed18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d5f9ed18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d5f9ed18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d5f9ed18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d5f9ed18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d5f9ed18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d5f9ed18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d5f9ed18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d5f9ed18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d5fc0d645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d5f8e32578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d5f8e3d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d5f8be8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d5f8be8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d5f8be9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d5f8be8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d5f8be8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d5f8be8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d5fd4ca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d5fd4d37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d5fd4bb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d5fd4e5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd8b446f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d5f6e0a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x60,0x8,0x2,0x33,0x3f,0x0,0x0,0x0,0x0,0x0,0x73,0x6f,0x75,0x72,0x63,0x65,0x0,0x44,0x5d,0xc,0xa,0x1,0x4d,0x60,0x49,0xfb,0x9, Step #5: ID`\010\0023?\000\000\000\000\000source\000D]\014\012\001M`I\373\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-eeefb3def52d074d692908c8c8c20dc6dc5fab24 Step #5: Base64: SURgCAIzPwAAAAAAc291cmNlAERdDAoBTWBJ+wk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2551 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 674478018 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5565db10ed60, 0x5565db2f771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5565db2f7720,0x5565dd1812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eeefb3def52d074d692908c8c8c20dc6dc5fab24' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3080 processed earlier; will process 7896 files now Step #5: #1 pulse cov: 11682 ft: 11683 exec/s: 0 rss: 190Mb Step #5: ==91874== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5565d1c512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5565d828c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5565d826f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5565d826f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5565d1c57652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5565d1bb842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5565d1bb2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5565d1c49595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5565d4c788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5565d4c788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5565d4c788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5565d4c788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5565d4c788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5565d4c788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5565d4c788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5565d4c788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5565d4c788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5565d4c788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5565d6e7d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5565d3bd9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5565d3be45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5565d398fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5565d398fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5565d3990808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5565d398f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5565d398f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5565d398f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5565d827194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5565d827a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5565d8262529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5565d828cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f554443a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5565d1bb143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0xd6,0x93,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0xd6,0x93,0x0,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: x----BEGIN\326\223---BEGIN\326\223\000\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-6a0014478a5020cf463f65b3860389af4463f050 Step #5: Base64: eC0tLS1CRUdJTtaTLS0tQkVHSU7WkwAAAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2552 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 675053930 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b800c52d60, 0x55b800e3b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b800e3b720,0x55b802cc52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6a0014478a5020cf463f65b3860389af4463f050' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3082 processed earlier; will process 7894 files now Step #5: ==91910== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7f77952d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7fddd0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7fddb346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7fddb338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7f779b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7f76fc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7f76f6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7f778d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7fa7bc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7fa7bc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7fa7bc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7fa7bc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7fa7bc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7fa7bc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7fa7bc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7fa7bc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7fa7bc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7fa7bc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7fc9c145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7f971d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7f97285a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7f94d3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7f94d3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7f94d4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7f94d3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7f94d3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7f94d3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7fddb594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7fddbe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7fdda6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7fddd0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd633d08082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7f76f543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7c,0x7d,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0xf3,0xa0,0x81,0xa9,0x7c,0x7c,0x7c,0x24,0xf3,0xa0,0x81,0xa9,0x7c,0x68,0x24,0x29,0x7c,0x29,0x7c, Step #5: $|}$||$||$\363\240\201\251|||$\363\240\201\251|h$)|)| Step #5: artifact_prefix='./'; Test unit written to ./oom-c15fe9f8bd4d10f3720ec1bdf1122505c82e0a30 Step #5: Base64: JHx9JHx8JHx8JPOggal8fHwk86CBqXxoJCl8KXw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2553 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 675554160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561431995d60, 0x561431b7e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561431b7e720,0x561433a082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c15fe9f8bd4d10f3720ec1bdf1122505c82e0a30' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3083 processed earlier; will process 7893 files now Step #5: ==91946== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614284d82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56142eb13728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56142eaf646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56142eaf638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614284de652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56142843f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561428439c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614284d0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56142b4ff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56142b4ff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56142b4ff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56142b4ff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56142b4ff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56142b4ff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56142b4ff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56142b4ff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56142b4ff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56142b4ff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56142d70445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56142a460578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56142a46b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56142a216d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56142a216d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56142a217808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56142a216944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56142a216944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56142a216944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56142eaf894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56142eb017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56142eae9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56142eb13fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f483e3da082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56142843843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x8,0x1,0x7,0x2e,0x2b,0x42,0xdb,0xbe,0xdb,0xbe,0x2b,0x2f,0x76,0x2f,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x24,0x6e,0x24,0x3,0x3,0x52, Step #5: - \010\001\007.+B\333\276\333\276+/v/+++++++$n$\003\003R Step #5: artifact_prefix='./'; Test unit written to ./oom-74002f8224f4d46bae359c14fe64562d6e956a21 Step #5: Base64: LSAIAQcuK0Lbvtu+Ky92LysrKysrKyskbiQDA1I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2554 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 676064047 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca8ef56d60, 0x55ca8f13f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca8f13f720,0x55ca90fc92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/74002f8224f4d46bae359c14fe64562d6e956a21' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3084 processed earlier; will process 7892 files now Step #5: ==91982== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca85a992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca8c0d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca8c0b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca8c0b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca85a9f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca85a0042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca859fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca85a91595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca88ac08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca88ac08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca88ac08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca88ac08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca88ac08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca88ac08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca88ac08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca88ac08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca88ac08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca88ac08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca8acc545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca87a21578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca87a2c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca877d7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca877d7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca877d8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca877d7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca877d7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca877d7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca8c0b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca8c0c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca8c0aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca8c0d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbced67c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca859f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x23,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0x32,0x39,0x35,0x1b,0x50,0x52,0x49,0x56,0x0,0x42,0x8,0x1,0x53,0x58,0x8d,0x9,0xfa, Step #5: ID3\003#4294967295\033PRIV\000B\010\001SX\215\011\372 Step #5: artifact_prefix='./'; Test unit written to ./oom-469d24ef1aebe646d5a436a6ecc10f636d1e8d79 Step #5: Base64: SUQzAyM0Mjk0OTY3Mjk1G1BSSVYAQggBU1iNCfo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2555 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 676566908 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564c8b074d60, 0x564c8b25d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564c8b25d720,0x564c8d0e72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/469d24ef1aebe646d5a436a6ecc10f636d1e8d79' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3085 processed earlier; will process 7891 files now Step #5: ==92018== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564c81bb72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564c881f2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564c881d546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564c881d538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564c81bbd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564c81b1e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564c81b18c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564c81baf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564c84bde8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564c84bde8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564c84bde8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564c84bde8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564c84bde8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564c84bde8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564c84bde8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564c84bde8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564c84bde8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564c84bde8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564c86de345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564c83b3f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564c83b4a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564c838f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564c838f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564c838f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564c838f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564c838f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564c838f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564c881d794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564c881e07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564c881c8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564c881f2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f216af60082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564c81b1743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x3f,0x5b,0xf0,0x9d,0x85,0xa0,0xf0,0x9d,0x85,0xa0,0xf0,0x9d,0x85,0xa0,0xf0,0x9d,0xa0,0x85,0xf0,0x9d,0x85,0xa0,0xf0,0x9d,0x85,0xa9,0x5d,0x5d, Step #5: [?[\360\235\205\240\360\235\205\240\360\235\205\240\360\235\240\205\360\235\205\240\360\235\205\251]] Step #5: artifact_prefix='./'; Test unit written to ./oom-a414a10bb8a5c7a75d815a28311d01a85b739b8e Step #5: Base64: Wz9b8J2FoPCdhaDwnYWg8J2ghfCdhaDwnYWpXV0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2556 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 677068165 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b634fe5d60, 0x55b6351ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b6351ce720,0x55b6370582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a414a10bb8a5c7a75d815a28311d01a85b739b8e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3086 processed earlier; will process 7890 files now Step #5: ==92054== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b62bb282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b632163728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b63214646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b63214638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b62bb2e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b62ba8f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b62ba89c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b62bb20595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b62eb4f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b62eb4f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b62eb4f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b62eb4f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b62eb4f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b62eb4f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b62eb4f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b62eb4f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b62eb4f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b62eb4f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b630d5445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b62dab0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b62dabb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b62d866d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b62d866d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b62d867808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b62d866944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b62d866944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b62d866944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b63214894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b6321517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b632139529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b632163fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb6f171c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b62ba8843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x11,0x11,0x79,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x34, Step #5: ID3\002\021\021y\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\0004 Step #5: artifact_prefix='./'; Test unit written to ./oom-965678a42406047aff7e1f9af2481c7b76c4ad53 Step #5: Base64: SUQzAhEReQAAAAAAAAAAAAAAAAAAAAAAAAAAADQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2557 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 677576061 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c86ad90d60, 0x55c86af7971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c86af79720,0x55c86ce032c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/965678a42406047aff7e1f9af2481c7b76c4ad53' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3087 processed earlier; will process 7889 files now Step #5: ==92090== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c8618d32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c867f0e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c867ef146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c867ef138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c8618d9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c86183a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c861834c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c8618cb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c8648fa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c8648fa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c8648fa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c8648fa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c8648fa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c8648fa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c8648fa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c8648fa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c8648fa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c8648fa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c866aff45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c86385b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c8638665a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c863611d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c863611d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c863612808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c863611944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c863611944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c863611944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c867ef394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c867efc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c867ee4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c867f0efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f33a49b5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c86183343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0x5b,0x0,0x2d,0xf2,0x85,0x85,0x93,0x0,0x2d,0xf2,0x81,0x92,0x96,0x0,0x2d,0xf2,0x85,0x85,0x93,0x0,0x2d,0xf2,0x85,0x86,0x93, Step #5: (?i)[\000-\362\205\205\223\000-\362\201\222\226\000-\362\205\205\223\000-\362\205\206\223 Step #5: artifact_prefix='./'; Test unit written to ./oom-1c53bf44d54790c33e22d8a30eb7bd9e0418fff9 Step #5: Base64: KD9pKVsALfKFhZMALfKBkpYALfKFhZMALfKFhpM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2558 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 678074411 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c2f498bd60, 0x55c2f4b7471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c2f4b74720,0x55c2f69fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1c53bf44d54790c33e22d8a30eb7bd9e0418fff9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3088 processed earlier; will process 7888 files now Step #5: ==92126== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c2eb4ce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c2f1b09728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c2f1aec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c2f1aec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c2eb4d4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c2eb43542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c2eb42fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c2eb4c6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c2ee4f58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c2ee4f58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c2ee4f58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c2ee4f58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c2ee4f58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c2ee4f58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c2ee4f58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c2ee4f58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c2ee4f58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c2ee4f58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c2f06fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c2ed456578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c2ed4615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c2ed20cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c2ed20cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c2ed20d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c2ed20c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c2ed20c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c2ed20c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c2f1aee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c2f1af77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c2f1adf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c2f1b09fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f504f18f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c2eb42e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0xa,0x3d,0xcc,0xbb,0x41,0x2d,0x2d,0x2d,0x41,0x73,0x63,0x65,0xa,0x2d,0x3f,0x41,0x73,0x63,0x65,0x7a,0x74,0x7a,0x74,0x20,0x6a,0x2d,0x2d,0x2d, Step #5: 0\012=\314\273A---Asce\012-?Asceztzt j--- Step #5: artifact_prefix='./'; Test unit written to ./oom-d2d3fddb12b5135dec5d35c9770e8f6a26f8e843 Step #5: Base64: MAo9zLtBLS0tQXNjZQotP0FzY2V6dHp0IGotLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2559 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 678573735 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563c59430d60, 0x563c5961971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563c59619720,0x563c5b4a32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d2d3fddb12b5135dec5d35c9770e8f6a26f8e843' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3089 processed earlier; will process 7887 files now Step #5: #1 pulse cov: 3688 ft: 3689 exec/s: 0 rss: 173Mb Step #5: ==92162== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563c4ff732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563c565ae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563c5659146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563c5659138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563c4ff79652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563c4feda42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563c4fed4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563c4ff6b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563c52f9a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563c52f9a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563c52f9a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563c52f9a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563c52f9a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563c52f9a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563c52f9a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563c52f9a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563c52f9a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563c52f9a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563c5519f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563c51efb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563c51f065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563c51cb1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563c51cb1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563c51cb2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563c51cb1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563c51cb1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563c51cb1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563c5659394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563c5659c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563c56584529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563c565aefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc3ca1fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563c4fed343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0x9,0x72,0x6f,0x2f,0x2d,0xa,0x2d,0xa,0x9,0x72,0x6f,0x2f,0x2d,0xa,0x2d,0xa,0xa,0x2d,0xa,0x2d,0xa,0xa,0x2d,0xa,0x3d,0x8,0x2e, Step #5: -\012\011ro/-\012-\012\011ro/-\012-\012\012-\012-\012\012-\012=\010. Step #5: artifact_prefix='./'; Test unit written to ./oom-bd13273ce0efde37c730c9d1286a5cca7fcad2f1 Step #5: Base64: LQoJcm8vLQotCglyby8tCi0KCi0KLQoKLQo9CC4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2560 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 679124572 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5644d5781d60, 0x5644d596a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5644d596a720,0x5644d77f42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bd13273ce0efde37c730c9d1286a5cca7fcad2f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3091 processed earlier; will process 7885 files now Step #5: ==92198== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5644cc2c42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5644d28ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5644d28e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5644d28e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5644cc2ca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5644cc22b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5644cc225c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5644cc2bc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5644cf2eb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5644cf2eb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5644cf2eb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5644cf2eb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5644cf2eb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5644cf2eb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5644cf2eb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5644cf2eb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5644cf2eb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5644cf2eb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5644d14f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5644ce24c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5644ce2575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5644ce002d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5644ce002d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5644ce003808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5644ce002944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5644ce002944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5644ce002944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5644d28e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5644d28ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5644d28d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5644d28fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3c835a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5644cc22443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x45,0x3e,0x26,0x23,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x37,0x33,0x38,0x3b, Step #5: ˢ Step #5: artifact_prefix='./'; Test unit written to ./oom-0c7c19d5b08b4e921788edeb7beb25763c9f8d00 Step #5: Base64: PEU+JiMwMDAwMDAwMDAwMDAwMDAwMDAwMDczODs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2561 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 679630232 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b6fb53bd60, 0x55b6fb72471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b6fb724720,0x55b6fd5ae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0c7c19d5b08b4e921788edeb7beb25763c9f8d00' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3092 processed earlier; will process 7884 files now Step #5: ==92234== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b6f207e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b6f86b9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b6f869c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b6f869c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b6f2084652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b6f1fe542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b6f1fdfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b6f2076595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b6f50a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b6f50a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b6f50a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b6f50a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b6f50a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b6f50a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b6f50a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b6f50a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b6f50a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b6f50a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b6f72aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b6f4006578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b6f40115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b6f3dbcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b6f3dbcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b6f3dbd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b6f3dbc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b6f3dbc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b6f3dbc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b6f869e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b6f86a77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b6f868f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b6f86b9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8c5dacc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b6f1fde43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x54,0x45,0x53,0x54,0x76,0x31,0xb,0x64,0x3a,0x30,0x78,0x37,0x65,0x38,0x37,0x32,0x39,0x36,0x34,0x50,0x2d,0x31,0x30,0x35,0x33, Step #5: FUZZTESTv1\013d:0x7e872964P-1053 Step #5: artifact_prefix='./'; Test unit written to ./oom-91b2d3db3f35f0aa0ee5acda9ce89538b5b1f1a9 Step #5: Base64: RlVaWlRFU1R2MQtkOjB4N2U4NzI5NjRQLTEwNTM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2562 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 680128483 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561acad4cd60, 0x561acaf3571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561acaf35720,0x561accdbf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/91b2d3db3f35f0aa0ee5acda9ce89538b5b1f1a9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3093 processed earlier; will process 7883 files now Step #5: ==92270== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561ac188f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ac7eca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ac7ead46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ac7ead38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561ac1895652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561ac17f642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561ac17f0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561ac1887595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ac48b68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ac48b68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ac48b68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ac48b68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ac48b68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ac48b68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ac48b68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ac48b68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ac48b68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ac48b68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ac6abb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ac3817578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ac38225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ac35cdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ac35cdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ac35ce808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ac35cd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ac35cd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ac35cd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ac7eaf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ac7eb87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ac7ea0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ac7ecafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f834f1ae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561ac17ef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1f,0x1f,0x1f,0x1f,0x1f,0x1f,0x1f,0x20,0x1f,0x1f,0xf,0x1f,0x1f,0x24,0x1f,0x1f,0x1f,0x1f,0x24,0x1b,0x1f,0x1f,0x64,0x1,0x0,0x0,0x0,0x0,0x0, Step #5: \037\037\037\037\037\037\037 \037\037\017\037\037$\037\037\037\037$\033\037\037d\001\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-789f2fd619cf263bd04daba72a1e94300edd0389 Step #5: Base64: Hx8fHx8fHyAfHw8fHyQfHx8fJBsfH2QBAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2563 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 680626846 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561b47f40d60, 0x561b4812971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561b48129720,0x561b49fb32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/789f2fd619cf263bd04daba72a1e94300edd0389' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3094 processed earlier; will process 7882 files now Step #5: ==92306== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561b3ea832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561b450be728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561b450a146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561b450a138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561b3ea89652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561b3e9ea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561b3e9e4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561b3ea7b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561b41aaa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561b41aaa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561b41aaa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561b41aaa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561b41aaa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561b41aaa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561b41aaa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561b41aaa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561b41aaa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561b41aaa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561b43caf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561b40a0b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561b40a165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561b407c1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561b407c1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561b407c2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561b407c1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561b407c1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561b407c1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561b450a394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561b450ac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561b45094529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561b450befa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcd7bfdf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561b3e9e343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x7c,0x0,0x1b,0x2e,0x64,0x64,0x55,0x53,0x4c,0x54,0x0,0x0,0x0,0x42,0x0,0x8,0x78,0xda,0x8d,0x0,0xf3,0xa0,0x81,0x97,0x44, Step #5: ID3\003|\000\033.ddUSLT\000\000\000B\000\010x\332\215\000\363\240\201\227D Step #5: artifact_prefix='./'; Test unit written to ./oom-2cde5ccd93b7c812f61ad52a761f02ae46b1fe16 Step #5: Base64: SUQzA3wAGy5kZFVTTFQAAABCAAh42o0A86CBl0Q= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2564 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 681119775 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f2e185d60, 0x557f2e36e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f2e36e720,0x557f301f82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2cde5ccd93b7c812f61ad52a761f02ae46b1fe16' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3095 processed earlier; will process 7881 files now Step #5: ==92342== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f24cc82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f2b303728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f2b2e646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f2b2e638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f24cce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f24c2f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f24c29c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f24cc0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f27cef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f27cef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f27cef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f27cef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f27cef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f27cef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f27cef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f27cef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f27cef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f27cef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f29ef445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f26c50578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f26c5b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f26a06d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f26a06d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f26a07808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f26a06944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f26a06944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f26a06944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f2b2e894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f2b2f17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f2b2d9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f2b303fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa8f13ed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f24c2843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xbe,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: \341\276\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-2d3777bb0cba1aa40b0292eecab0bdf52c0e88c5 Step #5: Base64: 4b6EzYTNhM2EzYTNhM2EzYTNhM2EzYTNhM2EzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2565 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 681617020 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a81f60ad60, 0x55a81f7f371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a81f7f3720,0x55a82167d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d3777bb0cba1aa40b0292eecab0bdf52c0e88c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3096 processed earlier; will process 7880 files now Step #5: ==92378== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a81614d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a81c788728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a81c76b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a81c76b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a816153652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a8160b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a8160aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a816145595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8191748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8191748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8191748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8191748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8191748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8191748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8191748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8191748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8191748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8191748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a81b37945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8180d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8180e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a817e8bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a817e8bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a817e8c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a817e8b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a817e8b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a817e8b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a81c76d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a81c7767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a81c75e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a81c788fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdd58608082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a8160ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0xcd,0x91,0xcd,0x81,0xcd,0xa1,0xcd,0x81,0xcd,0xae,0xcd,0x81,0xcd,0xa1,0xcd,0xa1,0xcd,0xae,0xcd,0x81,0xcd,0xa1,0xcd,0x81,0xcd,0xae,0xcd,0x81, Step #5: M\315\221\315\201\315\241\315\201\315\256\315\201\315\241\315\241\315\256\315\201\315\241\315\201\315\256\315\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-ebee327d3ebbcd5dac95717d879202eb6a9e7c2a Step #5: Base64: Tc2RzYHNoc2Bza7Ngc2hzaHNrs2BzaHNgc2uzYE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2566 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 682112945 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5634cdd06d60, 0x5634cdeef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5634cdeef720,0x5634cfd792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ebee327d3ebbcd5dac95717d879202eb6a9e7c2a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3097 processed earlier; will process 7879 files now Step #5: ==92414== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634c48492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5634cae84728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5634cae6746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5634cae6738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5634c484f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5634c47b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5634c47aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5634c4841595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634c78708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634c78708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634c78708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634c78708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634c78708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634c78708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634c78708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634c78708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634c78708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634c78708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5634c9a7545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5634c67d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634c67dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5634c6587d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5634c6587d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5634c6588808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5634c6587944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5634c6587944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5634c6587944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5634cae6994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5634cae727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5634cae5a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5634cae84fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f19c161f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5634c47a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0x6c,0xe1,0x80,0xb9,0xe2,0x80,0x8c,0xe1,0x80,0xb9,0xe2,0x80,0x8c,0xe1,0x80,0xb9,0xe2,0x80,0x8c,0xe1,0x80,0xb9,0xe2,0x80,0x8c, Step #5: \016ws:l\341\200\271\342\200\214\341\200\271\342\200\214\341\200\271\342\200\214\341\200\271\342\200\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-07d0de7eef1185f72addbb1efa1f52322e4f7a0f Step #5: Base64: DndzOmzhgLnigIzhgLnigIzhgLnigIzhgLnigIw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2567 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 682620683 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c3b8f05d60, 0x55c3b90ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c3b90ee720,0x55c3baf782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/07d0de7eef1185f72addbb1efa1f52322e4f7a0f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3098 processed earlier; will process 7878 files now Step #5: ==92450== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c3afa482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c3b6083728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c3b606646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c3b606638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c3afa4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c3af9af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c3af9a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c3afa40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c3b2a6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c3b2a6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c3b2a6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c3b2a6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c3b2a6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c3b2a6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c3b2a6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c3b2a6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c3b2a6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c3b2a6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c3b4c7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c3b19d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c3b19db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c3b1786d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c3b1786d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c3b1787808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c3b1786944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c3b1786944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c3b1786944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c3b606894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c3b60717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c3b6059529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c3b6083fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8d70344082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c3af9a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x70,0x77,0x77,0x77,0x77,0x77,0x68,0x65,0x61,0x64,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x77,0x67,0x73,0x74, Step #5: pwwwwwheadwwwwwwwwwwwwwwwwgst Step #5: artifact_prefix='./'; Test unit written to ./oom-342168b0bbd40306619f93330e87e68c382ec69e Step #5: Base64: cHd3d3d3aGVhZHd3d3d3d3d3d3d3d3d3d3dnc3Q= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2568 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 683129980 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a1b5cd9d60, 0x55a1b5ec271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a1b5ec2720,0x55a1b7d4c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/342168b0bbd40306619f93330e87e68c382ec69e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3099 processed earlier; will process 7877 files now Step #5: ==92486== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a1ac81c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a1b2e57728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a1b2e3a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a1b2e3a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a1ac822652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1ac78342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1ac77dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a1ac814595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1af8438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1af8438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1af8438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1af8438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1af8438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1af8438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1af8438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1af8438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1af8438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1af8438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a1b1a4845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a1ae7a4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a1ae7af5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a1ae55ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a1ae55ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a1ae55b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a1ae55a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a1ae55a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a1ae55a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a1b2e3c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a1b2e457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a1b2e2d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a1b2e57fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fafe908e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1ac77c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0x72,0x3e,0x5b,0xa,0xa,0xa,0xa,0xa,0x3c,0x21,0x45,0x4c,0x45,0x4d,0x45,0x5d,0x3e,0x3c,0x2f,0x2d, Step #5: [\012\012\012\012\012 Step #5: Step #5: #0 0x558ccc0b92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558cd26f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558cd26d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558cd26d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ccc0bf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ccc02042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ccc01ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ccc0b1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ccf0e08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ccf0e08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ccf0e08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ccf0e08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ccf0e08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ccf0e08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ccf0e08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ccf0e08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ccf0e08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ccf0e08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558cd12e545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558cce041578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558cce04c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558ccddf7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558ccddf7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558ccddf8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558ccddf7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558ccddf7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558ccddf7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558cd26d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558cd26e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558cd26ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558cd26f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4b49c19082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ccc01943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x50,0x3e,0x3c,0x39,0x32,0x32,0x33,0x32,0x30,0x33,0x36,0x38,0x35,0x34,0x37,0x37,0x35,0x30,0x32,0x3e,0xca,0x5c,0x72,0x63,0x65,0x3e,0x3c,0x66, Step #5:

<9223203685477502>\312\\rce> Step #5: Step #5: #0 0x5627a7f962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5627ae5d1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5627ae5b446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5627ae5b438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5627a7f9c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5627a7efd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5627a7ef7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5627a7f8e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5627aafbd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5627aafbd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5627aafbd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5627aafbd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5627aafbd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5627aafbd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5627aafbd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5627aafbd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5627aafbd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5627aafbd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5627ad1c245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5627a9f1e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5627a9f295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5627a9cd4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5627a9cd4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5627a9cd5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5627a9cd4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5627a9cd4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5627a9cd4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5627ae5b694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5627ae5bf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5627ae5a7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5627ae5d1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5816af5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5627a7ef643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x24,0x36,0x3a,0x5b,0x7b,0x24,0x34,0x3a,0x22,0x5c,0x55,0x64,0x46,0x46,0x64,0x64,0x46,0x37,0x44,0x22,0x7d,0x5d,0x7d,0x24, Step #5: $3::{$6:[{$4:\"\\UdFFddF7D\"}]}$ Step #5: artifact_prefix='./'; Test unit written to ./oom-589cdb1a06373c5d3da37555cde8809ccc97509d Step #5: Base64: JDM6OnskNjpbeyQ0OiJcVWRGRmRkRjdEIn1dfSQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2571 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 684713840 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ef1864cd60, 0x55ef1883571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ef18835720,0x55ef1a6bf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/589cdb1a06373c5d3da37555cde8809ccc97509d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3103 processed earlier; will process 7873 files now Step #5: #1 pulse cov: 11690 ft: 11691 exec/s: 0 rss: 190Mb Step #5: ==92594== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ef0f18f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ef157ca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ef157ad46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ef157ad38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ef0f195652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ef0f0f642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ef0f0f0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ef0f187595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ef121b68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ef121b68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ef121b68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ef121b68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ef121b68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ef121b68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ef121b68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ef121b68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ef121b68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ef121b68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ef143bb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ef11117578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ef111225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ef10ecdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ef10ecdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ef10ece808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ef10ecd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ef10ecd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ef10ecd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ef157af94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ef157b87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ef157a0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ef157cafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5f5aef0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ef0f0ef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x5,0x0,0x6f,0x70,0x74,0x69,0x6f,0x6e,0x73,0x7b,0x6f,0x75,0x74,0x70,0x75,0x74,0x0,0x41,0x53,0x54,0x3c,0x46,0x2d,0x3e,0x26,0x67,0x2b,0x54, Step #5: d\005\000options{output\000AST&g+T Step #5: artifact_prefix='./'; Test unit written to ./oom-c522208c549b8f334fdf856bf7adfc904e2ee4a2 Step #5: Base64: ZAUAb3B0aW9uc3tvdXRwdXQAQVNUPEYtPiZnK1Q= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2572 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 685295543 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5570273ead60, 0x5570275d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5570275d3720,0x55702945d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c522208c549b8f334fdf856bf7adfc904e2ee4a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3105 processed earlier; will process 7871 files now Step #5: #1 pulse cov: 3518 ft: 3519 exec/s: 0 rss: 169Mb Step #5: ==92630== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55701df2d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557024568728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55702454b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55702454b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55701df33652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55701de9442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55701de8ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55701df25595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557020f548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557020f548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557020f548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557020f548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557020f548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557020f548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557020f548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557020f548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557020f548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557020f548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55702315945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55701feb5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55701fec05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55701fc6bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55701fc6bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55701fc6c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55701fc6b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55701fc6b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55701fc6b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55702454d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5570245567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55702453e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557024568fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcba7688082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55701de8d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xe1,0xa6,0xa6,0xe1,0xa6,0x9d,0x2d,0x39,0x32,0x32,0x68,0x6f,0x73,0x74,0x49,0x3d,0x33,0xe1,0xa6,0xa6,0x70,0x72,0x6f,0x63,0x65,0x73,0x73,0x22, Step #5: \"\341\246\246\341\246\235-922hostI=3\341\246\246process\" Step #5: artifact_prefix='./'; Test unit written to ./oom-38c245c0be6ee4cb4dd6d1bcd9f6a75af60961f5 Step #5: Base64: IuGmpuGmnS05MjJob3N0ST0z4aamcHJvY2VzcyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2573 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 685841454 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5586506a0d60, 0x55865088971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558650889720,0x5586527132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/38c245c0be6ee4cb4dd6d1bcd9f6a75af60961f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3107 processed earlier; will process 7869 files now Step #5: ==92666== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5586471e32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55864d81e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55864d80146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55864d80138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5586471e9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55864714a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558647144c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5586471db595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55864a20a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55864a20a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55864a20a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55864a20a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55864a20a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55864a20a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55864a20a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55864a20a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55864a20a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55864a20a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55864c40f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55864916b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5586491765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558648f21d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558648f21d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558648f22808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558648f21944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558648f21944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558648f21944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55864d80394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55864d80c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55864d7f4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55864d81efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6d47792082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55864714343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x67,0x6c,0x79,0x72,0x5c,0x6e,0x22,0x78,0x63,0x66,0x66,0x67,0x7f,0x6c,0x79,0x67,0x7f,0x6d,0x67,0x6c,0x79,0x66,0x3f,0x67,0x3f,0x67,0x45,0x6e, Step #5: tglyr\\n\"xcffg\177lyg\177mglyf?g?gEn Step #5: artifact_prefix='./'; Test unit written to ./oom-79e96f8fab0ff9587d64ff329ad9489c601d3ba2 Step #5: Base64: dGdseXJcbiJ4Y2ZmZ39seWd/bWdseWY/Zz9nRW4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2574 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 686332395 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56527e591d60, 0x56527e77a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56527e77a720,0x5652806042c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/79e96f8fab0ff9587d64ff329ad9489c601d3ba2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3108 processed earlier; will process 7868 files now Step #5: ==92702== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5652750d42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56527b70f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56527b6f246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56527b6f238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5652750da652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56527503b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565275035c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5652750cc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652780fb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652780fb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652780fb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652780fb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652780fb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652780fb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652780fb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652780fb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652780fb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652780fb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56527a30045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56527705c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652770675a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565276e12d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565276e12d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565276e13808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565276e12944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565276e12944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565276e12944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56527b6f494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56527b6fd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56527b6e5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56527b70ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c11f55082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56527503443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x8,0x0,0x7,0x2e,0x2b,0x42,0xda,0xbe,0x7c,0xdb,0xbe,0xdb,0xbe,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0xc0,0xab,0x6e,0x24,0x3,0x3,0x52, Step #5: - \010\000\007.+B\332\276|\333\276\333\276+++++++\300\253n$\003\003R Step #5: artifact_prefix='./'; Test unit written to ./oom-884f458e71aa59b9ff62cce6dffc12b79153aa0d Step #5: Base64: LSAIAAcuK0Lavnzbvtu+KysrKysrK8CrbiQDA1I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2575 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 686829537 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a961d6d60, 0x564a963bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a963bf720,0x564a982492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/884f458e71aa59b9ff62cce6dffc12b79153aa0d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3109 processed earlier; will process 7867 files now Step #5: ==92738== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a8cd192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a93354728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a9333746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a9333738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a8cd1f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a8cc8042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a8cc7ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a8cd11595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a8fd408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a8fd408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a8fd408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a8fd408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a8fd408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a8fd408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a8fd408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a8fd408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a8fd408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a8fd408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a91f4545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a8eca1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a8ecac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a8ea57d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a8ea57d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a8ea58808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a8ea57944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a8ea57944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a8ea57944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a9333994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a933427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a9332a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a93354fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7252356082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a8cc7943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x31,0x2b,0x32,0x2b,0x39,0x2b,0x31,0x22,0x22,0x20,0x67,0x20,0x22,0x22,0x20,0x67,0x20,0x22,0x22,0x20,0x63,0x20,0x22,0x22,0x20,0x63,0x20,0x22, Step #5: \"1+2+9+1\"\" g \"\" g \"\" c \"\" c \" Step #5: artifact_prefix='./'; Test unit written to ./oom-1ff049f9368afc618abe19736cc351ce9e38ccab Step #5: Base64: IjErMis5KzEiIiBnICIiIGcgIiIgYyAiIiBjICI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2576 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 687336303 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5569b5063d60, 0x5569b524c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5569b524c720,0x5569b70d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1ff049f9368afc618abe19736cc351ce9e38ccab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3110 processed earlier; will process 7866 files now Step #5: ==92774== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5569abba62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5569b21e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5569b21c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5569b21c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5569abbac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5569abb0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5569abb07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5569abb9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5569aebcd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5569aebcd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5569aebcd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5569aebcd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5569aebcd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5569aebcd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5569aebcd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5569aebcd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5569aebcd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5569aebcd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5569b0dd245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5569adb2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5569adb395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5569ad8e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5569ad8e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5569ad8e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5569ad8e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5569ad8e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5569ad8e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5569b21c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569b21cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5569b21b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5569b21e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feef3be8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5569abb0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xf3,0xa0,0x81,0xac,0xcd,0x8f,0x26,0x3f,0x5c,0xde,0xb9,0x93,0xdb,0xc2,0xc4,0x4f,0xf8,0x67,0xd9,0xa,0xe2,0x24,0x4a,0x25,0xa6,0x1b,0x1f,0xb9, Step #5: -\363\240\201\254\315\217&?\\\336\271\223\333\302\304O\370g\331\012\342$J%\246\033\037\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-9205ff0d16e03bd2fccff23a9c683f1fa0ce298f Step #5: Base64: LfOggazNjyY/XN65k9vCxE/4Z9kK4iRKJaYbH7k= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2577 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 687840017 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56214fe50d60, 0x56215003971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562150039720,0x562151ec32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9205ff0d16e03bd2fccff23a9c683f1fa0ce298f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3111 processed earlier; will process 7865 files now Step #5: ==92810== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5621469932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56214cfce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56214cfb146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56214cfb138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562146999652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5621468fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5621468f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56214698b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5621499ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5621499ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5621499ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5621499ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5621499ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5621499ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5621499ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5621499ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5621499ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5621499ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56214bbbf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56214891b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5621489265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5621486d1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5621486d1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5621486d2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5621486d1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5621486d1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5621486d1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56214cfb394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56214cfbc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56214cfa4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56214cfcefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d907c4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5621468f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf2,0xa0,0x8f,0x87,0xf4,0x82,0x80,0x93,0xf3,0xa0,0x87,0x87,0xf4,0x84,0x80,0x9f,0xf3,0xa2,0x81,0x99,0xf0,0xb5,0x99,0x80,0xfc,0x87,0x83,0x87,0x83, Step #5: \362\240\217\207\364\202\200\223\363\240\207\207\364\204\200\237\363\242\201\231\360\265\231\200\374\207\203\207\203 Step #5: artifact_prefix='./'; Test unit written to ./oom-5c30ed0fe4878eb3e1f61f93624e1d445fd8d9c4 Step #5: Base64: 8qCPh/SCgJPzoIeH9ISAn/OigZnwtZmA/IeDh4M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2578 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 688334684 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc64e5ad60, 0x55dc6504371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc65043720,0x55dc66ecd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c30ed0fe4878eb3e1f61f93624e1d445fd8d9c4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3112 processed earlier; will process 7864 files now Step #5: ==92846== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc5b99d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc61fd8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc61fbb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc61fbb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc5b9a3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc5b90442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc5b8fec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc5b995595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc5e9c48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc5e9c48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc5e9c48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc5e9c48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc5e9c48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc5e9c48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc5e9c48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc5e9c48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc5e9c48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc5e9c48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc60bc945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc5d925578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc5d9305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc5d6dbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc5d6dbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc5d6dc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc5d6db944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc5d6db944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc5d6db944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc61fbd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc61fc67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc61fae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc61fd8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa61e638082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc5b8fd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x26,0x24,0x12,0x60,0x24,0x75,0x1,0x1,0x1,0x1,0x68,0xa,0x23,0x1,0x2d,0x68,0x68,0x68,0x24,0x75,0x1,0x1,0x1,0x1,0x1,0x1,0x67,0x60, Step #5: $&$\022`$u\001\001\001\001h\012#\001-hhh$u\001\001\001\001\001\001g` Step #5: artifact_prefix='./'; Test unit written to ./oom-379a6934ac3cd5df394061baeecd111a8e7f93eb Step #5: Base64: JCYkEmAkdQEBAQFoCiMBLWhoaCR1AQEBAQEBZ2A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2579 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 688962454 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562271f92d60, 0x56227217b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56227217b720,0x5622740052c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/379a6934ac3cd5df394061baeecd111a8e7f93eb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3113 processed earlier; will process 7863 files now Step #5: ==92882== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562268ad52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56226f110728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56226f0f346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56226f0f338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562268adb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562268a3c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562268a36c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562268acd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56226bafc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56226bafc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56226bafc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56226bafc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56226bafc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56226bafc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56226bafc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56226bafc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56226bafc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56226bafc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56226dd0145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56226aa5d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56226aa685a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56226a813d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56226a813d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56226a814808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56226a813944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56226a813944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56226a813944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56226f0f594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56226f0fe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56226f0e6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56226f110fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7080fc3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562268a3543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x8,0x0,0x7,0x2e,0x2b,0x42,0xda,0xbe,0x7c,0xdb,0xbe,0xdb,0xbe,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x22, Step #5: \"\010\000\007.+B\332\276|\333\276\333\276++++++++++++++\" Step #5: artifact_prefix='./'; Test unit written to ./oom-2d1c8765678a9100d6f4ddea8f525eb6b6faa5ec Step #5: Base64: IggABy4rQtq+fNu+274rKysrKysrKysrKysrKyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2580 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 689460731 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c9e2b6bd60, 0x55c9e2d5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c9e2d54720,0x55c9e4bde2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2d1c8765678a9100d6f4ddea8f525eb6b6faa5ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3114 processed earlier; will process 7862 files now Step #5: #1 pulse cov: 3706 ft: 3707 exec/s: 0 rss: 172Mb Step #5: ==92918== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c9d96ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c9dfce9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c9dfccc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c9dfccc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c9d96b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c9d961542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c9d960fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c9d96a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c9dc6d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c9dc6d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c9dc6d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c9dc6d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c9dc6d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c9dc6d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c9dc6d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c9dc6d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c9dc6d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c9dc6d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c9de8da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c9db636578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c9db6415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c9db3ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c9db3ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c9db3ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c9db3ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c9db3ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c9db3ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c9dfcce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c9dfcd77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c9dfcbf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c9dfce9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff25922d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c9d960e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x11,0x0,0x7,0x0,0xce,0x93,0x1,0x60,0x54,0x43,0x4f,0x0,0x0,0x68,0x61,0x69,0x72,0x6c,0x69,0x6e,0x65,0x1,0x60,0x54,0x43,0x4f,0x1, Step #5: ID\021\000\007\000\316\223\001`TCO\000\000hairline\001`TCO\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-c7d4e86b289a9c4b3b2cced2305a459f62806f15 Step #5: Base64: SUQRAAcAzpMBYFRDTwAAaGFpcmxpbmUBYFRDTwE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2581 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 690127185 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55620077dd60, 0x55620096671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556200966720,0x5562027f02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c7d4e86b289a9c4b3b2cced2305a459f62806f15' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3116 processed earlier; will process 7860 files now Step #5: ==92954== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5561f72c02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5561fd8fb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5561fd8de46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5561fd8de38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5561f72c6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5561f722742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5561f7221c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5561f72b8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5561fa2e78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5561fa2e78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5561fa2e78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5561fa2e78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5561fa2e78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5561fa2e78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5561fa2e78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5561fa2e78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5561fa2e78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5561fa2e78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5561fc4ec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5561f9248578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5561f92535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5561f8ffed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5561f8ffed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5561f8fff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5561f8ffe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5561f8ffe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5561f8ffe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5561fd8e094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5561fd8e97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5561fd8d1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5561fd8fbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f192d370082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5561f722043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x2d,0x2d,0xf3,0xa0,0x84,0xb7,0x2d,0x2d,0x3e,0x3c,0x21,0x2d,0x2d,0xf3,0xa0,0x84,0xb7,0x2d,0x2d,0x3e,0x3c,0x21,0x2d,0x2d,0xf3,0xa0,0x83,0xb7, Step #5: 0:2:1.2\0120\0122\0120\0120\0126\0122\0121 Step #5: artifact_prefix='./'; Test unit written to ./oom-fd1d1f205d107bdc4e97b0e77c6d347a2266a2da Step #5: Base64: MDoxOjQuMy0tPjA6MjoxLjIKMAoyCjAKMAo2CjIKMQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2619 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 710388851 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d0dcfdbd60, 0x55d0dd1c471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d0dd1c4720,0x55d0df04e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fd1d1f205d107bdc4e97b0e77c6d347a2266a2da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3172 processed earlier; will process 7804 files now Step #5: ==94352== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d0d3b1e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d0da159728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d0da13c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d0da13c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d0d3b24652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d0d3a8542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d0d3a7fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d0d3b16595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d0d6b458c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d0d6b458c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d0d6b458c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d0d6b458c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d0d6b458c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d0d6b458c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d0d6b458c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d0d6b458c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d0d6b458c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d0d6b458c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d0d8d4a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d0d5aa6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d0d5ab15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d0d585cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d0d585cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d0d585d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d0d585c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d0d585c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d0d585c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d0da13e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d0da1477b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d0da12f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d0da159fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f77768cc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d0d3a7e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x3d,0x7e,0x2d,0x3d,0x3d,0x25,0x7,0xd2,0x84,0xcb,0xb5,0x28,0xcb,0xb5,0x1,0x79,0x0,0x29,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x29,0x24,0xcb,0xb5, Step #5: ~$=~-==%\007\322\204\313\265(\313\265\001y\000)\000\000\000\000\000\000\000)$\313\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-07c101423614da48e47322d85e1a82ac9623a84a Step #5: Base64: fiQ9fi09PSUH0oTLtSjLtQF5ACkAAAAAAAAAKSTLtQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2620 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 710893381 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606f78b8d60, 0x5606f7aa171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606f7aa1720,0x5606f992b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/07c101423614da48e47322d85e1a82ac9623a84a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3173 processed earlier; will process 7803 files now Step #5: #1 pulse cov: 3901 ft: 3902 exec/s: 0 rss: 173Mb Step #5: ==94388== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606ee3fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5606f4a36728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5606f4a1946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5606f4a1938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606ee401652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5606ee36242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5606ee35cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606ee3f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5606f14228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5606f14228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5606f14228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5606f14228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5606f14228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5606f14228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5606f14228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5606f14228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5606f14228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5606f14228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606f362745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5606f0383578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5606f038e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5606f0139d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5606f0139d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5606f013a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5606f0139944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5606f0139944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5606f0139944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5606f4a1b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606f4a247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5606f4a0c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5606f4a36fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feeb8788082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5606ee35b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x3d,0xc2,0x85,0x6b,0xc2,0x85,0x6b,0x3d,0xc2,0x85,0x3f,0xc2,0x85,0x6b,0x3d,0xc2,0x85,0x3d,0xc2,0x85,0x3f,0xc2,0x85,0x6b,0x3d,0xc2,0x85,0x3f,0x3d,0xa, Step #5: \012=\302\205k\302\205k=\302\205?\302\205k=\302\205=\302\205?\302\205k=\302\205?=\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-5db8f1641b7e84ddb305a414b3ec42ee0022ceb5 Step #5: Base64: Cj3ChWvChWs9woU/woVrPcKFPcKFP8KFaz3ChT89Cg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2621 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 711434399 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a72573d60, 0x557a7275c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a7275c720,0x557a745e62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5db8f1641b7e84ddb305a414b3ec42ee0022ceb5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3175 processed earlier; will process 7801 files now Step #5: ==94424== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a690b62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a6f6f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a6f6d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a6f6d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a690bc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a6901d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a69017c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a690ae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a6c0dd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a6c0dd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a6c0dd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a6c0dd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a6c0dd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a6c0dd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a6c0dd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a6c0dd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a6c0dd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a6c0dd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a6e2e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a6b03e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a6b0495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a6adf4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a6adf4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a6adf5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a6adf4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a6adf4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a6adf4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a6f6d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a6f6df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a6f6c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a6f6f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcde247d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a6901643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x69,0x67,0x72,0x41,0x70,0x68,0x7b,0xa,0x7a,0x7a,0x2d,0x3e,0x7b,0x73,0x55,0x62,0x47,0x72,0x61,0x70,0x68,0x22,0x0,0x0,0x22,0x7d,0x2d,0x3e,0x64,0x7d, Step #5: digrAph{\012zz->{sUbGraph\"\000\000\"}->d} Step #5: artifact_prefix='./'; Test unit written to ./oom-42180eef43a4e2af409efd9e49e705ab79cb3e8e Step #5: Base64: ZGlnckFwaHsKenotPntzVWJHcmFwaCIAACJ9LT5kfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2622 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 711932252 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f44fae5d60, 0x55f44fcce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f44fcce720,0x55f451b582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/42180eef43a4e2af409efd9e49e705ab79cb3e8e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3176 processed earlier; will process 7800 files now Step #5: ==94460== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f4466282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f44cc63728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f44cc4646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f44cc4638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f44662e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f44658f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f446589c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f446620595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f44964f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f44964f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f44964f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f44964f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f44964f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f44964f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f44964f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f44964f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f44964f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f44964f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f44b85445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f4485b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f4485bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f448366d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f448366d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f448367808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f448366944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f448366944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f448366944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f44cc4894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f44cc517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f44cc39529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f44cc63fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdf6da58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f44658843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x30,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x31,0x34,0x33,0x30,0x31,0x2e, Step #5: ......111111111101111111114301. Step #5: artifact_prefix='./'; Test unit written to ./oom-59e4815a421f91eaf8f49476a88b18784f42937b Step #5: Base64: Li4uLi4uMTExMTExMTExMTAxMTExMTExMTE0MzAxLg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2623 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 712426244 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0efd3ad60, 0x55a0eff2371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0eff23720,0x55a0f1dad2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/59e4815a421f91eaf8f49476a88b18784f42937b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3177 processed earlier; will process 7799 files now Step #5: ==94496== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0e687d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0eceb8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0ece9b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0ece9b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0e6883652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0e67e442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0e67dec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0e6875595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0e98a48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0e98a48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0e98a48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0e98a48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0e98a48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0e98a48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0e98a48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0e98a48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0e98a48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0e98a48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0ebaa945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0e8805578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0e88105a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0e85bbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0e85bbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0e85bc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0e85bb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0e85bb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0e85bb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0ece9d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0ecea67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0ece8e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0eceb8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc04300d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0e67dd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x54,0x45,0x53,0x54,0x76,0x31,0xb,0x64,0x3a,0x35,0x31,0x35,0x33,0x39,0x36,0x30,0x37,0x35,0x35,0x31,0x39,0x39,0x39,0x39,0x39,0x37,0x2e, Step #5: FUZZTESTv1\013d:51539607551999997. Step #5: artifact_prefix='./'; Test unit written to ./oom-e50158b18b5278bcbfaba1d8aad56e4a51585b69 Step #5: Base64: RlVaWlRFU1R2MQtkOjUxNTM5NjA3NTUxOTk5OTk3Lg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2624 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 712925476 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56131c72cd60, 0x56131c91571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56131c915720,0x56131e79f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e50158b18b5278bcbfaba1d8aad56e4a51585b69' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3178 processed earlier; will process 7798 files now Step #5: #1 pulse cov: 3653 ft: 3654 exec/s: 0 rss: 170Mb Step #5: #2 pulse cov: 4030 ft: 4190 exec/s: 0 rss: 172Mb Step #5: ==94532== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56131326f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5613198aa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56131988d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56131988d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561313275652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5613131d642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5613131d0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561313267595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5613162968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5613162968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5613162968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5613162968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5613162968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5613162968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5613162968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5613162968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5613162968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5613162968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56131849b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5613151f7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5613152025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561314fadd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561314fadd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561314fae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561314fad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561314fad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561314fad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56131988f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5613198987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561319880529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5613198aafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7608c6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5613131cf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x3d,0x7e,0x2d,0x3d,0x3d,0x1,0x79,0x0,0x65,0x0,0x0,0x29,0x2b,0x24,0x7e,0x24,0x3d,0x7e,0x2d,0x3d,0x3d,0x1,0x79,0x0,0x0,0x0,0x0,0x29,0x24, Step #5: ~$=~-==\001y\000e\000\000)+$~$=~-==\001y\000\000\000\000)$ Step #5: artifact_prefix='./'; Test unit written to ./oom-33a9e544ad8f79e95d42824648618d8a95741044 Step #5: Base64: fiQ9fi09PQF5AGUAACkrJH4kPX4tPT0BeQAAAAApJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2625 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 713513767 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557923b07d60, 0x557923cf071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557923cf0720,0x557925b7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/33a9e544ad8f79e95d42824648618d8a95741044' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3181 processed earlier; will process 7795 files now Step #5: ==94568== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55791a64a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557920c85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557920c6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557920c6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55791a650652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55791a5b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55791a5abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55791a642595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55791d6718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55791d6718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55791d6718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55791d6718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55791d6718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55791d6718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55791d6718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55791d6718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55791d6718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55791d6718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55791f87645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55791c5d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55791c5dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55791c388d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55791c388d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55791c389808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55791c388944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55791c388944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55791c388944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557920c6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557920c737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557920c5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557920c85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f06bd2e8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55791a5aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x32,0x12,0x27,0x27,0x66,0x27,0x27,0x27,0x27,0x34,0xe2,0x81,0xa5,0x2d,0x3d,0x27,0x38,0x27,0x27,0x27,0x27,0x27,0xdf,0xbd,0x35,0x27,0x24,0x27,0x2d, Step #5: $22\022''f''''4\342\201\245-='8'''''\337\2755'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-c81b9e6e87d6727af7d006e74d3c0a234bd0dd9a Step #5: Base64: JDIyEicnZicnJyc04oGlLT0nOCcnJycn3701JyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2626 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 714033720 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602a470bd60, 0x5602a48f471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602a48f4720,0x5602a677e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c81b9e6e87d6727af7d006e74d3c0a234bd0dd9a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3182 processed earlier; will process 7794 files now Step #5: #1 pulse cov: 3939 ft: 3940 exec/s: 0 rss: 170Mb Step #5: ==94604== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56029b24e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5602a1889728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5602a186c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5602a186c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56029b254652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56029b1b542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56029b1afc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56029b246595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56029e2758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56029e2758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56029e2758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56029e2758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56029e2758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56029e2758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56029e2758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56029e2758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56029e2758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56029e2758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602a047a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56029d1d6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56029d1e15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56029cf8cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56029cf8cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56029cf8d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56029cf8c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56029cf8c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56029cf8c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5602a186e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602a18777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5602a185f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5602a1889fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f57c2527082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56029b1ae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20, Step #5: - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-85099272b9c7859aa3c46c5cd68031ca4d54cc7f Step #5: Base64: IC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2627 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 714604476 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5643f3b71d60, 0x5643f3d5a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5643f3d5a720,0x5643f5be42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/85099272b9c7859aa3c46c5cd68031ca4d54cc7f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3184 processed earlier; will process 7792 files now Step #5: ==94640== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5643ea6b42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5643f0cef728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5643f0cd246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5643f0cd238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5643ea6ba652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5643ea61b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5643ea615c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5643ea6ac595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5643ed6db8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5643ed6db8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5643ed6db8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5643ed6db8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5643ed6db8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5643ed6db8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5643ed6db8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5643ed6db8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5643ed6db8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5643ed6db8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5643ef8e045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5643ec63c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5643ec6475a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5643ec3f2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5643ec3f2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5643ec3f3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5643ec3f2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5643ec3f2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5643ec3f2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5643f0cd494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5643f0cdd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5643f0cc5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5643f0ceffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb16fe9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5643ea61443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x1b,0x1,0x1a,0x0,0x8,0x0,0x0,0x0,0x21,0x63,0x22,0x62,0x0,0x0,0x0,0x1b,0x1,0x24,0x0,0x31,0x6e,0x24,0x24,0x30,0x6e,0x24,0x2d,0x2d, Step #5: \000\000\000\033\001\032\000\010\000\000\000!c\"b\000\000\000\033\001$\0001n$$0n$-- Step #5: artifact_prefix='./'; Test unit written to ./oom-a6811b7b814e3bc5de4566934549a442298753be Step #5: Base64: AAAAGwEaAAgAAAAhYyJiAAAAGwEkADFuJCQwbiQtLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2628 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 715104696 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558c70149d60, 0x558c7033271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558c70332720,0x558c721bc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a6811b7b814e3bc5de4566934549a442298753be' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3185 processed earlier; will process 7791 files now Step #5: ==94676== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558c66c8c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558c6d2c7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558c6d2aa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558c6d2aa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558c66c92652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558c66bf342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558c66bedc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558c66c84595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558c69cb38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558c69cb38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558c69cb38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558c69cb38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558c69cb38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558c69cb38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558c69cb38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558c69cb38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558c69cb38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558c69cb38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558c6beb845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558c68c14578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558c68c1f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558c689cad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558c689cad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558c689cb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558c689ca944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558c689ca944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558c689ca944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558c6d2ac94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558c6d2b57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558c6d29d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558c6d2c7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f38d9955082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558c66bec43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x27,0x2f,0x27,0x27,0x27,0x27,0x27,0x27,0x32,0x2d,0x3d,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $2'/''''''2-='''''''''''''.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-d64aeb5483a13dde6b97681e30bda64688dcb505 Step #5: Base64: JDInLycnJycnJzItPScnJycnJycnJycnJycuJyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2629 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 715614069 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5644aafbbd60, 0x5644ab1a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5644ab1a4720,0x5644ad02e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d64aeb5483a13dde6b97681e30bda64688dcb505' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3186 processed earlier; will process 7790 files now Step #5: ==94712== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5644a1afe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5644a8139728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5644a811c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5644a811c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5644a1b04652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5644a1a6542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5644a1a5fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5644a1af6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5644a4b258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5644a4b258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5644a4b258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5644a4b258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5644a4b258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5644a4b258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5644a4b258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5644a4b258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5644a4b258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5644a4b258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5644a6d2a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5644a3a86578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5644a3a915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5644a383cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5644a383cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5644a383d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5644a383c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5644a383c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5644a383c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5644a811e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5644a81277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5644a810f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5644a8139fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa2ef60f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5644a1a5e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x59,0x44,0x35,0x30,0x37,0x33,0x36,0x39,0x35,0x34,0x39,0x2,0x0,0x4,0x49,0x0,0x40,0x2,0x54,0x43,0x4f,0x5b,0x0,0x7a,0x3,0x2d,0x23,0x32,0x37,0x36,0x38, Step #5: YD507369549\002\000\004I\000@\002TCO[\000z\003-#2768 Step #5: artifact_prefix='./'; Test unit written to ./oom-8ab13e493cb3b47cee5ab540a627958fe6698e9f Step #5: Base64: WUQ1MDczNjk1NDkCAARJAEACVENPWwB6Ay0jMjc2OA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2630 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 716111541 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ccd5623d60, 0x55ccd580c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ccd580c720,0x55ccd76962c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ab13e493cb3b47cee5ab540a627958fe6698e9f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3187 processed earlier; will process 7789 files now Step #5: #1 pulse cov: 3497 ft: 3498 exec/s: 0 rss: 172Mb Step #5: ==94748== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cccc1662d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ccd27a1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ccd278446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ccd278438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cccc16c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cccc0cd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cccc0c7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cccc15e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cccf18d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cccf18d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cccf18d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cccf18d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cccf18d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cccf18d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cccf18d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cccf18d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cccf18d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cccf18d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ccd139245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ccce0ee578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ccce0f95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cccdea4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cccdea4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cccdea5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cccdea4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cccdea4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cccdea4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ccd278694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ccd278f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ccd2777529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ccd27a1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91ba571082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cccc0c643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x49,0x27,0x21,0x31,0x24,0x44,0x33,0x2,0x11,0x11,0x79,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x36,0x0,0x0,0x34, Step #5: $I'!1$D3\002\021\021y\000\000\000\000\000\000\000\000\000\000\000\000\000\000\0006\000\0004 Step #5: artifact_prefix='./'; Test unit written to ./oom-6da9c08cbb91547ea4e6f5c5c86531220682c17d Step #5: Base64: JEknITEkRDMCERF5AAAAAAAAAAAAAAAAAAAANgAANA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2631 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 716664968 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa265d7d60, 0x55aa267c071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa267c0720,0x55aa2864a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6da9c08cbb91547ea4e6f5c5c86531220682c17d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3189 processed earlier; will process 7787 files now Step #5: ==94784== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa1d11a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa23755728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa2373846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa2373838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa1d120652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa1d08142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa1d07bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa1d112595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa201418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa201418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa201418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa201418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa201418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa201418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa201418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa201418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa201418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa201418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa2234645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa1f0a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa1f0ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa1ee58d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa1ee58d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa1ee59808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa1ee58944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa1ee58944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa1ee58944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa2373a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa237437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa2372b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa23755fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f223b0d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa1d07a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x88,0x49,0xa,0xcd,0x88,0x49,0xa,0xcd,0x88,0x43,0xa,0xcd,0x88,0x41,0xa,0xcd,0x88,0x49,0xa,0xcd,0x88,0x41,0xa,0xcd,0x88,0x43,0x28,0xcd,0x88,0x43, Step #5: \315\210I\012\315\210I\012\315\210C\012\315\210A\012\315\210I\012\315\210A\012\315\210C(\315\210C Step #5: artifact_prefix='./'; Test unit written to ./oom-5f6531242c02c6fcc73e69bf9a37d3dbcbfab617 Step #5: Base64: zYhJCs2ISQrNiEMKzYhBCs2ISQrNiEEKzYhDKM2IQw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2632 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 717174067 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cf094f1d60, 0x55cf096da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cf096da720,0x55cf0b5642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5f6531242c02c6fcc73e69bf9a37d3dbcbfab617' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3190 processed earlier; will process 7786 files now Step #5: ==94820== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cf000342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cf0666f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cf0665246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cf0665238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cf0003a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cefff9b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cefff95c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cf0002c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cf0305b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cf0305b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cf0305b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cf0305b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cf0305b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cf0305b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cf0305b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cf0305b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cf0305b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cf0305b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cf0526045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cf01fbc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cf01fc75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cf01d72d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cf01d72d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cf01d73808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cf01d72944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cf01d72944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cf01d72944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cf0665494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cf0665d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cf06645529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cf0666ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa369742082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cefff9443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x24,0x39,0x32,0x32,0x33,0x33,0x37,0x32,0x30,0x33,0x36,0x38,0x35,0x34,0x37,0x37,0x35,0x38,0x30,0x38,0x0,0x0,0x7c,0x9,0xa,0x0,0x24,0xa,0x7c,0x2f, Step #5: \000$9223372036854775808\000\000|\011\012\000$\012|/ Step #5: artifact_prefix='./'; Test unit written to ./oom-f404e5174b1bfbef856ee6cf9b3faaddfd454378 Step #5: Base64: ACQ5MjIzMzcyMDM2ODU0Nzc1ODA4AAB8CQoAJAp8Lw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2633 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 717687185 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b765eabd60, 0x55b76609471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b766094720,0x55b767f1e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f404e5174b1bfbef856ee6cf9b3faaddfd454378' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3191 processed earlier; will process 7785 files now Step #5: ==94856== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b75c9ee2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b763029728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b76300c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b76300c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b75c9f4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b75c95542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b75c94fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b75c9e6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b75fa158c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b75fa158c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b75fa158c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b75fa158c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b75fa158c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b75fa158c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b75fa158c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b75fa158c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b75fa158c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b75fa158c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b761c1a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b75e976578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b75e9815a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b75e72cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b75e72cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b75e72d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b75e72c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b75e72c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b75e72c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b76300e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7630177b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b762fff529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b763029fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4ffec9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b75c94e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x32,0x35,0x31,0x20,0x54,0x54,0x54,0x54,0x48,0xcd,0x8f,0x41,0x43,0xdb,0xbf,0x54,0x54,0x48,0xcd,0x8f,0x41,0x43,0xdb,0xbf,0x5,0x2,0xdb,0xbf,0xdf, Step #5: ID251 TTTTH\315\217AC\333\277TTH\315\217AC\333\277\005\002\333\277\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-09f9c228ac13f3bcca0922472b70c033459673aa Step #5: Base64: SUQyNTEgVFRUVEjNj0FD279UVEjNj0FD278FAtu/3w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2634 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 718197026 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5562a0b87d60, 0x5562a0d7071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5562a0d70720,0x5562a2bfa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/09f9c228ac13f3bcca0922472b70c033459673aa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3192 processed earlier; will process 7784 files now Step #5: #1 pulse cov: 3552 ft: 3553 exec/s: 0 rss: 171Mb Step #5: ==94892== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5562976ca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55629dd05728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55629dce846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55629dce838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5562976d0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55629763142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55629762bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5562976c2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55629a6f18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55629a6f18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55629a6f18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55629a6f18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55629a6f18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55629a6f18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55629a6f18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55629a6f18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55629a6f18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55629a6f18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55629c8f645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556299652578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55629965d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556299408d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556299408d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556299409808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556299408944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556299408944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556299408944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55629dcea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55629dcf37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55629dcdb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55629dd05fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f53949d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55629762a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e,0x20,0x6d,0x69,0x6e, Step #5: min min min min min min min min Step #5: artifact_prefix='./'; Test unit written to ./oom-d037c20d9785b5a0c7000d0a11a30a0c2f2bd81d Step #5: Base64: bWluIG1pbiBtaW4gbWluIG1pbiBtaW4gbWluIG1pbg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2635 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 718748920 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55576aeb1d60, 0x55576b09a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55576b09a720,0x55576cf242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d037c20d9785b5a0c7000d0a11a30a0c2f2bd81d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3194 processed earlier; will process 7782 files now Step #5: ==94928== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5557619f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55576802f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55576801246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55576801238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5557619fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55576195b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555761955c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5557619ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555764a1b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555764a1b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555764a1b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555764a1b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555764a1b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555764a1b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555764a1b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555764a1b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555764a1b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555764a1b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555766c2045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55576397c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5557639875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555763732d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555763732d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555763733808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555763732944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555763732944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555763732944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55576801494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55576801d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555768005529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55576802ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5e2e43e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55576195443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60, Step #5: ```\012```\012```\012```\012```\012```\012```\012``` Step #5: artifact_prefix='./'; Test unit written to ./oom-b17329d1924e66ee0ca8249d475d97e4f4dec99b Step #5: Base64: YGBgCmBgYApgYGAKYGBgCmBgYApgYGAKYGBgCmBgYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2636 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 719363991 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564d99c31d60, 0x564d99e1a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564d99e1a720,0x564d9bca42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b17329d1924e66ee0ca8249d475d97e4f4dec99b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3195 processed earlier; will process 7781 files now Step #5: ==94964== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564d907742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564d96daf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564d96d9246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564d96d9238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564d9077a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564d906db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564d906d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564d9076c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564d9379b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564d9379b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564d9379b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564d9379b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564d9379b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564d9379b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564d9379b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564d9379b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564d9379b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564d9379b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564d959a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564d926fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564d927075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564d924b2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564d924b2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564d924b3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564d924b2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564d924b2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564d924b2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564d96d9494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564d96d9d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564d96d85529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564d96daffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff0d8907082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564d906d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x32,0x0,0xa,0xd8,0x80,0x4,0x0,0x0,0xa,0x2d,0x20,0x0,0x0,0x4f,0x59,0x3e,0x2d,0x31,0x2b,0x34,0x27,0x0,0x54,0x3a,0xd8,0x80,0x4,0x2e,0x2b,0x0, Step #5: 22\000\012\330\200\004\000\000\012- \000\000OY>-1+4'\000T:\330\200\004.+\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-5772a290c5441cd0a5bf6959d7343ab91ba7bbd0 Step #5: Base64: MjIACtiABAAACi0gAABPWT4tMSs0JwBUOtiABC4rAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2637 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 719872440 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c790946d60, 0x55c790b2f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c790b2f720,0x55c7929b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5772a290c5441cd0a5bf6959d7343ab91ba7bbd0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3196 processed earlier; will process 7780 files now Step #5: ==95000== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c7874892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c78dac4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c78daa746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c78daa738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c78748f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c7873f042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c7873eac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c787481595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c78a4b08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c78a4b08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c78a4b08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c78a4b08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c78a4b08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c78a4b08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c78a4b08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c78a4b08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c78a4b08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c78a4b08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c78c6b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c789411578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c78941c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c7891c7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c7891c7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c7891c8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c7891c7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c7891c7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c7891c7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c78daa994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c78dab27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c78da9a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c78dac4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7485634082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c7873e943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x63,0x68,0x61,0x72,0x22,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0x81, Step #5: Step #5: Step #5: #0 0x55d425eb62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d42c4f1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d42c4d446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d42c4d438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d425ebc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d425e1d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d425e17c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d425eae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d428edd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d428edd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d428edd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d428edd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d428edd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d428edd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d428edd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d428edd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d428edd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d428edd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d42b0e245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d427e3e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d427e495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d427bf4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d427bf4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d427bf5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d427bf4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d427bf4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d427bf4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d42c4d694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d42c4df7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d42c4c7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d42c4f1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f65a8c95082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d425e1643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x9,0x2b,0xa,0x9,0x2b,0xa,0x9,0x73,0x6f,0x2b,0xa,0x9,0x2b,0xa,0x9,0x2b,0xa,0x9,0x73,0x6f,0x75,0x72,0x75,0x72,0x63,0x65,0x7e,0xeb,0x7e, Step #5: +\012\011+\012\011+\012\011so+\012\011+\012\011+\012\011soururce~\353~ Step #5: artifact_prefix='./'; Test unit written to ./oom-3091a05144e207a4bf7e6e8fae7709dd88424a9f Step #5: Base64: KwoJKwoJKwoJc28rCgkrCgkrCglzb3VydXJjZX7rfg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2639 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 720888761 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f7e16d5d60, 0x55f7e18be71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f7e18be720,0x55f7e37482c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3091a05144e207a4bf7e6e8fae7709dd88424a9f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3198 processed earlier; will process 7778 files now Step #5: ==95072== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7d82182d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7de853728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7de83646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7de83638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f7d821e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7d817f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7d8179c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f7d8210595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7db23f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7db23f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7db23f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7db23f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7db23f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7db23f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7db23f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7db23f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7db23f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7db23f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7dd44445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f7da1a0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7da1ab5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7d9f56d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7d9f56d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7d9f57808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7d9f56944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7d9f56944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7d9f56944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7de83894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7de8417b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7de829529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7de853fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f05eb1ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7d817843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x25,0x25,0x30,0x50,0x0,0x68,0x70,0x68,0x43,0xda,0x82,0x1,0x70,0xa8,0xdf,0x8f,0xdf,0xdf,0x97,0xbc,0x25,0x82,0x1,0x70,0x64,0x64,0x64,0x64,0xa,0x50, Step #5: I%%0P\000hphC\332\202\001p\250\337\217\337\337\227\274%\202\001pdddd\012P Step #5: artifact_prefix='./'; Test unit written to ./oom-efd4e2a4ffdf10d1cc77d611c38687a2de7fd3a5 Step #5: Base64: SSUlMFAAaHBoQ9qCAXCo34/f35e8JYIBcGRkZGQKUA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2640 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 721383576 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625143fdd60, 0x5625145e671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625145e6720,0x5625164702c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/efd4e2a4ffdf10d1cc77d611c38687a2de7fd3a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3199 processed earlier; will process 7777 files now Step #5: #1 pulse cov: 3777 ft: 3778 exec/s: 0 rss: 170Mb Step #5: #2 pulse cov: 10939 ft: 11772 exec/s: 0 rss: 189Mb Step #5: ==95108== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56250af402d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56251157b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56251155e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56251155e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56250af46652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56250aea742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56250aea1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56250af38595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56250df678c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56250df678c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56250df678c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56250df678c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56250df678c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56250df678c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56250df678c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56250df678c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56250df678c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56250df678c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56251016c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56250cec8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56250ced35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56250cc7ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56250cc7ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56250cc7f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56250cc7e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56250cc7e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56250cc7e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56251156094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625115697b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562511551529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56251157bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0d19cd8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56250aea043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: - - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-dd9ccc56834e319239616813537e775d7528f9e2 Step #5: Base64: LSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2641 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 722010649 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5605f68dfd60, 0x5605f6ac871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605f6ac8720,0x5605f89522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dd9ccc56834e319239616813537e775d7528f9e2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3202 processed earlier; will process 7774 files now Step #5: ==95144== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5605ed4222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5605f3a5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5605f3a4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5605f3a4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5605ed428652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5605ed38942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5605ed383c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5605ed41a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605f04498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605f04498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605f04498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605f04498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605f04498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605f04498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605f04498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605f04498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605f04498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605f04498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5605f264e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5605ef3aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5605ef3b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5605ef160d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5605ef160d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5605ef161808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5605ef160944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5605ef160944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5605ef160944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5605f3a4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605f3a4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5605f3a33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5605f3a5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdb0a8f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5605ed38243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x66,0x5c, Step #5: \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\f\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-f6c539dc7ae62fb774924566075e97f7c85918c7 Step #5: Base64: XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxmXA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2642 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 722505486 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b91cce6d60, 0x55b91cecf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b91cecf720,0x55b91ed592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f6c539dc7ae62fb774924566075e97f7c85918c7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3203 processed earlier; will process 7773 files now Step #5: ==95180== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b9138292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b919e64728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b919e4746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b919e4738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b91382f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b91379042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b91378ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b913821595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9168508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9168508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9168508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9168508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9168508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9168508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9168508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9168508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9168508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9168508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b918a5545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9157b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9157bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b915567d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b915567d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b915568808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b915567944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b915567944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b915567944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b919e4994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b919e527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b919e3a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b919e64fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0ee14c6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b91378943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x20,0x2f,0x67,0x2f,0x20,0x48,0x54,0x54,0x50,0x2f,0x31,0x2e,0x31,0xd,0xa,0x68,0x68,0x3a,0xd,0xa,0x68,0x30,0x68,0x68,0x68,0x3a,0xd,0xa,0xd,0xa,0x2d, Step #5: \002 /g/ HTTP/1.1\015\012hh:\015\012h0hhh:\015\012\015\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-4c820481ddf9aec061b843ea08ad15bf323a856e Step #5: Base64: AiAvZy8gSFRUUC8xLjENCmhoOg0KaDBoaGg6DQoNCi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2643 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 723013552 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb38f68d60, 0x55bb3915171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb39151720,0x55bb3afdb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4c820481ddf9aec061b843ea08ad15bf323a856e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3204 processed earlier; will process 7772 files now Step #5: ==95216== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bb2faab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bb360e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bb360c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bb360c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb2fab1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb2fa1242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb2fa0cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb2faa3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bb32ad28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bb32ad28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bb32ad28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bb32ad28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bb32ad28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bb32ad28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bb32ad28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bb32ad28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bb32ad28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bb32ad28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bb34cd745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb31a33578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb31a3e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb317e9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb317e9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb317ea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb317e9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb317e9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb317e9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bb360cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bb360d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bb360bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bb360e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff634f78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb2fa0b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x2d,0x30,0x2,0x2,0x21,0x32,0x31,0x34,0x37,0x34,0x38,0x33,0x36,0x34,0x38,0x5e,0x4e,0x41,0x50,0x49,0x43,0x6,0x4f,0x49,0x78,0x50,0x6e,0xca,0xb8,0x47, Step #5: ID-0\002\002!2147483648^NAPIC\006OIxPn\312\270G Step #5: artifact_prefix='./'; Test unit written to ./oom-c7cbfd1fddb59c83c0aa30f495ff2b952361629f Step #5: Base64: SUQtMAICITIxNDc0ODM2NDheTkFQSUMGT0l4UG7KuEc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2644 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 723508579 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5651d61a4d60, 0x5651d638d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5651d638d720,0x5651d82172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c7cbfd1fddb59c83c0aa30f495ff2b952361629f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3205 processed earlier; will process 7771 files now Step #5: ==95252== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5651ccce72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5651d3322728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5651d330546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5651d330538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5651ccced652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5651ccc4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5651ccc48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5651cccdf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5651cfd0e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5651cfd0e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5651cfd0e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5651cfd0e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5651cfd0e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5651cfd0e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5651cfd0e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5651cfd0e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5651cfd0e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5651cfd0e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5651d1f1345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5651cec6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5651cec7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5651cea25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5651cea25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5651cea26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5651cea25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5651cea25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5651cea25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5651d330794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5651d33107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5651d32f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5651d3322fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2afffa7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5651ccc4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x2,0x0,0x2,0x6c,0x1e,0x2,0x0,0x3,0x2c,0x5e,0x2,0x0,0x2,0x6c,0x5e,0x2,0x0,0x2,0x6c,0x5e,0x2,0x0,0x6d,0x0,0x1,0x0,0x0,0x5,0x1,0x31,0x1a, Step #5: ^\002\000\002l\036\002\000\003,^\002\000\002l^\002\000\002l^\002\000m\000\001\000\000\005\0011\032 Step #5: artifact_prefix='./'; Test unit written to ./oom-4f278604d2469fefb86aaee8a76ae4d1b3c75314 Step #5: Base64: XgIAAmweAgADLF4CAAJsXgIAAmxeAgBtAAEAAAUBMRo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2645 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 724010010 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f13274bd60, 0x55f13293471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f132934720,0x55f1347be2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f278604d2469fefb86aaee8a76ae4d1b3c75314' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3206 processed earlier; will process 7770 files now Step #5: ==95288== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f12928e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f12f8c9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f12f8ac46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f12f8ac38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f129294652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f1291f542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f1291efc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f129286595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f12c2b58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f12c2b58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f12c2b58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f12c2b58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f12c2b58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f12c2b58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f12c2b58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f12c2b58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f12c2b58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f12c2b58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f12e4ba45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f12b216578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f12b2215a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f12afccd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f12afccd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f12afcd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f12afcc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f12afcc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f12afcc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f12f8ae94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f12f8b77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f12f89f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f12f8c9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb4bcf06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f1291ee43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x91,0x96,0xb9,0xf0,0x91,0x92,0xbd,0x2e,0x78,0xf0,0x91,0x96,0xb9,0xf0,0x91,0x92,0xbd,0xa,0xf0,0x91,0x96,0xb9,0xf0,0x91,0x92,0xbd,0x2e,0x78,0x6e,0x63,0x78, Step #5: \360\221\226\271\360\221\222\275.x\360\221\226\271\360\221\222\275\012\360\221\226\271\360\221\222\275.xncx Step #5: artifact_prefix='./'; Test unit written to ./oom-1c601bce2de741343df23cbfc8c4c6f2ca090fba Step #5: Base64: 8JGWufCRkr0uePCRlrnwkZK9CvCRlrnwkZK9LnhuY3g= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2646 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 724507596 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f240f07d60, 0x55f2410f071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f2410f0720,0x55f242f7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1c601bce2de741343df23cbfc8c4c6f2ca090fba' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3207 processed earlier; will process 7769 files now Step #5: ==95324== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f237a4a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f23e085728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f23e06846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f23e06838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f237a50652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f2379b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f2379abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f237a42595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f23aa718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f23aa718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f23aa718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f23aa718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f23aa718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f23aa718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f23aa718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f23aa718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f23aa718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f23aa718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f23cc7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f2399d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f2399dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f239788d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f239788d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f239789808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f239788944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f239788944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f239788944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f23e06a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f23e0737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f23e05b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f23e085fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d9d46f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f2379aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x31,0x22,0xa,0x2d,0x2d,0x2d,0xa,0x22,0xa,0xa,0x2d,0x2d,0x2d,0xa,0x5b,0x31,0x22,0xa,0x2d,0xa,0x2d,0x2d,0x2d,0xa,0x20,0x2d,0x2d,0x2d,0xa,0x22,0xa, Step #5: [1\"\012---\012\"\012\012---\012[1\"\012-\012---\012 ---\012\"\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-0f750218019d0f1970d2f63d030e9b335d857835 Step #5: Base64: WzEiCi0tLQoiCgotLS0KWzEiCi0KLS0tCiAtLS0KIgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2647 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 725011402 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5651695c4d60, 0x5651697ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5651697ad720,0x56516b6372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f750218019d0f1970d2f63d030e9b335d857835' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3208 processed earlier; will process 7768 files now Step #5: ==95360== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5651601072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565166742728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56516672546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56516672538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56516010d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56516006e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565160068c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5651600ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56516312e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56516312e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56516312e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56516312e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56516312e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56516312e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56516312e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56516312e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56516312e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56516312e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56516533345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56516208f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56516209a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565161e45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565161e45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x565161e46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565161e45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565161e45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565161e45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56516672794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5651667307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565166718529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565166742fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac757a6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56516006743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x2b,0xa,0x2b,0xa,0x2b,0xa,0x2b,0xa,0xa,0x2b,0xa,0x2b,0xa,0x2b,0xa,0xab,0xa,0x2b,0xdb,0x7f,0xff,0xff,0xff,0xff,0xff,0x73,0x65,0x46,0x6f,0x72, Step #5: +\012+\012+\012+\012+\012\012+\012+\012+\012\253\012+\333\177\377\377\377\377\377seFor Step #5: artifact_prefix='./'; Test unit written to ./oom-0b13d4ecd4c386a7b62b858469a1a4b4de6284ad Step #5: Base64: KworCisKKworCgorCisKKwqrCivbf///////c2VGb3I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2648 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 725515966 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55858d22bd60, 0x55858d41471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55858d414720,0x55858f29e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0b13d4ecd4c386a7b62b858469a1a4b4de6284ad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3209 processed earlier; will process 7767 files now Step #5: ==95396== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558583d6e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55858a3a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55858a38c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55858a38c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558583d74652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558583cd542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558583ccfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558583d66595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558586d958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558586d958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558586d958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558586d958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558586d958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558586d958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558586d958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558586d958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558586d958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558586d958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558588f9a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558585cf6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558585d015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558585aacd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558585aacd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558585aad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558585aac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558585aac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558585aac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55858a38e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55858a3977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55858a37f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55858a3a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7cb9c33082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558583cce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x32,0xe2,0x97,0x8c,0xe0,0xb7,0x80,0x35,0x3c,0x2f,0x74,0x65,0x78,0x74, Step #5: >>>>>>>2\342\227\214\340\267\2005 Step #5: Step #5: #0 0x55d5b7c6d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d5be2a8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d5be28b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d5be28b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d5b7c73652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d5b7bd442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d5b7bcec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d5b7c65595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d5bac948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d5bac948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d5bac948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d5bac948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d5bac948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d5bac948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d5bac948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d5bac948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d5bac948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d5bac948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d5bce9945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d5b9bf5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d5b9c005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d5b99abd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d5b99abd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d5b99ac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d5b99ab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d5b99ab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d5b99ab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d5be28d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d5be2967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d5be27e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d5be2a8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ceed9c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d5b7bcd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc7,0x80,0xc8,0x80,0xc8,0x80,0xc8,0x9f,0xc8,0x80,0xc8,0x9f,0xca,0x9f,0xc8,0x80,0xc8,0x80,0xc7,0x9f,0xca,0x82,0xc8,0x9f,0xc8,0x80,0xc8,0x80,0xc8,0x9f,0xca,0x80, Step #5: \307\200\310\200\310\200\310\237\310\200\310\237\312\237\310\200\310\200\307\237\312\202\310\237\310\200\310\200\310\237\312\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-25252d525877884acd8fa6bfc2e1dfda676faa53 Step #5: Base64: x4DIgMiAyJ/IgMifyp/IgMiAx5/KgsifyIDIgMifyoA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2650 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 726555014 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f33a48ed60, 0x55f33a67771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f33a677720,0x55f33c5012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/25252d525877884acd8fa6bfc2e1dfda676faa53' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3212 processed earlier; will process 7764 files now Step #5: ==95468== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f330fd12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f33760c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f3375ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f3375ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f330fd7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f330f3842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f330f32c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f330fc9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f333ff88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f333ff88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f333ff88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f333ff88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f333ff88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f333ff88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f333ff88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f333ff88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f333ff88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f333ff88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f3361fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f332f59578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f332f645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f332d0fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f332d0fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f332d10808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f332d0f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f332d0f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f332d0f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f3375f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f3375fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f3375e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f33760cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f24fe2fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f330f3143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0x80,0xed,0x98,0x80,0xed,0x90,0xa0,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0xed,0x98,0x80,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0x98,0x80,0xed,0x90,0xed, Step #5: \363\240\200\200\355\230\200\355\220\240\355\230\200\355\220\200\355\355\230\200\355\230\200\355\220\200\355\230\200\355\220\355 Step #5: artifact_prefix='./'; Test unit written to ./oom-0ae00f9dfcb2b7d27ad373d4d7189c3adb7e56d9 Step #5: Base64: 86CAgO2YgO2QoO2YgO2QgO3tmIDtmIDtkIDtmIDtkO0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2651 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 727063183 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5587308b2d60, 0x558730a9b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558730a9b720,0x5587329252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0ae00f9dfcb2b7d27ad373d4d7189c3adb7e56d9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3213 processed earlier; will process 7763 files now Step #5: ==95504== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5587273f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55872da30728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55872da1346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55872da1338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5587273fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55872735c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558727356c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5587273ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55872a41c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55872a41c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55872a41c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55872a41c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55872a41c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55872a41c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55872a41c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55872a41c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55872a41c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55872a41c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55872c62145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55872937d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5587293885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558729133d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558729133d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558729134808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558729133944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558729133944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558729133944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55872da1594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55872da1e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55872da06529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55872da30fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7de2e2b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55872735543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdf,0x83,0xdf,0x83,0xdf,0x83,0xdf,0x83,0xdf,0x84,0xdf,0x84,0xdf,0x84,0xdf,0x83,0xdf,0x84,0xdf,0x84,0xdf,0x84,0xdf,0x83,0xdf,0x84,0xdf,0x84,0xdf,0x84,0xdf,0x84, Step #5: \337\203\337\203\337\203\337\203\337\204\337\204\337\204\337\203\337\204\337\204\337\204\337\203\337\204\337\204\337\204\337\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-b614ec9fffdfc7faeee54ddb780d65087bcabb79 Step #5: Base64: 34Pfg9+D34PfhN+E34Tfg9+E34TfhN+D34TfhN+E34Q= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2652 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 727573253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619a86bed60, 0x5619a88a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619a88a7720,0x5619aa7312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b614ec9fffdfc7faeee54ddb780d65087bcabb79' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3214 processed earlier; will process 7762 files now Step #5: ==95540== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56199f2012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619a583c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619a581f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619a581f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56199f207652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56199f16842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56199f162c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56199f1f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619a22288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619a22288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619a22288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619a22288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619a22288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619a22288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619a22288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619a22288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619a22288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619a22288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619a442d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619a1189578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619a11945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619a0f3fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619a0f3fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619a0f40808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619a0f3f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619a0f3f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619a0f3f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619a582194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619a582a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619a5812529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619a583cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f376e7f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56199f16143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0xa,0xcd,0x8f,0x2e,0x2e,0xa,0xcd,0x9f,0x2e,0xa,0xcd,0x8e,0x2e,0xa,0xcd,0x8f,0x2e,0xa,0xcd,0x8f,0x2e,0xa,0x6d,0xa,0xcd,0x9f,0x2e,0xa,0xcd,0x8e,0x2e, Step #5: .\012\315\217..\012\315\237.\012\315\216.\012\315\217.\012\315\217.\012m\012\315\237.\012\315\216. Step #5: artifact_prefix='./'; Test unit written to ./oom-60a7a9e2beca729453f7d20539fd3de5d425140a Step #5: Base64: LgrNjy4uCs2fLgrNji4KzY8uCs2PLgptCs2fLgrNji4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2653 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 728071707 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562f30b9ed60, 0x562f30d8771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562f30d87720,0x562f32c112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/60a7a9e2beca729453f7d20539fd3de5d425140a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3215 processed earlier; will process 7761 files now Step #5: #1 pulse cov: 3438 ft: 3439 exec/s: 0 rss: 169Mb Step #5: #2 pulse cov: 11381 ft: 12157 exec/s: 0 rss: 189Mb Step #5: ==95576== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562f276e12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562f2dd1c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562f2dcff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562f2dcff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562f276e7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562f2764842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562f27642c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562f276d9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562f2a7088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562f2a7088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562f2a7088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562f2a7088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562f2a7088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562f2a7088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562f2a7088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562f2a7088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562f2a7088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562f2a7088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562f2c90d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562f29669578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562f296745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562f2941fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562f2941fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562f29420808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562f2941f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562f2941f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562f2941f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562f2dd0194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562f2dd0a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562f2dcf2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562f2dd1cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f49d3676082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562f2764143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60,0x5f,0x60, Step #5: _`_`_`_`_`_`_`_`_`_`_`_`_`_`_`_` Step #5: artifact_prefix='./'; Test unit written to ./oom-de5d0c6809241afbfe6067efb22614c1acbfbb49 Step #5: Base64: X2BfYF9gX2BfYF9gX2BfYF9gX2BfYF9gX2BfYF9gX2A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2654 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 728806671 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56292cb63d60, 0x56292cd4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56292cd4c720,0x56292ebd62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/de5d0c6809241afbfe6067efb22614c1acbfbb49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3218 processed earlier; will process 7758 files now Step #5: ==95612== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5629236a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562929ce1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562929cc446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562929cc438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5629236ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56292360d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562923607c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56292369e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629266cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629266cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629266cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629266cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629266cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629266cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629266cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629266cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629266cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629266cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5629288d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56292562e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5629256395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5629253e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5629253e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5629253e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5629253e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5629253e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5629253e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562929cc694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562929ccf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562929cb7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562929ce1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f29ecfba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56292360643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x2,0x8,0x42,0x42,0x2,0x42,0x0,0x42,0x2,0x3a,0x0,0x42,0x2,0x8,0x42,0x42,0x2,0x42,0x0,0x42,0x2,0x42,0x0,0x42,0x2,0x42,0x0,0x42,0x2,0x42,0x42, Step #5: B\002\010BB\002B\000B\002:\000B\002\010BB\002B\000B\002B\000B\002B\000B\002BB Step #5: artifact_prefix='./'; Test unit written to ./oom-ad5edb7e306521af482a3cb148ff46d593153e4f Step #5: Base64: QgIIQkICQgBCAjoAQgIIQkICQgBCAkIAQgJCAEICQkI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2655 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 729302025 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bf0c308d60, 0x55bf0c4f171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bf0c4f1720,0x55bf0e37b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ad5edb7e306521af482a3cb148ff46d593153e4f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3219 processed earlier; will process 7757 files now Step #5: ==95648== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bf02e4b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bf09486728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bf0946946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bf0946938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bf02e51652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bf02db242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bf02dacc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bf02e43595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bf05e728c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bf05e728c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bf05e728c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bf05e728c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bf05e728c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bf05e728c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bf05e728c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bf05e728c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bf05e728c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bf05e728c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bf0807745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bf04dd3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bf04dde5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bf04b89d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bf04b89d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bf04b8a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bf04b89944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bf04b89944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bf04b89944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bf0946b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bf094747b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bf0945c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bf09486fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc7d3240082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bf02dab43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9,0x2d,0x9, Step #5: -\011-\011-\011-\011-\011-\011-\011-\011-\011-\011-\011-\011-\011-\011-\011-\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-b36b532f928f74cde630920d81f79228ceab453c Step #5: Base64: LQktCS0JLQktCS0JLQktCS0JLQktCS0JLQktCS0JLQk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2656 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 729836867 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56001a363d60, 0x56001a54c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56001a54c720,0x56001c3d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b36b532f928f74cde630920d81f79228ceab453c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3220 processed earlier; will process 7756 files now Step #5: ==95684== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560010ea62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5600174e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5600174c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5600174c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560010eac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560010e0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560010e07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560010e9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560013ecd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560013ecd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560013ecd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560013ecd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560013ecd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560013ecd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560013ecd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560013ecd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560013ecd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560013ecd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600160d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560012e2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560012e395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560012be4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560012be4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560012be5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560012be4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560012be4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560012be4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5600174c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5600174cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5600174b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5600174e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb3b829c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560010e0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xb7,0xba,0xd7,0x81,0xe0,0xbe,0x81,0xe0,0xbc,0x81,0xe0,0xbe,0x81,0xe0,0xbe,0x81,0xe0,0xbe,0x81,0xe0,0xbe,0x81,0xe0,0xbe,0x81,0xe0,0xbe,0x81, Step #5: ws:\357\267\272\327\201\340\276\201\340\274\201\340\276\201\340\276\201\340\276\201\340\276\201\340\276\201\340\276\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-14e1caedef76b77ba0f8856ec35a6cfca1284ab4 Step #5: Base64: d3M677e614HgvoHgvIHgvoHgvoHgvoHgvoHgvoHgvoE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2657 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 730349615 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c7fbb91d60, 0x55c7fbd7a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c7fbd7a720,0x55c7fdc042c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/14e1caedef76b77ba0f8856ec35a6cfca1284ab4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3221 processed earlier; will process 7755 files now Step #5: ==95720== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c7f26d42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c7f8d0f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c7f8cf246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c7f8cf238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c7f26da652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c7f263b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c7f2635c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c7f26cc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c7f56fb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c7f56fb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c7f56fb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c7f56fb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c7f56fb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c7f56fb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c7f56fb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c7f56fb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c7f56fb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c7f56fb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c7f790045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c7f465c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c7f46675a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c7f4412d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c7f4412d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c7f4413808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c7f4412944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c7f4412944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c7f4412944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c7f8cf494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c7f8cfd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c7f8ce5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c7f8d0ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e4a700082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c7f263443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb,0xc3,0xbc,0xd6,0xbb, Step #5: \303\274\326\273\303\274\326\273\303\274\326\273\303\274\326\273\303\274\326\273\303\274\326\273\303\274\326\273\303\274\326\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-6bd635893a2ab31f78df75e492c017f64ce2e7cd Step #5: Base64: w7zWu8O81rvDvNa7w7zWu8O81rvDvNa7w7zWu8O81rs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2658 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 730849772 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5640e574ad60, 0x5640e593371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5640e5933720,0x5640e77bd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6bd635893a2ab31f78df75e492c017f64ce2e7cd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3222 processed earlier; will process 7754 files now Step #5: ==95756== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5640dc28d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5640e28c8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5640e28ab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5640e28ab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5640dc293652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5640dc1f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640dc1eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5640dc285595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5640df2b48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5640df2b48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5640df2b48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5640df2b48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5640df2b48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5640df2b48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5640df2b48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5640df2b48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5640df2b48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5640df2b48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5640e14b945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5640de215578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5640de2205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5640ddfcbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5640ddfcbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5640ddfcc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5640ddfcb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5640ddfcb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5640ddfcb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5640e28ad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5640e28b67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5640e289e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5640e28c8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27b3171082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5640dc1ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b,0x25,0xda,0xba,0x3b, Step #5: %\332\272;%\332\272;%\332\272;%\332\272;%\332\272;%\332\272;%\332\272;%\332\272; Step #5: artifact_prefix='./'; Test unit written to ./oom-8d683b73d4e448a398dd30b7d370afa12187d8c2 Step #5: Base64: Jdq6OyXaujsl2ro7Jdq6OyXaujsl2ro7Jdq6OyXaujs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2659 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 731346849 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606f6661d60, 0x5606f684a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606f684a720,0x5606f86d42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d683b73d4e448a398dd30b7d370afa12187d8c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3223 processed earlier; will process 7753 files now Step #5: ==95792== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606ed1a42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5606f37df728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5606f37c246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5606f37c238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606ed1aa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5606ed10b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5606ed105c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606ed19c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5606f01cb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5606f01cb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5606f01cb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5606f01cb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5606f01cb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5606f01cb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5606f01cb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5606f01cb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5606f01cb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5606f01cb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606f23d045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5606ef12c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5606ef1375a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5606eeee2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5606eeee2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5606eeee3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5606eeee2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5606eeee2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5606eeee2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5606f37c494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606f37cd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5606f37b5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5606f37dffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbf4612e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5606ed10443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xa,0xd8,0x80,0xe0,0xb9,0x82,0x4,0x0,0x0,0xa,0x2d,0x20,0x2b,0x2f,0x76,0x38,0x0,0x0,0x3a,0xd8,0x80,0x4,0x25,0x0,0x1,0x0,0x25,0x0,0x1,0x0,0xa0, Step #5: \000\012\330\200\340\271\202\004\000\000\012- +/v8\000\000:\330\200\004%\000\001\000%\000\001\000\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-249e4126f5fe66a91d169e955ba357b07035d4b2 Step #5: Base64: AArYgOC5ggQAAAotICsvdjgAADrYgAQlAAEAJQABAKA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2660 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 731857133 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5615ab2d7d60, 0x5615ab4c071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5615ab4c0720,0x5615ad34a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/249e4126f5fe66a91d169e955ba357b07035d4b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3224 processed earlier; will process 7752 files now Step #5: ==95828== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615a1e1a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5615a8455728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5615a843846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5615a843838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5615a1e20652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615a1d8142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615a1d7bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5615a1e12595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615a4e418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615a4e418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615a4e418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615a4e418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615a4e418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615a4e418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615a4e418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615a4e418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615a4e418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615a4e418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5615a704645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5615a3da2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615a3dad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615a3b58d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615a3b58d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615a3b59808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615a3b58944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615a3b58944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615a3b58944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5615a843a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5615a84437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5615a842b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5615a8455fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd421b69082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615a1d7a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x16,0x22,0x2a,0xd0,0xa4,0xd0,0xae,0x2a,0xd0,0xa4,0xd0,0xae,0x16,0x22,0x28,0xd0,0xa4,0xd0,0xae,0x2a,0xd0,0xa4,0xd0,0xae,0x2a,0x0,0x5b,0x5c,0x2a,0x5b, Step #5: HU\026\"*\320\244\320\256*\320\244\320\256\026\"(\320\244\320\256*\320\244\320\256*\000[\\*[ Step #5: artifact_prefix='./'; Test unit written to ./oom-38c8993901d1e29c8ddfb67be4d38e223aa17e26 Step #5: Base64: SFUWIirQpNCuKtCk0K4WIijQpNCuKtCk0K4qAFtcKls= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2661 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 732366204 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558c7c697d60, 0x558c7c88071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558c7c880720,0x558c7e70a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/38c8993901d1e29c8ddfb67be4d38e223aa17e26' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3225 processed earlier; will process 7751 files now Step #5: ==95864== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558c731da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558c79815728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558c797f846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558c797f838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558c731e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558c7314142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558c7313bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558c731d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558c762018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558c762018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558c762018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558c762018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558c762018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558c762018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558c762018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558c762018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558c762018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558c762018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558c7840645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558c75162578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558c7516d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558c74f18d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558c74f18d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558c74f19808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558c74f18944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558c74f18944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558c74f18944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558c797fa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558c798037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558c797eb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558c79815fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f32ce276082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558c7313a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0xa,0x3d,0xcc,0xbb,0x41,0x2d,0x2d,0x2d,0x41,0x73,0x4b,0x3a,0x65,0xa,0x2d,0x41,0x3f,0x41,0x73,0x63,0x65,0x7a,0x74,0x7a,0x74,0x20,0x6a,0x4c,0x2d,0x2d,0x2d, Step #5: 0\012=\314\273A---AsK:e\012-A?Asceztzt jL--- Step #5: artifact_prefix='./'; Test unit written to ./oom-ea050422a47d35a830e7b2e7c9766b706c970590 Step #5: Base64: MAo9zLtBLS0tQXNLOmUKLUE/QXNjZXp0enQgakwtLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2662 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 732874040 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cb4fe55d60, 0x55cb5003e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cb5003e720,0x55cb51ec82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ea050422a47d35a830e7b2e7c9766b706c970590' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3226 processed earlier; will process 7750 files now Step #5: ==95900== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cb469982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cb4cfd3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cb4cfb646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cb4cfb638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cb4699e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cb468ff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cb468f9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cb46990595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cb499bf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cb499bf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cb499bf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cb499bf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cb499bf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cb499bf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cb499bf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cb499bf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cb499bf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cb499bf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cb4bbc445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cb48920578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cb4892b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cb486d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cb486d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cb486d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cb486d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cb486d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cb486d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cb4cfb894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cb4cfc17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cb4cfa9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cb4cfd3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f762cfd4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cb468f843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x58, Step #5: - - - - - - - - - - - - - - - -X Step #5: artifact_prefix='./'; Test unit written to ./oom-486e2381b207d10f45fe85ff38b783946b30f91e Step #5: Base64: LSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLVg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2663 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 733404165 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557603060d60, 0x55760324971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557603249720,0x5576050d32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/486e2381b207d10f45fe85ff38b783946b30f91e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3227 processed earlier; will process 7749 files now Step #5: ==95936== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5575f9ba32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5576001de728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5576001c146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5576001c138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5575f9ba9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5575f9b0a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5575f9b04c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5575f9b9b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5575fcbca8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5575fcbca8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5575fcbca8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5575fcbca8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5575fcbca8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5575fcbca8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5575fcbca8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5575fcbca8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5575fcbca8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5575fcbca8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5575fedcf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5575fbb2b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5575fbb365a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5575fb8e1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5575fb8e1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5575fb8e2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5575fb8e1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5575fb8e1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5575fb8e1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5576001c394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5576001cc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5576001b4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5576001defa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f67a0156082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5575f9b0343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30,0x5c,0x30, Step #5: \\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0\\0 Step #5: artifact_prefix='./'; Test unit written to ./oom-062e65a8d0cd937d074357c6ec3275c04e1750b8 Step #5: Base64: XDBcMFwwXDBcMFwwXDBcMFwwXDBcMFwwXDBcMFwwXDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2664 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 733916908 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555e52c9dd60, 0x555e52e8671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555e52e86720,0x555e54d102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/062e65a8d0cd937d074357c6ec3275c04e1750b8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3228 processed earlier; will process 7748 files now Step #5: ==95972== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555e497e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555e4fe1b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555e4fdfe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555e4fdfe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555e497e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555e4974742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555e49741c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555e497d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555e4c8078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555e4c8078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555e4c8078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555e4c8078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555e4c8078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555e4c8078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555e4c8078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555e4c8078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555e4c8078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555e4c8078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555e4ea0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555e4b768578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555e4b7735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555e4b51ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555e4b51ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555e4b51f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555e4b51e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555e4b51e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555e4b51e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555e4fe0094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555e4fe097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555e4fdf1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555e4fe1bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe617daf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555e4974043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd, Step #5: \015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-0560a3616b976584cd04aea10de22a1311f7c34a Step #5: Base64: DQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2665 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 734407181 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563071a0ed60, 0x563071bf771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563071bf7720,0x563073a812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0560a3616b976584cd04aea10de22a1311f7c34a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3229 processed earlier; will process 7747 files now Step #5: ==96008== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5630685512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56306eb8c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56306eb6f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56306eb6f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563068557652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5630684b842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5630684b2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563068549595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56306b5788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56306b5788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56306b5788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56306b5788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56306b5788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56306b5788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56306b5788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56306b5788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56306b5788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56306b5788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56306d77d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56306a4d9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56306a4e45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56306a28fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56306a28fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56306a290808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56306a28f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56306a28f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56306a28f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56306eb7194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56306eb7a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56306eb62529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56306eb8cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e798a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5630684b143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x2d,0x31,0x2d,0x32,0x31,0x39,0x3a,0x34,0x3a,0x32,0xd1,0x91,0xd9,0x92,0xd9,0x8e,0xd8,0x91,0xd9,0x91,0xd9,0x8e,0xd8,0x91,0xd9,0x92,0xd9,0x8e,0xd9,0x91,0x7, Step #5: 6-1-219:4:2\321\221\331\222\331\216\330\221\331\221\331\216\330\221\331\222\331\216\331\221\007 Step #5: artifact_prefix='./'; Test unit written to ./oom-342494edb043dafa073a11d38e3f5140fee12362 Step #5: Base64: Ni0xLTIxOTo0OjLRkdmS2Y7YkdmR2Y7YkdmS2Y7ZkQc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2666 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 734912048 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b7ead9d60, 0x563b7ecc271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b7ecc2720,0x563b80b4c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/342494edb043dafa073a11d38e3f5140fee12362' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3230 processed earlier; will process 7746 files now Step #5: ==96044== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563b7561c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b7bc57728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b7bc3a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b7bc3a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563b75622652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563b7558342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563b7557dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563b75614595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b786438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b786438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b786438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b786438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b786438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b786438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b786438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b786438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b786438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b786438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b7a84845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b775a4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b775af5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b7735ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b7735ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b7735b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b7735a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b7735a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b7735a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b7bc3c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b7bc457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b7bc2d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b7bc57fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1e2a585082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563b7557c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5b,0x5b,0x3f,0x26,0x3f,0x2c,0x3f,0x24,0x2c,0x3f,0x2c,0x26,0x3f,0x2c,0x3d,0x24,0x2c,0x26,0x3f,0x2c,0x3f,0x2c,0x3f,0x26,0x3f,0x2c,0x3d,0x2c,0x3f,0x5d,0x2c, Step #5: [[[?&?,?$,?,&?,=$,&?,?,?&?,=,?], Step #5: artifact_prefix='./'; Test unit written to ./oom-d1ec2787ae225845adf32b9ca433936940486c42 Step #5: Base64: W1tbPyY/LD8kLD8sJj8sPSQsJj8sPyw/Jj8sPSw/XSw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2667 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 735409966 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557359617d60, 0x55735980071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557359800720,0x55735b68a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d1ec2787ae225845adf32b9ca433936940486c42' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3231 processed earlier; will process 7745 files now Step #5: ==96080== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55735015a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557356795728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55735677846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55735677838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557350160652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5573500c142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5573500bbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557350152595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5573531818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5573531818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5573531818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5573531818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5573531818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5573531818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5573531818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5573531818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5573531818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5573531818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55735538645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5573520e2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5573520ed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557351e98d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557351e98d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557351e99808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557351e98944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557351e98944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557351e98944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55735677a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5573567837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55735676b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557356795fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff413c59082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5573500ba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x49,0x53,0x4f,0x2d,0x38,0x38,0x35,0x39,0x2d,0x31,0x22,0x3f,0x3e,0xd2,0x63,0xd2, Step #5: \322c\322 Step #5: artifact_prefix='./'; Test unit written to ./oom-cb6ba4abfad876566c2def7726ff5e33a3dc9a2b Step #5: Base64: PD94bWwgZW5jb2Rpbmc9IklTTy04ODU5LTEiPz7SY9I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2668 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 735914002 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56299f9a9d60, 0x56299fb9271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56299fb92720,0x5629a1a1c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cb6ba4abfad876566c2def7726ff5e33a3dc9a2b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3232 processed earlier; will process 7744 files now Step #5: ==96116== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5629964ec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56299cb27728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56299cb0a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56299cb0a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5629964f2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56299645342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56299644dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5629964e4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629995138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629995138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629995138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629995138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629995138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629995138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629995138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629995138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629995138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629995138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56299b71845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562998474578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56299847f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56299822ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56299822ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56299822b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56299822a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56299822a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56299822a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56299cb0c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56299cb157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56299cafd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56299cb27fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faa4fe65082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56299644c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0xa,0x22,0xa,0x5f,0x22,0x22,0x22,0x10,0x0,0x3f,0x28,0x0,0x75,0x5f,0xa,0x22,0xa,0x5f,0x22,0x22,0x22,0x10,0x0,0x3f,0x28,0x0,0x75,0x73,0x73,0x2e,0x63, Step #5: _\012\"\012_\"\"\"\020\000?(\000u_\012\"\012_\"\"\"\020\000?(\000uss.c Step #5: artifact_prefix='./'; Test unit written to ./oom-79daf5e9af7d8e59ccbfd833e26be75b8510e5f8 Step #5: Base64: XwoiCl8iIiIQAD8oAHVfCiIKXyIiIhAAPygAdXNzLmM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2669 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 736419677 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ac2210d60, 0x562ac23f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ac23f9720,0x562ac42832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/79daf5e9af7d8e59ccbfd833e26be75b8510e5f8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3233 processed earlier; will process 7743 files now Step #5: ==96152== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ab8d532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562abf38e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562abf37146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562abf37138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ab8d59652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ab8cba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ab8cb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ab8d4b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562abbd7a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562abbd7a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562abbd7a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562abbd7a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562abbd7a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562abbd7a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562abbd7a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562abbd7a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562abbd7a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562abbd7a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562abdf7f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562abacdb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562abace65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562abaa91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562abaa91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562abaa92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562abaa91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562abaa91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562abaa91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562abf37394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562abf37c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562abf364529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562abf38efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f147dbea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ab8cb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x90,0xa,0xc5,0x90,0xa,0xcd,0x90,0xa,0xcd,0x90,0xa,0xcd,0x90,0xa,0xcd,0x8a,0xa,0xcd,0x90,0xa,0xed,0x96,0x90,0xed,0x90,0x90,0xa,0xed,0x96,0x90,0xed, Step #5: \315\220\012\305\220\012\315\220\012\315\220\012\315\220\012\315\212\012\315\220\012\355\226\220\355\220\220\012\355\226\220\355 Step #5: artifact_prefix='./'; Test unit written to ./oom-9b807cbb09c1914f9e88155138c6e403d12a1265 Step #5: Base64: zZAKxZAKzZAKzZAKzZAKzYoKzZAK7ZaQ7ZCQCu2WkO0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2670 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 736928537 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564f22ffbd60, 0x564f231e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564f231e4720,0x564f2506e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9b807cbb09c1914f9e88155138c6e403d12a1265' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3234 processed earlier; will process 7742 files now Step #5: ==96188== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564f19b3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564f20179728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564f2015c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564f2015c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564f19b44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564f19aa542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564f19a9fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564f19b36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564f1cb658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564f1cb658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564f1cb658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564f1cb658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564f1cb658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564f1cb658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564f1cb658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564f1cb658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564f1cb658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564f1cb658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564f1ed6a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564f1bac6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564f1bad15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564f1b87cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564f1b87cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564f1b87d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564f1b87c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564f1b87c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564f1b87c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564f2015e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564f201677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564f2014f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564f20179fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1c02221082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564f19a9e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x74,0x24,0x3d,0x7e,0x2d,0x3d,0x3d,0x1,0x79,0x0,0x0,0x0,0x0,0x29,0x24, Step #5: tttttttttttttttttt$=~-==\001y\000\000\000\000)$ Step #5: artifact_prefix='./'; Test unit written to ./oom-106b16270044bfa302253fb8d0977e2144ecb346 Step #5: Base64: dHR0dHR0dHR0dHR0dHR0dHR0JD1+LT09AXkAAAAAKSQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2671 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 737443226 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5625a548ed60, 0x5625a567771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5625a5677720,0x5625a75012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/106b16270044bfa302253fb8d0977e2144ecb346' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3235 processed earlier; will process 7741 files now Step #5: #1 pulse cov: 3505 ft: 3506 exec/s: 0 rss: 171Mb Step #5: ==96224== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56259bfd12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5625a260c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5625a25ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5625a25ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56259bfd7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56259bf3842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56259bf32c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56259bfc9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56259eff88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56259eff88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56259eff88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56259eff88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56259eff88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56259eff88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56259eff88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56259eff88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56259eff88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56259eff88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5625a11fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56259df59578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56259df645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56259dd0fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56259dd0fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56259dd10808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56259dd0f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56259dd0f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56259dd0f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5625a25f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5625a25fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5625a25e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5625a260cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8fbf92f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56259bf3143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11,0x0,0x11, Step #5: \002\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021\000\021 Step #5: artifact_prefix='./'; Test unit written to ./oom-89497d53eb0e6d4fea6a96ba223f7a493903d9e3 Step #5: Base64: AhEAEQARABEAEQARABEAEQARABEAEQARABEAEQARABE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2672 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 737991274 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562c8df9cd60, 0x562c8e18571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562c8e185720,0x562c9000f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/89497d53eb0e6d4fea6a96ba223f7a493903d9e3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3237 processed earlier; will process 7739 files now Step #5: ==96260== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562c84adf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562c8b11a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562c8b0fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562c8b0fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562c84ae5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562c84a4642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562c84a40c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562c84ad7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562c87b068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562c87b068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562c87b068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562c87b068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562c87b068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562c87b068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562c87b068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562c87b068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562c87b068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562c87b068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562c89d0b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562c86a67578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562c86a725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562c8681dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562c8681dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562c8681e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562c8681d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562c8681d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562c8681d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562c8b0ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562c8b1087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562c8b0f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562c8b11afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb0d0b5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562c84a3f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0xa1,0xcd,0xa1,0xcd,0x80,0xcd,0xa1,0xcd,0xa1,0xcd,0xa1,0xcd,0xa1,0xcd,0x80,0xcd,0xa1,0xcd,0xa1,0xcd,0xa1,0xcd,0x80,0xcd,0xa1,0xcd,0x80,0xcd,0xa1,0xcd,0x80, Step #5: \315\241\315\241\315\200\315\241\315\241\315\241\315\241\315\200\315\241\315\241\315\241\315\200\315\241\315\200\315\241\315\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-95430593ed2f4d7f388cd05543b2a244ddf54f9f Step #5: Base64: zaHNoc2AzaHNoc2hzaHNgM2hzaHNoc2AzaHNgM2hzYA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2673 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 738499220 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562d0c082d60, 0x562d0c26b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562d0c26b720,0x562d0e0f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/95430593ed2f4d7f388cd05543b2a244ddf54f9f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3238 processed earlier; will process 7738 files now Step #5: ==96296== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562d02bc52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562d09200728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562d091e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562d091e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562d02bcb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562d02b2c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562d02b26c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562d02bbd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562d05bec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562d05bec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562d05bec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562d05bec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562d05bec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562d05bec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562d05bec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562d05bec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562d05bec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562d05bec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562d07df145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562d04b4d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562d04b585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562d04903d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562d04903d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562d04904808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562d04903944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562d04903944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562d04903944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562d091e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562d091ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562d091d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562d09200fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1284fd2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562d02b2543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa, Step #5: \012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-973edf66520ca740c6f56e48ffa5bed0cd6df2a3 Step #5: Base64: CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2674 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 738998355 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f21f3afd60, 0x55f21f59871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f21f598720,0x55f2214222c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/973edf66520ca740c6f56e48ffa5bed0cd6df2a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3239 processed earlier; will process 7737 files now Step #5: ==96332== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f215ef22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f21c52d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f21c51046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f21c51038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f215ef8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f215e5942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f215e53c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f215eea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f218f198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f218f198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f218f198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f218f198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f218f198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f218f198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f218f198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f218f198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f218f198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f218f198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f21b11e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f217e7a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f217e855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f217c30d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f217c30d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f217c31808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f217c30944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f217c30944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f217c30944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f21c51294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f21c51b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f21c503529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f21c52dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f4c28c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f215e5243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x7e,0x7e,0x7e,0x7e,0x7e,0x24,0x4,0x32,0x34,0x2d,0x3d,0x3e,0x34,0x2d,0x7d,0x3e,0xde,0xae,0xde,0xae,0x2d,0x3d,0x3e,0x2d,0x3d,0x24,0xb2,0xb2,0xb2,0xb2,0x24, Step #5: '~~~~~$\00424-=>4-}>\336\256\336\256-=>-=$\262\262\262\262$ Step #5: artifact_prefix='./'; Test unit written to ./oom-2e7317eaaf410953cf1e5e9e9974a0717f24315c Step #5: Base64: J35+fn5+JAQyNC09PjQtfT7ert6uLT0+LT0ksrKysiQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2675 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 739497881 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556ab894ed60, 0x556ab8b3771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556ab8b37720,0x556aba9c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2e7317eaaf410953cf1e5e9e9974a0717f24315c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3240 processed earlier; will process 7736 files now Step #5: ==96368== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556aaf4912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556ab5acc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556ab5aaf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556ab5aaf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556aaf497652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556aaf3f842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556aaf3f2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556aaf489595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556ab24b88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556ab24b88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556ab24b88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556ab24b88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556ab24b88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556ab24b88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556ab24b88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556ab24b88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556ab24b88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556ab24b88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556ab46bd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556ab1419578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556ab14245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556ab11cfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556ab11cfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556ab11d0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556ab11cf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556ab11cf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556ab11cf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556ab5ab194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556ab5aba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556ab5aa2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556ab5accfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe1d691d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556aaf3f143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x0,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x61,0xa,0x64,0xa,0x48,0xa,0x49,0xa,0x68,0xa,0x68,0xa,0xa,0x0, Step #5: ------BEGIN\000-----\012a\012d\012H\012I\012h\012h\012\012\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-2f3871d13da3a36b67ac69c1c9b25c41e901490a Step #5: Base64: LS0tLS0tQkVHSU4ALS0tLS0KYQpkCkgKSQpoCmgKCgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2676 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 740005430 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5601faf99d60, 0x5601fb18271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5601fb182720,0x5601fd00c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f3871d13da3a36b67ac69c1c9b25c41e901490a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3241 processed earlier; will process 7735 files now Step #5: ==96404== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5601f1adc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5601f8117728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5601f80fa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5601f80fa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5601f1ae2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5601f1a4342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5601f1a3dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5601f1ad4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601f4b038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601f4b038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601f4b038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601f4b038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601f4b038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601f4b038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601f4b038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601f4b038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601f4b038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601f4b038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601f6d0845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5601f3a64578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601f3a6f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601f381ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601f381ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601f381b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601f381a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601f381a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601f381a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5601f80fc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5601f81057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5601f80ed529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5601f8117fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5365839082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5601f1a3c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x63,0x3e,0xdb,0xa5,0xd,0xdb,0xa5,0x21,0xd,0xdb,0xa5,0xd,0xdb,0xa5,0x3c,0x73,0x3e,0xdb,0xa5,0xd,0xdb,0xa5,0x3c,0x73,0x3e,0xdb,0xa5,0xd,0xdb,0xa5,0x72, Step #5: \333\245\015\333\245!\015\333\245\015\333\245\333\245\015\333\245\333\245\015\333\245r Step #5: artifact_prefix='./'; Test unit written to ./oom-a93bf956c0692ae3159e7e66dce7ce2e85bf7953 Step #5: Base64: PGM+26UN26UhDdulDdulPHM+26UN26U8cz7bpQ3bpXI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2677 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 740512522 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56067463bd60, 0x56067482471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560674824720,0x5606766ae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a93bf956c0692ae3159e7e66dce7ce2e85bf7953' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3242 processed earlier; will process 7734 files now Step #5: ==96440== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56066b17e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5606717b9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56067179c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56067179c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56066b184652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56066b0e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56066b0dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56066b176595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56066e1a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56066e1a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56066e1a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56066e1a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56066e1a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56066e1a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56066e1a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56066e1a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56066e1a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56066e1a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606703aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56066d106578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56066d1115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56066cebcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56066cebcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56066cebd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56066cebc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56066cebc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56066cebc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56067179e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606717a77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56067178f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5606717b9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f690a23b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56066b0de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x4f,0x27,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xca,0xb6,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x5c,0x2f,0xab,0xad,0x27,0x5c, Step #5: dO'\321\241'E'\\\321\241'E'\\\312\266\321\241'E'\\\321\241'\\/\253\255'\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-cfd48b8fa312854eb08f47105a2b3e919dab0d96 Step #5: Base64: ZE8n0aEnRSdc0aEnRSdcyrbRoSdFJ1zRoSdcL6utJ1w= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2678 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 741013977 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5602de9bed60, 0x5602deba771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5602deba7720,0x5602e0a312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cfd48b8fa312854eb08f47105a2b3e919dab0d96' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3243 processed earlier; will process 7733 files now Step #5: ==96476== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5602d55012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5602dbb3c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5602dbb1f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5602dbb1f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5602d5507652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5602d546842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5602d5462c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5602d54f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5602d85288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5602d85288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5602d85288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5602d85288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5602d85288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5602d85288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5602d85288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5602d85288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5602d85288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5602d85288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5602da72d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5602d7489578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5602d74945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5602d723fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5602d723fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5602d7240808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5602d723f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5602d723f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5602d723f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5602dbb2194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5602dbb2a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5602dbb12529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5602dbb3cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2141a7c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5602d546143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x45,0x78,0x65,0x63,0x5d,0x0,0x4f,0x4f,0x4d,0x53,0x63,0x6f,0x72,0x65,0x41,0x64,0x6a,0x75,0x73,0x74,0x3d,0x2d,0x31,0x34,0x34,0x30,0x35,0x34,0x39,0x30,0x30, Step #5: [Exec]\000OOMScoreAdjust=-144054900 Step #5: artifact_prefix='./'; Test unit written to ./oom-cc0ddec603de935544c63ecc61e353603fe7a5eb Step #5: Base64: W0V4ZWNdAE9PTVNjb3JlQWRqdXN0PS0xNDQwNTQ5MDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2679 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 741514717 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c531bf5d60, 0x55c531dde71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c531dde720,0x55c533c682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc0ddec603de935544c63ecc61e353603fe7a5eb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3244 processed earlier; will process 7732 files now Step #5: ==96512== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c5287382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c52ed73728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c52ed5646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c52ed5638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c52873e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c52869f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c528699c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c528730595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c52b75f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c52b75f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c52b75f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c52b75f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c52b75f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c52b75f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c52b75f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c52b75f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c52b75f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c52b75f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c52d96445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c52a6c0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c52a6cb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c52a476d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c52a476d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c52a477808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c52a476944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c52a476944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c52a476944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c52ed5894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c52ed617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c52ed49529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c52ed73fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08346b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c52869843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x7e,0x7e,0x7e,0x7e,0x7e,0x24,0x4,0x32,0x34,0x2d,0x3d,0x3e,0x34,0x2d,0x3d,0x3e,0xde,0xae,0xde,0xae,0x2d,0x3d,0x3e,0x2d,0x3d,0x24,0xb2,0xb2,0xb2,0xb2,0x24, Step #5: '~~~~~$\00424-=>4-=>\336\256\336\256-=>-=$\262\262\262\262$ Step #5: artifact_prefix='./'; Test unit written to ./oom-5d47d3dc4b3585090e4a4df2593659c9cb05ceeb Step #5: Base64: J35+fn5+JAQyNC09PjQtPT7ert6uLT0+LT0ksrKysiQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2680 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 742024606 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55be56da0d60, 0x55be56f8971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55be56f89720,0x55be58e132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5d47d3dc4b3585090e4a4df2593659c9cb05ceeb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3245 processed earlier; will process 7731 files now Step #5: ==96548== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55be4d8e32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55be53f1e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55be53f0146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55be53f0138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55be4d8e9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55be4d84a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55be4d844c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55be4d8db595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55be5090a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55be5090a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55be5090a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55be5090a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55be5090a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55be5090a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55be5090a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55be5090a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55be5090a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55be5090a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55be52b0f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55be4f86b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55be4f8765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55be4f621d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55be4f621d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55be4f622808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55be4f621944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55be4f621944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55be4f621944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55be53f0394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55be53f0c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55be53ef4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55be53f1efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a888a9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55be4d84343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e,0x5f,0x2e, Step #5: _._._._._._._._._._._._._._._._. Step #5: artifact_prefix='./'; Test unit written to ./oom-048db99a250b03ee9dbedb598f263ae6679ba54f Step #5: Base64: Xy5fLl8uXy5fLl8uXy5fLl8uXy5fLl8uXy5fLl8uXy4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2681 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 742534526 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5589304b7d60, 0x5589306a071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5589306a0720,0x55893252a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/048db99a250b03ee9dbedb598f263ae6679ba54f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3246 processed earlier; will process 7730 files now Step #5: #1 pulse cov: 11424 ft: 11425 exec/s: 0 rss: 191Mb Step #5: #2 pulse cov: 11976 ft: 12723 exec/s: 0 rss: 193Mb Step #5: ==96584== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558926ffa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55892d635728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55892d61846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55892d61838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558927000652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558926f6142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558926f5bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558926ff2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55892a0218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55892a0218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55892a0218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55892a0218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55892a0218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55892a0218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55892a0218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55892a0218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55892a0218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55892a0218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55892c22645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558928f82578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558928f8d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558928d38d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558928d38d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558928d39808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558928d38944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558928d38944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558928d38944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55892d61a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55892d6237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55892d60b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55892d635fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9ea67cd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558926f5a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xe1,0x9e,0x90,0xe1,0x9f,0x92,0x9,0xa,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \341\236\220\341\237\222\011\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-5d63a0764dbf2f5670d32b88c940831eb76f2c42 Step #5: Base64: PHN2Zz48dGV4dD7hnpDhn5IJCjwvdGV4dD48L3N2Zz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2682 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 743141288 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5646a19ebd60, 0x5646a1bd471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5646a1bd4720,0x5646a3a5e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5d63a0764dbf2f5670d32b88c940831eb76f2c42' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3249 processed earlier; will process 7727 files now Step #5: ==96620== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56469852e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56469eb69728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56469eb4c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56469eb4c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564698534652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56469849542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56469848fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564698526595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56469b5558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56469b5558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56469b5558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56469b5558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56469b5558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56469b5558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56469b5558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56469b5558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56469b5558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56469b5558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56469d75a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56469a4b6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56469a4c15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56469a26cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56469a26cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56469a26d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56469a26c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56469a26c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56469a26c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56469eb4e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56469eb577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56469eb3f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56469eb69fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd27eaad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56469848e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x62,0x0,0x0,0x6,0x0,0x0,0x60,0x0,0x0,0x0,0x2,0x60,0x0,0x0,0x0,0x2,0x41,0x41,0x33,0xf3,0xa0,0x81,0xa0, Step #5: \007\001\000\000\000\000\000\000\000b\000\000\006\000\000`\000\000\000\002`\000\000\000\002AA3\363\240\201\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-01c14fab294a148ace63bfe8c2ccb48fd2295d7d Step #5: Base64: BwEAAAAAAAAAYgAABgAAYAAAAAJgAAAAAkFBM/OggaA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2683 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 743770590 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5562cc27dd60, 0x5562cc46671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5562cc466720,0x5562ce2f02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/01c14fab294a148ace63bfe8c2ccb48fd2295d7d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3250 processed earlier; will process 7726 files now Step #5: ==96656== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5562c2dc02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5562c93fb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5562c93de46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5562c93de38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5562c2dc6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5562c2d2742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5562c2d21c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5562c2db8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5562c5de78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5562c5de78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5562c5de78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5562c5de78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5562c5de78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5562c5de78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5562c5de78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5562c5de78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5562c5de78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5562c5de78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5562c7fec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5562c4d48578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5562c4d535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5562c4afed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5562c4afed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5562c4aff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5562c4afe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5562c4afe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5562c4afe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5562c93e094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5562c93e97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5562c93d1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5562c93fbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc828a0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5562c2d2043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x0,0x6b,0x0,0x60,0x2b,0x2b,0x4a,0x9,0x29,0x4a,0x9,0x29,0xa,0x20,0x0,0x29,0xa,0x5c,0x9,0x60,0xa9,0x60,0x40,0x29,0xa,0x1,0x0,0x1d,0x9,0x2b,0x29, Step #5: \012\000k\000`++J\011)J\011)\012 \000)\012\\\011`\251`@)\012\001\000\035\011+) Step #5: artifact_prefix='./'; Test unit written to ./oom-3eca3885129e1b0702c271c2abc3bf84c4f2802a Step #5: Base64: CgBrAGArK0oJKUoJKQogACkKXAlgqWBAKQoBAB0JKyk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2684 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 744397472 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5592d78f1d60, 0x5592d7ada71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5592d7ada720,0x5592d99642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3eca3885129e1b0702c271c2abc3bf84c4f2802a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3251 processed earlier; will process 7725 files now Step #5: ==96692== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5592ce4342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5592d4a6f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5592d4a5246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5592d4a5238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5592ce43a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5592ce39b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5592ce395c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5592ce42c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5592d145b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5592d145b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5592d145b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5592d145b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5592d145b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5592d145b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5592d145b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5592d145b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5592d145b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5592d145b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5592d366045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5592d03bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5592d03c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5592d0172d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5592d0172d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5592d0173808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5592d0172944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5592d0172944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5592d0172944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5592d4a5494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5592d4a5d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5592d4a45529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5592d4a6ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc088bd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5592ce39443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x78,0x6e,0x2d,0x2d,0x31,0x51,0xe2,0x85,0xa5,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x58,0x61,0x61,0x65,0x61,0x61,0x61,0x61,0x53,0x41,0x61, Step #5: ws:xn--1Q\342\205\245aaaaaaaaaXaaeaaaaSAa Step #5: artifact_prefix='./'; Test unit written to ./oom-bf434a3ee8d0f4b9032ab7ae10097c47c7edf82e Step #5: Base64: d3M6eG4tLTFR4oWlYWFhYWFhYWFhWGFhZWFhYWFTQWE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2685 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 744897756 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b15608bd60, 0x55b15627471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b156274720,0x55b1580fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bf434a3ee8d0f4b9032ab7ae10097c47c7edf82e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3252 processed earlier; will process 7724 files now Step #5: ==96728== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b14cbce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b153209728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b1531ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b1531ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b14cbd4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b14cb3542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b14cb2fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b14cbc6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b14fbf58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b14fbf58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b14fbf58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b14fbf58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b14fbf58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b14fbf58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b14fbf58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b14fbf58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b14fbf58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b14fbf58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b151dfa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b14eb56578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b14eb615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b14e90cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b14e90cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b14e90d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b14e90c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b14e90c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b14e90c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b1531ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b1531f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b1531df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b153209fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f54ce9b6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b14cb2e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x69,0x66,0x3d,0x42,0x42,0xa,0x3d,0x20,0x20,0xa,0x3d,0x20,0x20,0x2e,0x1d,0x20,0x2e,0x2d,0x13,0x1d,0x60,0x1,0x2,0x0,0x6,0x60,0x20,0x0,0x65,0x20,0xa, Step #5: rif=BB\012= \012= .\035 .-\023\035`\001\002\000\006` \000e \012 Step #5: artifact_prefix='./'; Test unit written to ./oom-6740c81d8e978c1272c57a9f7a666c4f87df60e9 Step #5: Base64: cmlmPUJCCj0gIAo9ICAuHSAuLRMdYAECAAZgIABlIAo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2686 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 745522132 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564d8c63fd60, 0x564d8c82871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564d8c828720,0x564d8e6b22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6740c81d8e978c1272c57a9f7a666c4f87df60e9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3253 processed earlier; will process 7723 files now Step #5: ==96764== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564d831822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564d897bd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564d897a046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564d897a038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564d83188652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564d830e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564d830e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564d8317a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564d861a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564d861a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564d861a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564d861a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564d861a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564d861a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564d861a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564d861a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564d861a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564d861a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564d883ae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564d8510a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564d851155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564d84ec0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564d84ec0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564d84ec1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564d84ec0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564d84ec0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564d84ec0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564d897a294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564d897ab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564d89793529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564d897bdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b8bf06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564d830e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xce,0x8b,0xdb,0xbe,0xd7,0xa1,0xda,0xb5,0xc6,0xb0,0xd3,0x81,0xd3,0xb5,0xd2,0xab,0xd3,0x94,0xd3,0x81,0xd3,0xa5,0xd3,0xb9,0xd3,0x8b,0xd3,0xbe,0xd6,0xb0,0xd3,0x81, Step #5: \316\213\333\276\327\241\332\265\306\260\323\201\323\265\322\253\323\224\323\201\323\245\323\271\323\213\323\276\326\260\323\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-b57ca68746e87e5b086469173219b8811bb0dd8c Step #5: Base64: zovbvteh2rXGsNOB07XSq9OU04HTpdO504vTvtaw04E= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2687 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 746038746 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563ab9b8fd60, 0x563ab9d7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563ab9d78720,0x563abbc022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b57ca68746e87e5b086469173219b8811bb0dd8c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3254 processed earlier; will process 7722 files now Step #5: ==96800== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563ab06d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563ab6d0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563ab6cf046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563ab6cf038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563ab06d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563ab063942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563ab0633c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563ab06ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563ab36f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563ab36f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563ab36f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563ab36f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563ab36f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563ab36f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563ab36f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563ab36f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563ab36f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563ab36f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563ab58fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563ab265a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563ab26655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563ab2410d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563ab2410d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563ab2411808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563ab2410944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563ab2410944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563ab2410944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563ab6cf294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563ab6cfb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563ab6ce3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563ab6d0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffbdc7ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563ab063243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x8,0x30,0x10,0x2,0x0,0x30,0x15,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x2,0x30,0x0,0x31,0x2,0x30,0x0,0x31,0x0,0x31,0x0,0x31,0x2,0x30,0x0, Step #5: 0\0100\020\002\0000\0251\0001\0001\0001\0001\0020\0001\0020\0001\0001\0001\0020\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0b353495c984d2a90dd84bbba716e068bfd5d508 Step #5: Base64: MAgwEAIAMBUxADEAMQAxADECMAAxAjAAMQAxADECMAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2688 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 746542682 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dfb4d63d60, 0x55dfb4f4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dfb4f4c720,0x55dfb6dd62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0b353495c984d2a90dd84bbba716e068bfd5d508' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3255 processed earlier; will process 7721 files now Step #5: ==96836== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dfab8a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dfb1ee1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dfb1ec446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dfb1ec438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dfab8ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dfab80d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dfab807c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dfab89e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dfae8cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dfae8cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dfae8cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dfae8cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dfae8cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dfae8cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dfae8cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dfae8cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dfae8cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dfae8cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dfb0ad245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dfad82e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dfad8395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dfad5e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dfad5e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dfad5e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dfad5e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dfad5e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dfad5e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dfb1ec694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dfb1ecf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dfb1eb7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dfb1ee1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f103b309082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dfab80643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0xa,0xf0,0xa6,0xb9,0x86,0x0,0x29,0x74,0x0,0xf0,0xa6,0xb9,0x86,0x2,0x43,0xc3,0x80,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x2,0xf0,0xa2,0xb9,0x86,0x0, Step #5: \000\000\012\360\246\271\206\000)t\000\360\246\271\206\002C\303\200\000\000\000\000\000\000\000\002\360\242\271\206\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-6fcd8351264d5496d374808bc4aca02832eb0627 Step #5: Base64: AAAK8Ka5hgApdADwprmGAkPDgAAAAAAAAAAC8KK5hgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2689 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 747042464 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556f8518cd60, 0x556f8537571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556f85375720,0x556f871ff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6fcd8351264d5496d374808bc4aca02832eb0627' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3256 processed earlier; will process 7720 files now Step #5: ==96872== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556f7bccf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556f8230a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556f822ed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556f822ed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556f7bcd5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556f7bc3642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556f7bc30c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556f7bcc7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556f7ecf68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556f7ecf68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556f7ecf68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556f7ecf68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556f7ecf68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556f7ecf68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556f7ecf68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556f7ecf68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556f7ecf68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556f7ecf68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556f80efb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556f7dc57578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556f7dc625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556f7da0dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556f7da0dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556f7da0e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556f7da0d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556f7da0d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556f7da0d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556f822ef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556f822f87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556f822e0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556f8230afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f576e4a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556f7bc2f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x24,0x39,0x2f,0x32,0x32,0x33,0x33,0x37,0x32,0x30,0x33,0x36,0x38,0x35,0x34,0x37,0x37,0x35,0x38,0x30,0x38,0x0,0x0,0x7c,0x9,0xa,0x0,0x24,0xa,0x7c,0x2f, Step #5: \000$9/223372036854775808\000\000|\011\012\000$\012|/ Step #5: artifact_prefix='./'; Test unit written to ./oom-1d61ae25fdfe566e4cb9a085f2ec880192f7ed3f Step #5: Base64: ACQ5LzIyMzM3MjAzNjg1NDc3NTgwOAAAfAkKACQKfC8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2690 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 747571013 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ae7889cd60, 0x55ae78a8571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ae78a85720,0x55ae7a90f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1d61ae25fdfe566e4cb9a085f2ec880192f7ed3f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3257 processed earlier; will process 7719 files now Step #5: ==96908== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ae6f3df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ae75a1a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ae759fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ae759fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ae6f3e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ae6f34642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ae6f340c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ae6f3d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ae724068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ae724068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ae724068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ae724068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ae724068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ae724068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ae724068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ae724068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ae724068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ae724068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ae7460b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ae71367578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ae713725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ae7111dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ae7111dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ae7111e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ae7111d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ae7111d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ae7111d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ae759ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ae75a087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ae759f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ae75a1afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8de8ca5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ae6f33f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf4,0x8f,0xa3,0xaf,0xf4,0x80,0x84,0xbb,0xf4,0x8f,0xa3,0xaf,0xf4,0x80,0x84,0xbb,0xf4,0x8f,0xa3,0xaf,0xf4,0x8f,0xb7,0xb0,0xf4,0x8f,0xa3,0x90,0xf4,0x8f,0xa3,0xaf, Step #5: \364\217\243\257\364\200\204\273\364\217\243\257\364\200\204\273\364\217\243\257\364\217\267\260\364\217\243\220\364\217\243\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-fc5419708edf5ae6f7a32e081a15644c58f67848 Step #5: Base64: 9I+jr/SAhLv0j6Ov9ICEu/SPo6/0j7ew9I+jkPSPo68= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2691 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 748066649 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563e0d463d60, 0x563e0d64c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563e0d64c720,0x563e0f4d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc5419708edf5ae6f7a32e081a15644c58f67848' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3258 processed earlier; will process 7718 files now Step #5: ==96944== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563e03fa62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563e0a5e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563e0a5c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563e0a5c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563e03fac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563e03f0d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563e03f07c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563e03f9e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563e06fcd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563e06fcd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563e06fcd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563e06fcd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563e06fcd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563e06fcd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563e06fcd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563e06fcd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563e06fcd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563e06fcd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563e091d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563e05f2e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563e05f395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563e05ce4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563e05ce4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563e05ce5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563e05ce4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563e05ce4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563e05ce4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563e0a5c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563e0a5cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563e0a5b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563e0a5e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc90596e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563e03f0643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3c,0x77,0x3e,0x28,0x3f,0x3c,0x57,0x3e,0x28,0x3f,0x3c,0x6d,0x3e,0x3c,0x6d,0x3e,0x28,0x3f,0x3c,0x36,0x3e,0x3c,0x36,0x3e,0x3c,0x36,0x3e,0x3c,0x36,0x3e, Step #5: (?(?(?(?<6><6><6><6> Step #5: artifact_prefix='./'; Test unit written to ./oom-498d26d8f65672912a1a40f9cfbcd7e7107baf19 Step #5: Base64: KD88dz4oPzxXPig/PG0+PG0+KD88Nj48Nj48Nj48Nj4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2692 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 748568100 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f9acd5bd60, 0x55f9acf4471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f9acf44720,0x55f9aedce2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/498d26d8f65672912a1a40f9cfbcd7e7107baf19' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3259 processed earlier; will process 7717 files now Step #5: ==96980== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f9a389e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f9a9ed9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f9a9ebc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f9a9ebc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9a38a4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f9a380542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f9a37ffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9a3896595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9a68c58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9a68c58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9a68c58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9a68c58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9a68c58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9a68c58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9a68c58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9a68c58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9a68c58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9a68c58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9a8aca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f9a5826578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9a58315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9a55dcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9a55dcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f9a55dd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9a55dc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9a55dc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9a55dc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f9a9ebe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f9a9ec77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f9a9eaf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f9a9ed9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb814579082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f9a37fe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xe1,0x9e,0x90,0xea,0x9f,0x92,0x9,0xa,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \341\236\220\352\237\222\011\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-7fa61967ceda8e1aa63023b3337a6db635dd7acc Step #5: Base64: PHN2Zz48dGV4dD7hnpDqn5IJCjwvdGV4dD48L3N2Zz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2693 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 749068098 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55af10a6bd60, 0x55af10c5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55af10c54720,0x55af12ade2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7fa61967ceda8e1aa63023b3337a6db635dd7acc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3260 processed earlier; will process 7716 files now Step #5: ==97016== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55af075ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55af0dbe9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55af0dbcc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55af0dbcc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55af075b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55af0751542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55af0750fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55af075a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55af0a5d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55af0a5d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55af0a5d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55af0a5d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55af0a5d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55af0a5d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55af0a5d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55af0a5d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55af0a5d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55af0a5d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55af0c7da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55af09536578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55af095415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55af092ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55af092ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55af092ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55af092ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55af092ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55af092ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55af0dbce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55af0dbd77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55af0dbbf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55af0dbe9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f237c510082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55af0750e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x63,0x6f,0x6e,0x72,0x65,0x6e,0x72,0x65,0x65,0x6e,0x67,0x3e,0x3c,0x63,0x6f,0x67,0x72,0x65,0x6e,0x67,0x63,0x6f,0x3e,0x22,0x63,0x6f,0x6e,0x72,0x67,0x72,0x65, Step #5: \"conrgre Step #5: artifact_prefix='./'; Test unit written to ./oom-a44ca94c654d14e2ee7dbc5efa652f1dd9fe1031 Step #5: Base64: PGNvbnJlbnJlZW5nPjxjb2dyZW5nY28+ImNvbnJncmU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2694 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 749573215 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558065434d60, 0x55806561d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55806561d720,0x5580674a72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a44ca94c654d14e2ee7dbc5efa652f1dd9fe1031' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3261 processed earlier; will process 7715 files now Step #5: ==97052== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55805bf772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5580625b2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55806259546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55806259538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55805bf7d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55805bede42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55805bed8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55805bf6f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55805ef9e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55805ef9e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55805ef9e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55805ef9e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55805ef9e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55805ef9e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55805ef9e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55805ef9e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55805ef9e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55805ef9e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5580611a345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55805deff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55805df0a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55805dcb5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55805dcb5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55805dcb6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55805dcb5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55805dcb5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55805dcb5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55806259794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5580625a07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558062588529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5580625b2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5b656a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55805bed743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xda,0xa5,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0xb7,0xbf,0xe2,0x80,0x8c, Step #5: ws:\332\245\342\267\277\342\267\277\342\267\277\342\267\277\342\267\277\342\267\277\342\267\277\342\267\277\342\200\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-670bb5afc2af7a399e3b45862696c2a1d7e4e5e0 Step #5: Base64: d3M62qXit7/it7/it7/it7/it7/it7/it7/it7/igIw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2695 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 750081459 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ff7589ed60, 0x55ff75a8771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ff75a87720,0x55ff779112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/670bb5afc2af7a399e3b45862696c2a1d7e4e5e0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3262 processed earlier; will process 7714 files now Step #5: ==97088== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ff6c3e12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ff72a1c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ff729ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ff729ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ff6c3e7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ff6c34842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ff6c342c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ff6c3d9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ff6f4088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ff6f4088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ff6f4088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ff6f4088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ff6f4088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ff6f4088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ff6f4088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ff6f4088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ff6f4088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ff6f4088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ff7160d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ff6e369578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ff6e3745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ff6e11fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ff6e11fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ff6e120808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ff6e11f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ff6e11f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ff6e11f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ff72a0194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ff72a0a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ff729f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ff72a1cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe4d124082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ff6c34143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x20,0x20,0x7,0xa,0x6d,0x3a,0x60,0x43,0x4,0x3b,0x3d,0x7,0xa,0x6d,0x3a,0x3a,0x6d,0x4,0x3b,0x3d,0x7,0xa,0x6d,0x3a,0x60,0x5b,0xe5,0x3b,0x3d,0x7,0xa, Step #5: % \007\012m:`C\004;=\007\012m::m\004;=\007\012m:`[\345;=\007\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-8bffa70e43d7b7e7825f33fa670ee904361556a9 Step #5: Base64: JSAgBwptOmBDBDs9BwptOjptBDs9BwptOmBb5Ts9Bwo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2696 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 750700525 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557ccffb8d60, 0x557cd01a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557cd01a1720,0x557cd202b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8bffa70e43d7b7e7825f33fa670ee904361556a9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3263 processed earlier; will process 7713 files now Step #5: ==97124== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557cc6afb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ccd136728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ccd11946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ccd11938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557cc6b01652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557cc6a6242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557cc6a5cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557cc6af3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557cc9b228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557cc9b228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557cc9b228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557cc9b228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557cc9b228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557cc9b228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557cc9b228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557cc9b228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557cc9b228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557cc9b228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ccbd2745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557cc8a83578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557cc8a8e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557cc8839d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557cc8839d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557cc883a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557cc8839944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557cc8839944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557cc8839944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ccd11b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ccd1247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ccd10c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ccd136fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7eff830b8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557cc6a5b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x3,0x0,0x20,0x1,0x11,0x47,0x0,0x54,0x49,0x42,0x2b,0x0,0x0,0x0,0x67,0xe,0x68,0x68,0x43,0xda,0x82,0x1,0x70,0x70,0x70,0x70,0x70,0x70,0x70, Step #5: ID3\003\000 \001\021G\000TIB+\000\000\000g\016hhC\332\202\001ppppppp Step #5: artifact_prefix='./'; Test unit written to ./oom-43ccd41dcef7e73a99d19dfa0b52b42cab9b0ebe Step #5: Base64: SUQzAwAgARFHAFRJQisAAABnDmhoQ9qCAXBwcHBwcHA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2697 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 751206008 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e75d2e9d60, 0x55e75d4d271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e75d4d2720,0x55e75f35c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/43ccd41dcef7e73a99d19dfa0b52b42cab9b0ebe' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3264 processed earlier; will process 7712 files now Step #5: ==97160== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e753e2c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e75a467728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e75a44a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e75a44a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e753e32652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e753d9342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e753d8dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e753e24595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e756e538c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e756e538c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e756e538c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e756e538c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e756e538c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e756e538c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e756e538c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e756e538c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e756e538c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e756e538c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e75905845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e755db4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e755dbf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e755b6ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e755b6ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e755b6b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e755b6a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e755b6a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e755b6a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e75a44c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e75a4557b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e75a43d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e75a467fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2720547082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e753d8c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c,0x28,0x3f,0x3a,0x24,0x7c,0x28,0x3f,0x3a,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x7c,0x24,0x29,0x29, Step #5: |(?:$|(?:$|$|$|$|$|$|$|$|$|$|$)) Step #5: artifact_prefix='./'; Test unit written to ./oom-7da9806dc4dc16064ed3d1a1feec6fe72e2b796f Step #5: Base64: fCg/OiR8KD86JHwkfCR8JHwkfCR8JHwkfCR8JHwkKSk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2698 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 751711296 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e9ec0b4d60, 0x55e9ec29d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e9ec29d720,0x55e9ee1272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7da9806dc4dc16064ed3d1a1feec6fe72e2b796f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3265 processed earlier; will process 7711 files now Step #5: ==97196== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e9e2bf72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e9e9232728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e9e921546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e9e921538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e9e2bfd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e9e2b5e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e9e2b58c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e9e2bef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9e5c1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9e5c1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9e5c1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9e5c1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9e5c1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9e5c1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9e5c1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9e5c1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9e5c1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9e5c1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e9e7e2345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e9e4b7f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e9e4b8a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e9e4935d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e9e4935d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e9e4936808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e9e4935944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e9e4935944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e9e4935944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e9e921794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e9e92207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e9e9208529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e9e9232fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f62046dd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e9e2b5743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x6c,0x20,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0xe1,0x84,0xbc,0x56, Step #5: Step #5: Step #5: #0 0x5570f73e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5570fda1b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5570fd9fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5570fd9fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5570f73e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5570f734742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5570f7341c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5570f73d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570fa4078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570fa4078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570fa4078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570fa4078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570fa4078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570fa4078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570fa4078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570fa4078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570fa4078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570fa4078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5570fc60c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5570f9368578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570f93735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5570f911ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5570f911ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5570f911f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5570f911e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5570f911e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5570f911e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5570fda0094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5570fda097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5570fd9f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5570fda1bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f18edc54082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5570f734043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x61,0x64,0x64,0x64,0x64, Step #5: t-----BEGIN -----\012dddddddddadddd Step #5: artifact_prefix='./'; Test unit written to ./oom-7c510e063e0b7d2512cac5b2278b94af0d27741a Step #5: Base64: dC0tLS0tQkVHSU4gLS0tLS0KZGRkZGRkZGRkYWRkZGQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2700 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 752729571 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b192139d60, 0x55b19232271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b192322720,0x55b1941ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7c510e063e0b7d2512cac5b2278b94af0d27741a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3267 processed earlier; will process 7709 files now Step #5: ==97268== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b188c7c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b18f2b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b18f29a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b18f29a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b188c82652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b188be342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b188bddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b188c74595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b18bca38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b18bca38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b18bca38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b18bca38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b18bca38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b18bca38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b18bca38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b18bca38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b18bca38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b18bca38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b18dea845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b18ac04578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b18ac0f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b18a9bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b18a9bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b18a9bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b18a9ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b18a9ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b18a9ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b18f29c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b18f2a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b18f28d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b18f2b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4b8842c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b188bdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xc5,0xb3,0xdd,0x8c,0xdd,0x84,0xc5,0x84,0xdd,0x84,0xde,0x8c,0xc5,0x84,0xdd,0x84,0xc5,0x84,0xdd,0x84,0xc5,0x84,0xdd,0x84,0xde,0x8c,0xc5,0xa3,0xc5,0xa3,0x22, Step #5: \"\305\263\335\214\335\204\305\204\335\204\336\214\305\204\335\204\305\204\335\204\305\204\335\204\336\214\305\243\305\243\" Step #5: artifact_prefix='./'; Test unit written to ./oom-635e989469b75d5950527a6825af933323bd4992 Step #5: Base64: IsWz3YzdhMWE3YTejMWE3YTFhN2ExYTdhN6MxaPFoyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2701 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 753238812 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55673c8ccd60, 0x55673cab571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55673cab5720,0x55673e93f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/635e989469b75d5950527a6825af933323bd4992' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3268 processed earlier; will process 7708 files now Step #5: ==97304== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55673340f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556739a4a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556739a2d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556739a2d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556733415652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55673337642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556733370c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556733407595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5567364368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5567364368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5567364368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5567364368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5567364368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5567364368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5567364368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5567364368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5567364368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5567364368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55673863b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556735397578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5567353a25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55673514dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55673514dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55673514e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55673514d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55673514d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55673514d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556739a2f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556739a387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556739a20529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556739a4afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25befa2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55673336f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47, Step #5: FUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAG Step #5: artifact_prefix='./'; Test unit written to ./oom-fdae29abd86a5d80c9ff363cb8ee66d7dad95b1b Step #5: Base64: RlVaWi1UQUdGVVpaLVRBR0ZVWlotVEFHRlVaWi1UQUc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2702 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 753744577 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56293fc9cd60, 0x56293fe8571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56293fe85720,0x562941d0f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fdae29abd86a5d80c9ff363cb8ee66d7dad95b1b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3269 processed earlier; will process 7707 files now Step #5: ==97340== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5629367df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56293ce1a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56293cdfd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56293cdfd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5629367e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56293674642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562936740c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5629367d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629398068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629398068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629398068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629398068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629398068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629398068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629398068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629398068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629398068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629398068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56293ba0b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562938767578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5629387725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56293851dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56293851dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56293851e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56293851d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56293851d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56293851d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56293cdff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56293ce087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56293cdf0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56293ce1afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f493b4e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56293673f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xb7,0xba,0xd6,0xbd,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb2,0xe0,0xbd,0xb3, Step #5: ws:\357\267\272\326\275\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\262\340\275\263 Step #5: artifact_prefix='./'; Test unit written to ./oom-cd16becdbf22962c596b2444a0f99f8f3fc92d3e Step #5: Base64: d3M677e61r3gvbPgvbPgvbPgvbPgvbPgvbPgvbLgvbM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2703 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 754249173 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d36bc20d60, 0x55d36be0971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d36be09720,0x55d36dc932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cd16becdbf22962c596b2444a0f99f8f3fc92d3e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3270 processed earlier; will process 7706 files now Step #5: ==97376== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d3627632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d368d9e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d368d8146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d368d8138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d362769652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d3626ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d3626c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d36275b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d36578a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d36578a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d36578a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d36578a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d36578a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d36578a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d36578a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d36578a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d36578a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d36578a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d36798f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d3646eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d3646f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d3644a1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d3644a1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d3644a2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d3644a1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d3644a1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d3644a1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d368d8394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d368d8c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d368d74529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d368d9efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f33972df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d3626c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x6f,0x62,0x6f,0x62,0x6a,0x65,0x63,0x74,0x3e,0x3c,0x6f,0x6f,0x62,0x6f,0x74,0x62,0x6a,0x65,0x63,0x74,0x63,0x76,0x3e,0x3c,0x6f,0x6a,0x65,0x63,0x74,0x3e,0x3c, Step #5: < Step #5: artifact_prefix='./'; Test unit written to ./oom-a2403acc7de2d0193625fea58cb89c66d00ae9b0 Step #5: Base64: PG9ib2JqZWN0Pjxvb2JvdGJqZWN0Y3Y+PG9qZWN0Pjw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2704 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 754748395 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56371ff16d60, 0x5637200ff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5637200ff720,0x563721f892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a2403acc7de2d0193625fea58cb89c66d00ae9b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3271 processed earlier; will process 7705 files now Step #5: ==97412== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563716a592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56371d094728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56371d07746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56371d07738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563716a5f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5637169c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5637169bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563716a51595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563719a808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563719a808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563719a808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563719a808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563719a808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563719a808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563719a808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563719a808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563719a808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563719a808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56371bc8545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5637189e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5637189ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563718797d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563718797d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563718798808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563718797944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563718797944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563718797944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56371d07994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56371d0827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56371d06a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56371d094fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9895a28082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5637169b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60,0xd,0xc,0xd,0x60, Step #5: \015\014\015`\015\014\015`\015\014\015`\015\014\015`\015\014\015`\015\014\015`\015\014\015`\015\014\015` Step #5: artifact_prefix='./'; Test unit written to ./oom-6742f058d715f7c967f5685be740cd2de7de4c21 Step #5: Base64: DQwNYA0MDWANDA1gDQwNYA0MDWANDA1gDQwNYA0MDWA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2705 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 755375940 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55772a2d2d60, 0x55772a4bb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55772a4bb720,0x55772c3452c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6742f058d715f7c967f5685be740cd2de7de4c21' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3272 processed earlier; will process 7704 files now Step #5: #1 pulse cov: 3513 ft: 3514 exec/s: 0 rss: 171Mb Step #5: ==97448== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557720e152d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557727450728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55772743346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55772743338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557720e1b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557720d7c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557720d76c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557720e0d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557723e3c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557723e3c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557723e3c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557723e3c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557723e3c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557723e3c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557723e3c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557723e3c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557723e3c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557723e3c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55772604145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557722d9d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557722da85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557722b53d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557722b53d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557722b54808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557722b53944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557722b53944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557722b53944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55772743594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55772743e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557727426529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557727450fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6b52509082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557720d7543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x9,0x2c,0x20,0x2c,0x66,0x2c,0x32,0x2c,0x60,0x2c,0x30,0x2c,0x60,0x2c,0x3c,0x2c,0x66,0x2c,0x66,0x2c,0x30,0x3c,0x17,0x2c,0xf3,0xe1,0x81,0x6e,0x21,0x5f,0x28,0x30, Step #5: \011, ,f,2,`,0,`,<,f,f,0<\027,\363\341\201n!_(0 Step #5: artifact_prefix='./'; Test unit written to ./oom-115b261a60ff717faefe6537ecda3c00741f7e63 Step #5: Base64: CSwgLGYsMixgLDAsYCw8LGYsZiwwPBcs8+GBbiFfKDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2706 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 756051112 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555755079d60, 0x55575526271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555755262720,0x5557570ec2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/115b261a60ff717faefe6537ecda3c00741f7e63' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3274 processed earlier; will process 7702 files now Step #5: ==97484== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55574bbbc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5557521f7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5557521da46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5557521da38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55574bbc2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55574bb2342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55574bb1dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55574bbb4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55574ebe38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55574ebe38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55574ebe38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55574ebe38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55574ebe38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55574ebe38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55574ebe38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55574ebe38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55574ebe38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55574ebe38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555750de845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55574db44578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55574db4f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55574d8fad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55574d8fad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55574d8fb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55574d8fa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55574d8fa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55574d8fa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5557521dc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5557521e57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5557521cd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5557521f7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7551a2e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55574bb1c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0xc,0x29,0xc,0x24,0xc,0x25,0xc,0x29,0x20,0x24,0xc,0x2a,0x20,0x29,0xc,0x29,0xc,0x29,0xc,0x24,0xc,0x25,0xc,0x29,0x20,0x24,0xc,0x2a,0x20,0x29,0xc, Step #5: )\014)\014$\014%\014) $\014* )\014)\014)\014$\014%\014) $\014* )\014 Step #5: artifact_prefix='./'; Test unit written to ./oom-c439ac8f7789b3e74e2420f2c8ab4939faeb1ca1 Step #5: Base64: KQwpDCQMJQwpICQMKiApDCkMKQwkDCUMKSAkDCogKQw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2707 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 756560552 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5585a759fd60, 0x5585a778871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5585a7788720,0x5585a96122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c439ac8f7789b3e74e2420f2c8ab4939faeb1ca1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3275 processed earlier; will process 7701 files now Step #5: ==97520== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55859e0e22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5585a471d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5585a470046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5585a470038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55859e0e8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55859e04942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55859e043c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55859e0da595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5585a11098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5585a11098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5585a11098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5585a11098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5585a11098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5585a11098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5585a11098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5585a11098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5585a11098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5585a11098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5585a330e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5585a006a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585a00755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55859fe20d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55859fe20d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55859fe21808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55859fe20944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55859fe20944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55859fe20944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5585a470294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5585a470b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5585a46f3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5585a471dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f806fc85082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55859e04243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe1,0xbc,0x91,0xe1,0xac,0x91,0xa,0xe0,0xac,0xb5,0xe1,0xbc,0x91,0xe1,0xac,0xb5,0xe1,0xbc,0x91,0xe1,0xac,0xb5,0xe1,0xbc,0x91,0xe1,0xac,0xb5,0x27, Step #5: ws:\341\274\221\341\254\221\012\340\254\265\341\274\221\341\254\265\341\274\221\341\254\265\341\274\221\341\254\265' Step #5: artifact_prefix='./'; Test unit written to ./oom-b0dba716a04215ab50a71cccd239832c56d6e245 Step #5: Base64: d3M64byR4ayRCuCsteG8keGsteG8keGsteG8keGstSc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2708 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 757064447 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581b0155d60, 0x5581b033e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581b033e720,0x5581b21c82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b0dba716a04215ab50a71cccd239832c56d6e245' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3276 processed earlier; will process 7700 files now Step #5: ==97556== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581a6c982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581ad2d3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581ad2b646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581ad2b638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581a6c9e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581a6bff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581a6bf9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581a6c90595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581a9cbf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581a9cbf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581a9cbf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581a9cbf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581a9cbf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581a9cbf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581a9cbf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581a9cbf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581a9cbf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581a9cbf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581abec445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581a8c20578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581a8c2b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581a89d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581a89d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581a89d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581a89d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581a89d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581a89d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581ad2b894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581ad2c17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581ad2a9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581ad2d3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f330274e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581a6bf843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x0,0x6b,0x0,0x60,0x2b,0x2b,0x4a,0x9,0x29,0x4a,0x9,0x29,0xa,0x5c,0x9,0x29,0xa,0x5c,0x9,0x60,0x40,0x60,0x40,0x29,0xa,0x1,0x0,0x1d,0x9,0x60,0x29, Step #5: \012\000k\000`++J\011)J\011)\012\\\011)\012\\\011`@`@)\012\001\000\035\011`) Step #5: artifact_prefix='./'; Test unit written to ./oom-cbd7dac4f3058a75c3f43c149dc1ca2dfd1e6778 Step #5: Base64: CgBrAGArK0oJKUoJKQpcCSkKXAlgQGBAKQoBAB0JYCk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2709 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 757696348 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55773e0ebd60, 0x55773e2d471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55773e2d4720,0x55774015e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cbd7dac4f3058a75c3f43c149dc1ca2dfd1e6778' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3277 processed earlier; will process 7699 files now Step #5: ==97592== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557734c2e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55773b269728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55773b24c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55773b24c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557734c34652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557734b9542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557734b8fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557734c26595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557737c558c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557737c558c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557737c558c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557737c558c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557737c558c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557737c558c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557737c558c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557737c558c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557737c558c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557737c558c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557739e5a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557736bb6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557736bc15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55773696cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55773696cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55773696d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55773696c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55773696c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55773696c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55773b24e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55773b2577b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55773b23f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55773b269fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba82b1e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557734b8e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85,0xc2,0x85, Step #5: \302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205\302\205 Step #5: artifact_prefix='./'; Test unit written to ./oom-aade3f23bf0b0c813fcbd1b7a7fae85cc1a90ff0 Step #5: Base64: woXChcKFwoXChcKFwoXChcKFwoXChcKFwoXChcKFwoU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2710 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 758180818 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c49ee96d60, 0x55c49f07f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c49f07f720,0x55c4a0f092c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aade3f23bf0b0c813fcbd1b7a7fae85cc1a90ff0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3278 processed earlier; will process 7698 files now Step #5: ==97628== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c4959d92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c49c014728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c49bff746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c49bff738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c4959df652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c49594042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c49593ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c4959d1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c498a008c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c498a008c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c498a008c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c498a008c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c498a008c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c498a008c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c498a008c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c498a008c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c498a008c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c498a008c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c49ac0545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c497961578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c49796c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c497717d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c497717d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c497718808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c497717944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c497717944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c497717944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c49bff994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c49c0027b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c49bfea529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c49c014fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe058d13082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c49593943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7b,0x38,0x7d,0x24,0x7b,0x32,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x7b,0x32,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x7b,0x38,0x7d, Step #5: ${8}${2}${8}${2}${8}${8}${8}${8} Step #5: artifact_prefix='./'; Test unit written to ./oom-1111a46571ddb13df1261ffb4d811103aaa30ddf Step #5: Base64: JHs4fSR7Mn0kezh9JHsyfSR7OH0kezh9JHs4fSR7OH0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2711 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 758687166 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56045c34dd60, 0x56045c53671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56045c536720,0x56045e3c02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1111a46571ddb13df1261ffb4d811103aaa30ddf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3279 processed earlier; will process 7697 files now Step #5: ==97664== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560452e902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5604594cb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5604594ae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5604594ae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560452e96652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560452df742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560452df1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560452e88595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560455eb78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560455eb78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560455eb78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560455eb78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560455eb78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560455eb78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560455eb78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560455eb78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560455eb78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560455eb78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5604580bc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560454e18578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560454e235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560454bced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560454bced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560454bcf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560454bce944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560454bce944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560454bce944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5604594b094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5604594b97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5604594a1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5604594cbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f30675a0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560452df043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f,0x5b,0x3f, Step #5: [?[?[?[?[?[?[?[?[?[?[?[?[?[?[?[? Step #5: artifact_prefix='./'; Test unit written to ./oom-ee7b75f73f88ab3961bdd310268765a7544e2aef Step #5: Base64: Wz9bP1s/Wz9bP1s/Wz9bP1s/Wz9bP1s/Wz9bP1s/Wz8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2712 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 759181676 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55838d8eed60, 0x55838dad771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55838dad7720,0x55838f9612c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee7b75f73f88ab3961bdd310268765a7544e2aef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3280 processed earlier; will process 7696 files now Step #5: #1 pulse cov: 3497 ft: 3498 exec/s: 0 rss: 172Mb Step #5: ==97700== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583844312d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55838aa6c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55838aa4f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55838aa4f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558384437652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55838439842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558384392c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558384429595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583874588c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583874588c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583874588c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583874588c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583874588c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583874588c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583874588c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583874588c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583874588c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583874588c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55838965d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5583863b9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5583863c45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55838616fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55838616fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558386170808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55838616f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55838616f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55838616f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55838aa5194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55838aa5a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55838aa42529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55838aa6cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2581968082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55838439143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24, Step #5: $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-f4d449b7372db62599b33728581d24dae6af31ab Step #5: Base64: JCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2713 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 759728455 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55851076cd60, 0x55851095571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558510955720,0x5585127df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f4d449b7372db62599b33728581d24dae6af31ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3282 processed earlier; will process 7694 files now Step #5: ==97736== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5585072af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55850d8ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55850d8cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55850d8cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5585072b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55850721642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558507210c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5585072a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55850a2d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55850a2d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55850a2d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55850a2d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55850a2d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55850a2d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55850a2d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55850a2d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55850a2d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55850a2d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55850c4db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558509237578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5585092425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558508fedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558508fedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558508fee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558508fed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558508fed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558508fed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55850d8cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55850d8d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55850d8c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55850d8eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb75ef78082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55850720f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x8,0x0,0x7,0x2e,0x2b,0x42,0xdb,0xbe,0x7c,0xdb,0xbe,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x24,0x6e,0x24,0x3,0x3,0x52, Step #5: - \010\000\007.+B\333\276|\333\276+++++++++++++$n$\003\003R Step #5: artifact_prefix='./'; Test unit written to ./oom-d38514d95b4c160e7692818e0b26fe368b734335 Step #5: Base64: LSAIAAcuK0LbvnzbvisrKysrKysrKysrKyskbiQDA1I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2714 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 760230494 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bcc8378d60, 0x55bcc856171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bcc8561720,0x55bcca3eb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d38514d95b4c160e7692818e0b26fe368b734335' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3283 processed earlier; will process 7693 files now Step #5: ==97772== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bcbeebb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bcc54f6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bcc54d946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bcc54d938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bcbeec1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bcbee2242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bcbee1cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bcbeeb3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bcc1ee28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bcc1ee28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bcc1ee28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bcc1ee28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bcc1ee28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bcc1ee28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bcc1ee28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bcc1ee28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bcc1ee28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bcc1ee28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bcc40e745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bcc0e43578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bcc0e4e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bcc0bf9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bcc0bf9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bcc0bfa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bcc0bf9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bcc0bf9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bcc0bf9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bcc54db94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bcc54e47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bcc54cc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bcc54f6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f763f4fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bcbee1b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x73,0x74,0x61,0x72,0x74,0x78,0x72,0x65,0x66,0x31,0x23,0x74,0x72,0x75,0x65,0x0,0x34,0x38,0x11,0x0,0x0,0x0,0x0,0x0,0x0,0x75,0x75,0x75,0x75,0x0,0x0, Step #5: -startxref1#true\00048\021\000\000\000\000\000\000uuuu\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-d1222f2410623e0d1b0daf996d2be9ce698cd405 Step #5: Base64: LXN0YXJ0eHJlZjEjdHJ1ZQA0OBEAAAAAAAB1dXV1AAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2715 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 760735527 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c71033d60, 0x557c7121c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c7121c720,0x557c730a62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d1222f2410623e0d1b0daf996d2be9ce698cd405' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3284 processed earlier; will process 7692 files now Step #5: ==97808== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c67b762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c6e1b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c6e19446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c6e19438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c67b7c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c67add42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c67ad7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c67b6e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c6ab9d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c6ab9d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c6ab9d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c6ab9d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c6ab9d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c6ab9d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c6ab9d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c6ab9d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c6ab9d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c6ab9d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c6cda245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c69afe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c69b095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c698b4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c698b4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c698b5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c698b4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c698b4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c698b4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c6e19694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c6e19f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c6e187529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c6e1b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3981119082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c67ad643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xe1,0x9e,0x90,0xe1,0x9f,0x84,0x9,0xa,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \341\236\220\341\237\204\011\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-60a4a64f3a60079077287d87d861c573e36cc0c0 Step #5: Base64: PHN2Zz48dGV4dD7hnpDhn4QJCjwvdGV4dD48L3N2Zz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2716 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 761236664 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d0198fad60, 0x55d019ae371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d019ae3720,0x55d01b96d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/60a4a64f3a60079077287d87d861c573e36cc0c0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3285 processed earlier; will process 7691 files now Step #5: ==97844== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d01043d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d016a78728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d016a5b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d016a5b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d010443652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d0103a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d01039ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d010435595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d0134648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d0134648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d0134648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d0134648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d0134648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d0134648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d0134648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d0134648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d0134648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d0134648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d01566945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d0123c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d0123d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d01217bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d01217bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d01217c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d01217b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d01217b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d01217b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d016a5d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d016a667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d016a4e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d016a78fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdacb2b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d01039d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc3,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0,0x20,0xc2,0xa0, Step #5: \303\240 \302\240 \302\240 \302\240 \302\240 \302\240 \302\240 \302\240 \302\240 \302\240 \302\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-d5c338bee030df35e0fe1508d3791794909b3deb Step #5: Base64: w6AgwqAgwqAgwqAgwqAgwqAgwqAgIMKgIMKgIMKgIMKg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2717 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 761743269 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d930385d60, 0x55d93056e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d93056e720,0x55d9323f82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d5c338bee030df35e0fe1508d3791794909b3deb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3286 processed earlier; will process 7690 files now Step #5: ==97880== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d926ec82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d92d503728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d92d4e646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d92d4e638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d926ece652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d926e2f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d926e29c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d926ec0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d929eef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d929eef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d929eef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d929eef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d929eef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d929eef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d929eef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d929eef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d929eef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d929eef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d92c0f445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d928e50578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d928e5b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d928c06d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d928c06d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d928c07808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d928c06944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d928c06944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d928c06944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d92d4e894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d92d4f17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d92d4d9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d92d503fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f11cdb08082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d926e2843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1b,0x0,0x0,0x0,0x0,0x0,0x16,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x8,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: \000\001\000\000\000\000\000\000\000\000\000\033\000\000\000\000\000\026\000\000\000\000\000\000\000\000\010\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-92a3f7083ac42395a091d7d3fc6c9409584fc3c6 Step #5: Base64: AAEAAAAAAAAAAAAbAAAAAAAWAAAAAAAAAAAIAAAAAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2718 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 762249116 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea6fa2dd60, 0x55ea6fc1671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea6fc16720,0x55ea71aa02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92a3f7083ac42395a091d7d3fc6c9409584fc3c6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3287 processed earlier; will process 7689 files now Step #5: ==97916== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea665702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea6cbab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea6cb8e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea6cb8e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea66576652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea664d742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea664d1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea66568595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea695978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea695978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea695978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea695978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea695978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea695978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea695978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea695978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea695978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea695978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea6b79c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea684f8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea685035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea682aed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea682aed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea682af808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea682ae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea682ae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea682ae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea6cb9094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea6cb997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea6cb81529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea6cbabfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f09f8772082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea664d043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x53,0x45,0x4c,0x45,0x43,0x54,0x60,0x2b,0x50,0x60,0x2b,0x54,0x53,0x45,0x4c,0x60,0x2b,0x50,0x60,0x2b,0x54,0x60,0x2b,0x50,0x60,0x2b,0x50,0x60,0x2b,0x50,0x60,0x2b,0x50, Step #5: SELECT`+P`+TSEL`+P`+T`+P`+P`+P`+P Step #5: artifact_prefix='./'; Test unit written to ./oom-04af38071da2c796bcfb2dd6de9061722a98e1ea Step #5: Base64: U0VMRUNUYCtQYCtUU0VMYCtQYCtUYCtQYCtQYCtQYCtQ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2719 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 762884599 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559bf9764d60, 0x559bf994d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559bf994d720,0x559bfb7d72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/04af38071da2c796bcfb2dd6de9061722a98e1ea' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3288 processed earlier; will process 7688 files now Step #5: ==97952== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559bf02a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559bf68e2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559bf68c546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559bf68c538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559bf02ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559bf020e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559bf0208c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559bf029f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559bf32ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559bf32ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559bf32ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559bf32ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559bf32ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559bf32ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559bf32ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559bf32ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559bf32ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559bf32ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559bf54d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559bf222f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559bf223a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559bf1fe5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559bf1fe5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559bf1fe6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559bf1fe5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559bf1fe5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559bf1fe5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559bf68c794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559bf68d07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559bf68b8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559bf68e2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f03c00bc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559bf020743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x49,0x53,0x4f,0x2d,0x31,0x30,0x36,0x34,0x41,0x53,0x36,0x4c,0x53,0x2d,0x22,0x3c,0x3f, Step #5: Step #5: Step #5: #0 0x5612aa60b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5612b0c46728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5612b0c2946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5612b0c2938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612aa611652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5612aa57242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5612aa56cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612aa603595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612ad6328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612ad6328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612ad6328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612ad6328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612ad6328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612ad6328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612ad6328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612ad6328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612ad6328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612ad6328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5612af83745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5612ac593578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612ac59e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612ac349d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612ac349d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612ac34a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612ac349944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612ac349944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612ac349944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5612b0c2b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5612b0c347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5612b0c1c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5612b0c46fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f62928b9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5612aa56b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x20,0x0,0x2d,0x20,0x20,0x0,0x0,0x40,0x3e,0x0,0x0,0x26,0x26,0x26,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x30, Step #5: - \000- \000\000@>\000\000&&&&$0&&&&&&&&&&&>$0 Step #5: artifact_prefix='./'; Test unit written to ./oom-07e6db4dbf9c5b31917d5d00cf033a391aa6b667 Step #5: Base64: LSAgAC0gIAAAQD4AACYmJiYkMCYmJiYmJiYmJiYmPiQw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2721 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 763896813 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55636e987d60, 0x55636eb7071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55636eb70720,0x5563709fa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/07e6db4dbf9c5b31917d5d00cf033a391aa6b667' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3290 processed earlier; will process 7686 files now Step #5: ==98024== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5563654ca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55636bb05728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55636bae846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55636bae838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5563654d0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55636543142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55636542bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5563654c2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5563684f18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5563684f18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5563684f18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5563684f18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5563684f18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5563684f18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5563684f18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5563684f18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5563684f18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5563684f18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55636a6f645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556367452578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55636745d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556367208d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556367208d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556367209808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556367208944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556367208944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556367208944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55636baea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55636baf37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55636badb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55636bb05fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb70b52e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55636542a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x1c,0x22,0xe0,0xbe,0x9a,0xe0,0xbe,0x9a,0xe6,0x81,0x82,0xe0,0xbe,0x9a,0xe0,0xab,0x69,0x66,0xac,0xe0,0xbe,0x9a,0xe0,0xbe,0x9a,0xe0,0xbe,0x9b,0xe0,0xab,0xab, Step #5: HU\034\"\340\276\232\340\276\232\346\201\202\340\276\232\340\253if\254\340\276\232\340\276\232\340\276\233\340\253\253 Step #5: artifact_prefix='./'; Test unit written to ./oom-3bf564305eb111d7021291f5737d4e13d2f5c16c Step #5: Base64: SFUcIuC+muC+muaBguC+muCraWas4L6a4L6a4L6b4Kur Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2722 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 764401555 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559ffce8dd60, 0x559ffd07671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559ffd076720,0x559ffef002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3bf564305eb111d7021291f5737d4e13d2f5c16c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3291 processed earlier; will process 7685 files now Step #5: ==98060== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559ff39d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559ffa00b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559ff9fee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559ff9fee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559ff39d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559ff393742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559ff3931c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559ff39c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ff69f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ff69f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ff69f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ff69f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ff69f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ff69f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ff69f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ff69f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ff69f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ff69f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559ff8bfc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559ff5958578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559ff59635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559ff570ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559ff570ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559ff570f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559ff570e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559ff570e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559ff570e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559ff9ff094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559ff9ff97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559ff9fe1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559ffa00bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27f0477082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559ff393043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x72,0x3e,0x3c,0x78,0x6d,0x6c,0x3a,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0xeb,0x96,0x8b,0xeb,0x96,0x8b,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-78a7699fa1cadec11b5a4b3d77d3d13fce12aa5c Step #5: Base64: PHI+PHhtbDpMTExMTExMTExMTExMTExMTEzrlovrlos+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2723 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 764888141 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5597fb68dd60, 0x5597fb87671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5597fb876720,0x5597fd7002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/78a7699fa1cadec11b5a4b3d77d3d13fce12aa5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3292 processed earlier; will process 7684 files now Step #5: ==98096== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5597f21d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5597f880b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5597f87ee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5597f87ee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5597f21d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5597f213742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5597f2131c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5597f21c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5597f51f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5597f51f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5597f51f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5597f51f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5597f51f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5597f51f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5597f51f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5597f51f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5597f51f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5597f51f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5597f73fc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5597f4158578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5597f41635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5597f3f0ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5597f3f0ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5597f3f0f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5597f3f0e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5597f3f0e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5597f3f0e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5597f87f094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5597f87f97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5597f87e1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5597f880bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f26d4f8d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5597f213043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x30,0xa,0x24,0x0,0x30,0x21,0xdc,0xbd,0x21,0xdc,0xbd,0x24,0x0,0x30,0x21,0xdc,0xbd,0x21,0x2f,0x8e,0x69,0x3c,0x24,0x73,0x65,0x72,0x69,0x66,0x3c,0x3c,0x2c,0x3c, Step #5: \0010\012$\0000!\334\275!\334\275$\0000!\334\275!/\216i<$serif<<,< Step #5: artifact_prefix='./'; Test unit written to ./oom-b6f0d88f57ac5f692106a683b1cbc59e74b205b0 Step #5: Base64: ATAKJAAwIdy9Idy9JAAwIdy9IS+OaTwkc2VyaWY8PCw8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2724 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 765389562 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642d997bd60, 0x5642d9b6471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642d9b64720,0x5642db9ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b6f0d88f57ac5f692106a683b1cbc59e74b205b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3293 processed earlier; will process 7683 files now Step #5: ==98132== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5642d04be2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5642d6af9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5642d6adc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5642d6adc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5642d04c4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5642d042542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5642d041fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5642d04b6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5642d34e58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5642d34e58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5642d34e58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5642d34e58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5642d34e58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5642d34e58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5642d34e58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5642d34e58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5642d34e58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5642d34e58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5642d56ea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5642d2446578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642d24515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5642d21fcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5642d21fcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5642d21fd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5642d21fc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5642d21fc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5642d21fc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5642d6ade94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642d6ae77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5642d6acf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5642d6af9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f09039a5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5642d041e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xb7,0xb3,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xf0,0x96,0xac,0xb1,0xa,0xef,0xb7,0xb3,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xf0,0x96,0xac,0xba, Step #5: \357\267\263\357\267\272\357\267\272\357\267\272\360\226\254\261\012\357\267\263\357\267\272\357\267\272\357\267\272\360\226\254\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-be2a5da447ef02c76667d4995f6baab816038053 Step #5: Base64: 77ez77e677e677e68JassQrvt7Pvt7rvt7rvt7rwlqy6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2725 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 765890349 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564f9fa1ed60, 0x564f9fc0771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564f9fc07720,0x564fa1a912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be2a5da447ef02c76667d4995f6baab816038053' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3294 processed earlier; will process 7682 files now Step #5: #1 pulse cov: 11078 ft: 11079 exec/s: 0 rss: 189Mb Step #5: #2 pulse cov: 11592 ft: 12350 exec/s: 0 rss: 191Mb Step #5: #4 pulse cov: 12138 ft: 13479 exec/s: 0 rss: 193Mb Step #5: ==98168== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564f965612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564f9cb9c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564f9cb7f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564f9cb7f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564f96567652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564f964c842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564f964c2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564f96559595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564f995888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564f995888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564f995888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564f995888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564f995888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564f995888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564f995888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564f995888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564f995888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564f995888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564f9b78d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564f984e9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564f984f45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564f9829fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564f9829fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564f982a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564f9829f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564f9829f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564f9829f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564f9cb8194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564f9cb8a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564f9cb72529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564f9cb9cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbdfee59082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564f964c143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x77,0x73,0x3a,0xe3,0x8c,0x96,0x4b,0x2e,0xe3,0x8c,0x96,0x2e,0xe3,0x8c,0x96,0x2e,0xe3,0x8c,0x96,0x2e,0xe3,0x8c,0x96,0x2e,0xe3,0x8d,0x96,0x2e,0x54,0xe3,0x8c,0x8c, Step #5: \012ws:\343\214\226K.\343\214\226.\343\214\226.\343\214\226.\343\214\226.\343\215\226.T\343\214\214 Step #5: artifact_prefix='./'; Test unit written to ./oom-2138e333284fe69a869e99f37b6fc80eca094a83 Step #5: Base64: CndzOuOMlksu44yWLuOMli7jjJYu44yWLuONli5U44yM Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2726 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 766577151 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a2dcf61d60, 0x55a2dd14a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a2dd14a720,0x55a2defd42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2138e333284fe69a869e99f37b6fc80eca094a83' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3299 processed earlier; will process 7677 files now Step #5: ==98204== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a2d3aa42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a2da0df728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a2da0c246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a2da0c238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a2d3aaa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a2d3a0b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a2d3a05c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a2d3a9c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a2d6acb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a2d6acb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a2d6acb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a2d6acb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a2d6acb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a2d6acb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a2d6acb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a2d6acb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a2d6acb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a2d6acb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a2d8cd045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a2d5a2c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a2d5a375a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a2d57e2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a2d57e2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a2d57e3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a2d57e2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a2d57e2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a2d57e2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a2da0c494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2da0cd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a2da0b5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a2da0dffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f18b38d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a2d3a0443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: - - - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-41a72c4bd83e35fff540ddf933f7deec5866995e Step #5: Base64: LSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2727 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 767115774 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55db79109d60, 0x55db792f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55db792f2720,0x55db7b17c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/41a72c4bd83e35fff540ddf933f7deec5866995e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3300 processed earlier; will process 7676 files now Step #5: ==98240== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55db6fc4c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55db76287728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55db7626a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55db7626a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55db6fc52652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55db6fbb342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55db6fbadc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55db6fc44595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55db72c738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55db72c738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55db72c738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55db72c738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55db72c738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55db72c738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55db72c738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55db72c738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55db72c738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55db72c738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55db74e7845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55db71bd4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55db71bdf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55db7198ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55db7198ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55db7198b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55db7198a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55db7198a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55db7198a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55db7626c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55db762757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55db7625d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55db76287fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6cccf21082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55db6fbac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa, Step #5: \012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-62b3a159495baa3a52d3635c306c94c2ecb12f6f Step #5: Base64: CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2728 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 767605027 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5575b945dd60, 0x5575b964671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5575b9646720,0x5575bb4d02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/62b3a159495baa3a52d3635c306c94c2ecb12f6f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3301 processed earlier; will process 7675 files now Step #5: ==98276== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5575affa02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5575b65db728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5575b65be46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5575b65be38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5575affa6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5575aff0742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5575aff01c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5575aff98595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5575b2fc78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5575b2fc78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5575b2fc78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5575b2fc78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5575b2fc78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5575b2fc78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5575b2fc78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5575b2fc78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5575b2fc78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5575b2fc78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5575b51cc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5575b1f28578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5575b1f335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5575b1cded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5575b1cded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5575b1cdf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5575b1cde944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5575b1cde944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5575b1cde944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5575b65c094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5575b65c97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5575b65b1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5575b65dbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8145256082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5575aff0043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0, Step #5: \360\236\213\221\015in\015\360\236\213\221\015in\015\360\236\213\221\015in\015\360\236\213\221\015in\015\360 Step #5: artifact_prefix='./'; Test unit written to ./oom-9ff1fb83edb67165e41a01090429befa59576496 Step #5: Base64: 8J6LkQ1pbg3wnouRDWluDfCei5ENaW4N8J6LkQ1pbg3w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2729 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 768109786 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cd90b2ed60, 0x55cd90d1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cd90d17720,0x55cd92ba12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ff1fb83edb67165e41a01090429befa59576496' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3302 processed earlier; will process 7674 files now Step #5: ==98312== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cd876712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cd8dcac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cd8dc8f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cd8dc8f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cd87677652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cd875d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cd875d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cd87669595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cd8a6988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cd8a6988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cd8a6988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cd8a6988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cd8a6988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cd8a6988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cd8a6988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cd8a6988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cd8a6988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cd8a6988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cd8c89d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cd895f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cd896045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cd893afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cd893afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cd893b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cd893af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cd893af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cd893af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cd8dc9194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cd8dc9a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cd8dc82529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cd8dcacfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0a735fb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cd875d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x6b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x7b,0x63,0x63, Step #5: {{{{{{k{{{{{{{{{{{{{{{{{{{{{{{{cc Step #5: artifact_prefix='./'; Test unit written to ./oom-f0c9e97726d43c1a57a4b85012fa6f84fa27b125 Step #5: Base64: e3t7e3t7a3t7e3t7e3t7e3t7e3t7e3t7e3t7e3t7e2Nj Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2730 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 768605203 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5654331d1d60, 0x5654333ba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5654333ba720,0x5654352442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f0c9e97726d43c1a57a4b85012fa6f84fa27b125' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3303 processed earlier; will process 7673 files now Step #5: ==98348== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565429d142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56543034f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56543033246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56543033238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565429d1a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565429c7b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565429c75c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565429d0c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56542cd3b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56542cd3b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56542cd3b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56542cd3b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56542cd3b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56542cd3b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56542cd3b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56542cd3b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56542cd3b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56542cd3b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56542ef4045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56542bc9c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56542bca75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56542ba52d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56542ba52d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56542ba53808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56542ba52944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56542ba52944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56542ba52944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56543033494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56543033d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565430325529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56543034ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6d2971c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565429c7443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xe1,0x9f,0x80,0xe1,0x81,0x80,0x9,0x9,0xa,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \341\237\200\341\201\200\011\011\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-1ab5ef4f6c455c151b5ff923c78508f46e6e61b6 Step #5: Base64: PHN2Zz48dGV4dD7hn4DhgYAJCQo8L3RleHQ+PC9zdmc+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2731 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 769111636 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b4d4950d60, 0x55b4d4b3971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b4d4b39720,0x55b4d69c32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1ab5ef4f6c455c151b5ff923c78508f46e6e61b6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3304 processed earlier; will process 7672 files now Step #5: ==98384== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b4cb4932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b4d1ace728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b4d1ab146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b4d1ab138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b4cb499652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b4cb3fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b4cb3f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b4cb48b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b4ce4ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b4ce4ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b4ce4ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b4ce4ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b4ce4ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b4ce4ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b4ce4ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b4ce4ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b4ce4ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b4ce4ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b4d06bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b4cd41b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b4cd4265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b4cd1d1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b4cd1d1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b4cd1d2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b4cd1d1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b4cd1d1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b4cd1d1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b4d1ab394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b4d1abc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b4d1aa4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b4d1acefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f79e10c4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b4cb3f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x1d,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0x76,0x3a,0xa,0x20,0x20,0x73,0x74,0xcd,0x8f,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0x76,0x3a,0xa,0x3a,0x65,0x3a, Step #5: \000\000\000\035jobs:\012 v:\012 st\315\217jobs:\012 v:\012:e: Step #5: artifact_prefix='./'; Test unit written to ./oom-0494b4de421ebd5c29be4b47928238555710b489 Step #5: Base64: AAAAHWpvYnM6CiB2OgogIHN0zY9qb2JzOgogdjoKOmU6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2732 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 769615554 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55883abc2d60, 0x55883adab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55883adab720,0x55883cc352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0494b4de421ebd5c29be4b47928238555710b489' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3305 processed earlier; will process 7671 files now Step #5: ==98420== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5588317052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558837d40728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558837d2346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558837d2338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55883170b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55883166c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558831666c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5588316fd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55883472c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55883472c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55883472c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55883472c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55883472c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55883472c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55883472c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55883472c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55883472c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55883472c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55883693145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55883368d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5588336985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558833443d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558833443d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558833444808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558833443944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558833443944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558833443944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558837d2594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558837d2e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558837d16529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558837d40fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc4271f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55883166543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x76,0x23,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x23,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x23,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x23,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e, Step #5: v#version#version#version#version Step #5: artifact_prefix='./'; Test unit written to ./oom-016ce9c8d7e37ddb8f83646671e1c8974acea6cd Step #5: Base64: diN2ZXJzaW9uI3ZlcnNpb24jdmVyc2lvbiN2ZXJzaW9u Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2733 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 770133608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f1a292ad60, 0x55f1a2b1371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f1a2b13720,0x55f1a499d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/016ce9c8d7e37ddb8f83646671e1c8974acea6cd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3306 processed earlier; will process 7670 files now Step #5: ==98456== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f19946d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f19faa8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f19fa8b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f19fa8b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f199473652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f1993d442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f1993cec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f199465595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f19c4948c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f19c4948c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f19c4948c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f19c4948c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f19c4948c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f19c4948c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f19c4948c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f19c4948c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f19c4948c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f19c4948c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f19e69945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f19b3f5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f19b4005a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f19b1abd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f19b1abd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f19b1ac808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f19b1ab944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f19b1ab944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f19b1ab944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f19fa8d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f19fa967b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f19fa7e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f19faa8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5e2ef3f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f1993cd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf,0x38,0x3f,0x7a,0x6d,0x6c,0xd8,0x8b,0x47,0xdd,0x8d,0x9a,0x99,0x69,0x6f,0xa,0x68,0x73,0x2d,0x1f,0x2d,0x3e,0x22,0x22,0x20,0x3c,0x21,0x2c,0x2d,0x22,0x6d, Step #5: \357\273\2778?zml\330\213G\335\215\232\231io\012hs-\037->\"\" Step #5: Step #5: #0 0x55f9c1fd12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f9c860c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f9c85ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f9c85ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9c1fd7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f9c1f3842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f9c1f32c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9c1fc9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9c4ff88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9c4ff88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9c4ff88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9c4ff88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9c4ff88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9c4ff88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9c4ff88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9c4ff88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9c4ff88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9c4ff88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9c71fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f9c3f59578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9c3f645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9c3d0fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9c3d0fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f9c3d10808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9c3d0f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9c3d0f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9c3d0f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f9c85f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f9c85fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f9c85e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f9c860cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6a9a0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f9c1f3143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x2, Step #5: FUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAG\002 Step #5: artifact_prefix='./'; Test unit written to ./oom-6a5ad972926188c539b96395086d125beb20e905 Step #5: Base64: RlVaWi1UQUdGVVpaLVRBR0ZVWlotVEFHRlVaWi1UQUcC Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2735 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 771136009 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5633045bfd60, 0x5633047a871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5633047a8720,0x5633066322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6a5ad972926188c539b96395086d125beb20e905' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3308 processed earlier; will process 7668 files now Step #5: ==98528== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5632fb1022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56330173d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56330172046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56330172038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5632fb108652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5632fb06942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5632fb063c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5632fb0fa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5632fe1298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5632fe1298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5632fe1298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5632fe1298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5632fe1298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5632fe1298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5632fe1298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5632fe1298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5632fe1298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5632fe1298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56330032e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5632fd08a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5632fd0955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5632fce40d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5632fce40d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5632fce41808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5632fce40944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5632fce40944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5632fce40944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56330172294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56330172b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563301713529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56330173dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc8caefe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5632fb06243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x20,0x47,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x6,0x0,0x2,0x0,0x0,0x1,0x1,0x1,0x1,0x1,0x0,0x1,0xd7,0xa3,0x0,0x73,0x20,0x34,0x20,0x28,0x20,0x3a,0x2b, Step #5: / G\000\000\000\000\000\000\000\006\000\002\000\000\001\001\001\001\001\000\001\327\243\000s 4 ( :+ Step #5: artifact_prefix='./'; Test unit written to ./oom-9e8058bdb0de045a46af10fc66f332aa3c581576 Step #5: Base64: LyBHAAAAAAAAAAYAAgAAAQEBAQEAAdejAHMgNCAoIDor Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2736 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 771641704 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ac2488fd60, 0x55ac24a7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ac24a78720,0x55ac269022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9e8058bdb0de045a46af10fc66f332aa3c581576' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3309 processed earlier; will process 7667 files now Step #5: ==98564== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ac1b3d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ac21a0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ac219f046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ac219f038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ac1b3d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ac1b33942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ac1b333c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ac1b3ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ac1e3f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ac1e3f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ac1e3f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ac1e3f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ac1e3f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ac1e3f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ac1e3f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ac1e3f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ac1e3f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ac1e3f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ac205fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ac1d35a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ac1d3655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ac1d110d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ac1d110d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ac1d111808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ac1d110944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ac1d110944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ac1d110944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ac219f294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ac219fb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ac219e3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ac21a0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7effb80ea082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ac1b33243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x2d,0x2d,0xd7,0x81,0x50,0x43,0x44,0x41,0x54,0x41,0x49,0x45,0x54,0x31,0x25,0x2d,0xd7,0x81,0x6c,0x6c,0x73,0x22,0xd7,0x80,0x2d,0x78,0x22,0xd7,0x81,0x2d,0x78, Step #5: 4:2:0.1\012 \012-7:5:8.2-->4:2:0.1\0126 Step #5: artifact_prefix='./'; Test unit written to ./oom-57988928269f233a98d26eee9dbec08a1bb27327 Step #5: Base64: Nzo1OjguMi0tPjQ6MjowLjEKIAotNzo1OjguMi0tPjQ6MjowLjEKNg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2982 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 904057660 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55708acefd60, 0x55708aed871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55708aed8720,0x55708cd622c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/57988928269f233a98d26eee9dbec08a1bb27327' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3648 processed earlier; will process 7328 files now Step #5: ==107428== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5570818322d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557087e6d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557087e5046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557087e5038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557081838652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55708179942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557081793c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55708182a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570848598c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570848598c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570848598c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570848598c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570848598c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570848598c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570848598c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570848598c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570848598c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570848598c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557086a5e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5570837ba578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570837c55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557083570d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557083570d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557083571808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557083570944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557083570944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557083570944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557087e5294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557087e5b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557087e43529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557087e6dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbcc79d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55708179243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x3e,0x32,0x2d,0x3d,0x3e,0xde,0xae,0x21,0xde,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0xde,0xae,0x21,0xde,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x4c,0x43,0xb2,0xb2,0xb2,0xb2,0x24, Step #5: =>2-=>\336\256!\336\256-\\\\\\\\\336\256!\336\256-\\\\\\\\\\\\\\\\\\\\\\LC\262\262\262\262$ Step #5: artifact_prefix='./'; Test unit written to ./oom-2cb5f6a1a4f495599510c493462828bebeec520e Step #5: Base64: PT4yLT0+3q4h3q4tXFxcXN6uId6uLVxcXFxcXFxcXFxcTEOysrKyJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2983 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 904656777 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5653be49cd60, 0x5653be68571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5653be685720,0x5653c050f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2cb5f6a1a4f495599510c493462828bebeec520e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3649 processed earlier; will process 7327 files now Step #5: #1 pulse cov: 3803 ft: 3804 exec/s: 0 rss: 173Mb Step #5: #2 pulse cov: 4184 ft: 4633 exec/s: 0 rss: 175Mb Step #5: ==107464== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653b4fdf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5653bb61a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5653bb5fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5653bb5fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5653b4fe5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5653b4f4642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5653b4f40c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5653b4fd7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653b80068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653b80068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653b80068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653b80068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653b80068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653b80068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653b80068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653b80068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653b80068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653b80068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5653ba20b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5653b6f67578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653b6f725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5653b6d1dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5653b6d1dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5653b6d1e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5653b6d1d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5653b6d1d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5653b6d1d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5653bb5ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5653bb6087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5653bb5f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5653bb61afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb2f8804082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5653b4f3f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd9,0x9d,0x0,0xc2,0x1,0x5d,0x0,0x1,0x0,0x0,0xff,0x0,0x8,0x0,0xc1,0x0,0x1,0x0,0x0,0xff,0x0,0x8,0x0,0xc2,0x0,0x59,0x0,0x3e,0xbe,0xb2,0x45,0x44,0x45,0xb1,0x45,0xb1,0x3,0x0,0x0,0x0, Step #5: \331\235\000\302\001]\000\001\000\000\377\000\010\000\301\000\001\000\000\377\000\010\000\302\000Y\000>\276\262EDE\261E\261\003\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-3ce1c8db103ba87ecae8d417fdf88a2e79c8447b Step #5: Base64: 2Z0AwgFdAAEAAP8ACADBAAEAAP8ACADCAFkAPr6yRURFsUWxAwAAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2984 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 905454101 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556bb6c0fd60, 0x556bb6df871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556bb6df8720,0x556bb8c822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3ce1c8db103ba87ecae8d417fdf88a2e79c8447b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3652 processed earlier; will process 7324 files now Step #5: ==107500== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556bad7522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556bb3d8d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556bb3d7046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556bb3d7038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556bad758652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556bad6b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556bad6b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556bad74a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556bb07798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556bb07798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556bb07798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556bb07798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556bb07798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556bb07798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556bb07798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556bb07798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556bb07798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556bb07798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556bb297e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556baf6da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556baf6e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556baf490d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556baf490d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556baf491808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556baf490944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556baf490944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556baf490944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556bb3d7294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556bb3d7b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556bb3d63529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556bb3d8dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa4d27f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556bad6b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1a,0x1a,0x65,0x60,0xdb,0xa4,0x60,0x65,0x60,0xdb,0xa4,0x0,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x60,0x42,0x65,0x60,0xdb,0xa4,0x47,0x49,0x4e,0x0,0x2d,0x0,0x60,0x65,0x60,0xdb,0xa4,0x60,0x2d,0xfc,0x42, Step #5: \032\032e`\333\244`e`\333\244\000-----BE`Be`\333\244GIN\000-\000`e`\333\244`-\374B Step #5: artifact_prefix='./'; Test unit written to ./oom-c76571c9413cd7d504c3a234d7b7af497cba34c9 Step #5: Base64: GhplYNukYGVg26QALS0tLS1CRWBCZWDbpEdJTgAtAGBlYNukYC38Qg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2985 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 906092507 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5600d25e6d60, 0x5600d27cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5600d27cf720,0x5600d46592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c76571c9413cd7d504c3a234d7b7af497cba34c9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3653 processed earlier; will process 7323 files now Step #5: ==107536== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600c91292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5600cf764728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5600cf74746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5600cf74738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5600c912f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600c909042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600c908ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600c9121595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600cc1508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600cc1508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600cc1508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600cc1508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600cc1508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600cc1508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600cc1508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600cc1508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600cc1508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600cc1508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600ce35545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5600cb0b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600cb0bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600cae67d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600cae67d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600cae68808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600cae67944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600cae67944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600cae67944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5600cf74994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5600cf7527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5600cf73a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5600cf764fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2d4ebfa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600c908943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x77,0x6c,0x3e,0x0,0x0,0x0,0x0,0x0,0x0,0x50,0x4b,0x47,0x5f,0x4e,0x41,0x4d,0x45,0x3d,0x4,0x0,0x0,0xff,0x9,0x0,0x2a,0x28,0x0,0x0,0x0,0x95,0x2,0xf8,0xff,0x0,0x0,0x20,0x0,0xff,0x0, Step #5: \000\000\000\000\000\000PKG_NAME=\004\000\000\377\011\000*(\000\000\000\225\002\370\377\000\000 \000\377\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-6581a7a9498ab8c704b678cf4038fd90f943c6a6 Step #5: Base64: PHdsPgAAAAAAAFBLR19OQU1FPQQAAP8JACooAAAAlQL4/wAAIAD/AA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2986 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 906607492 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b3f610fd60, 0x55b3f62f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b3f62f8720,0x55b3f81822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6581a7a9498ab8c704b678cf4038fd90f943c6a6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3654 processed earlier; will process 7322 files now Step #5: ==107572== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b3ecc522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b3f328d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b3f327046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b3f327038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b3ecc58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b3ecbb942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b3ecbb3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b3ecc4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b3efc798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b3efc798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b3efc798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b3efc798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b3efc798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b3efc798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b3efc798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b3efc798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b3efc798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b3efc798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b3f1e7e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b3eebda578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b3eebe55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b3ee990d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b3ee990d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b3ee991808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b3ee990944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b3ee990944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b3ee990944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b3f327294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b3f327b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b3f3263529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b3f328dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc92108082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b3ecbb243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x1,0x24,0x5b, Step #5: $::::::::::::::::::::::::::::::::::::\001$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-b332f18223f0e276c1b213833848d4524b7c5907 Step #5: Base64: JDo6Ojo6Ojo6Ojo6Ojo6Ojo6Ojo6Ojo6Ojo6Ojo6Ojo6Ojo6OgEkWw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2987 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 907126210 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558fedbbdd60, 0x558fedda671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558fedda6720,0x558fefc302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b332f18223f0e276c1b213833848d4524b7c5907' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3655 processed earlier; will process 7321 files now Step #5: ==107608== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558fe47002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558fead3b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558fead1e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558fead1e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558fe4706652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558fe466742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558fe4661c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558fe46f8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558fe77278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558fe77278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558fe77278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558fe77278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558fe77278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558fe77278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558fe77278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558fe77278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558fe77278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558fe77278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558fe992c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558fe6688578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558fe66935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558fe643ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558fe643ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558fe643f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558fe643e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558fe643e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558fe643e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558fead2094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558fead297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558fead11529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558fead3bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97a4768082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558fe466043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3a,0x53,0x0,0x0,0x0,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x24,0x7c,0x24,0x7c,0x24,0x29,0x7c,0x24,0x29,0x5a,0x29,0x7c,0x29,0x7c,0x28,0x29,0x7c,0x29,0x29,0x7c,0x29,0x7c,0x29,0x7c, Step #5: (?:S\000\000\000(?:(?:(?:$|$|$)|$)Z)|)|()|))|)|)| Step #5: artifact_prefix='./'; Test unit written to ./oom-1439bdc3b6ba351a8f065efbb44259fb8c40e6a5 Step #5: Base64: KD86UwAAACg/Oig/Oig/OiR8JHwkKXwkKVopfCl8KCl8KSl8KXwpfA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2988 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 907641915 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55da50748d60, 0x55da5093171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55da50931720,0x55da527bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1439bdc3b6ba351a8f065efbb44259fb8c40e6a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3656 processed earlier; will process 7320 files now Step #5: ==107644== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55da4728b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55da4d8c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55da4d8a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55da4d8a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55da47291652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55da471f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55da471ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55da47283595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55da4a2b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55da4a2b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55da4a2b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55da4a2b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55da4a2b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55da4a2b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55da4a2b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55da4a2b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55da4a2b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55da4a2b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55da4c4b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55da49213578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55da4921e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55da48fc9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55da48fc9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55da48fca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55da48fc9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55da48fc9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55da48fc9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55da4d8ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55da4d8b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55da4d89c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55da4d8c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8fea1c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55da471eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x11,0x0,0x7,0x0,0xce,0x93,0x1,0x60,0x54,0x43,0x4f,0x0,0x0,0x1,0x60,0x54,0x43,0x49,0x44,0x11,0x0,0x7,0x0,0xce,0x93,0x1,0x60,0x54,0x43,0x4f,0x0,0x0,0x1,0x60,0x54,0x43,0x4f,0x1, Step #5: ID\021\000\007\000\316\223\001`TCO\000\000\001`TCID\021\000\007\000\316\223\001`TCO\000\000\001`TCO\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-b967579ce5848610cb35ce4a9bfd0ad1be5ee40a Step #5: Base64: SUQRAAcAzpMBYFRDTwAAAWBUQ0lEEQAHAM6TAWBUQ08AAAFgVENPAQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2989 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 908284393 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ba1842cd60, 0x55ba1861571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ba18615720,0x55ba1a49f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b967579ce5848610cb35ce4a9bfd0ad1be5ee40a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3657 processed earlier; will process 7319 files now Step #5: ==107680== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ba0ef6f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ba155aa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ba1558d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ba1558d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ba0ef75652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ba0eed642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ba0eed0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ba0ef67595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ba11f968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ba11f968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ba11f968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ba11f968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ba11f968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ba11f968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ba11f968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ba11f968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ba11f968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ba11f968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ba1419b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ba10ef7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ba10f025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ba10cadd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ba10cadd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ba10cae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ba10cad944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ba10cad944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ba10cad944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ba1558f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ba155987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ba15580529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ba155aafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5f4b41a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ba0eecf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x69,0x66,0x3d,0x42,0x42,0xa,0x3d,0x20,0x9,0x0,0x0,0x0,0x20,0xa,0x3d,0x20,0x20,0x2e,0x1d,0x21,0x2e,0x2d,0x13,0x1d,0x60,0x60,0x20,0x60,0x0,0x60,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x9c,0xa, Step #5: rif=BB\012= \011\000\000\000 \012= .\035!.-\023\035`` `\000`\377\377\377\377\377\377\377\234\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-ac4b71be8c63b92c456d0002bd377193e5bc29af Step #5: Base64: cmlmPUJCCj0gCQAAACAKPSAgLh0hLi0THWBgIGAAYP////////+cCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2990 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 908922608 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d429ad7d60, 0x55d429cc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d429cc0720,0x55d42bb4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ac4b71be8c63b92c456d0002bd377193e5bc29af' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3658 processed earlier; will process 7318 files now Step #5: ==107716== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d42061a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d426c55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d426c3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d426c3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d420620652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d42058142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d42057bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d420612595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4236418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4236418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4236418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4236418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4236418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4236418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4236418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4236418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4236418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4236418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d42584645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d4225a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d4225ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d422358d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d422358d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d422359808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d422358944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d422358944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d422358944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d426c3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d426c437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d426c2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d426c55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e110eb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d42057a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x3e,0x32,0x2d,0x28,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x5c,0x5c,0x5c,0x5c,0xde,0xae,0x21,0xde,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x4c,0x43,0xb2,0xb2,0xb2,0xb2,0x24, Step #5: =>2-(\000\000\000\000\000\000\000\\\\\\\\\336\256!\336\256-\\\\\\\\\\\\\\\\\\\\\\LC\262\262\262\262$ Step #5: artifact_prefix='./'; Test unit written to ./oom-8f12316fde8f05c565838f6f2766ef3878a859a0 Step #5: Base64: PT4yLSgAAAAAAAAAXFxcXN6uId6uLVxcXFxcXFxcXFxcTEOysrKyJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2991 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 909434477 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5559de26dd60, 0x5559de45671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5559de456720,0x5559e02e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8f12316fde8f05c565838f6f2766ef3878a859a0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3659 processed earlier; will process 7317 files now Step #5: ==107752== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5559d4db02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5559db3eb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5559db3ce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5559db3ce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5559d4db6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5559d4d1742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5559d4d11c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5559d4da8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5559d7dd78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5559d7dd78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5559d7dd78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5559d7dd78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5559d7dd78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5559d7dd78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5559d7dd78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5559d7dd78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5559d7dd78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5559d7dd78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5559d9fdc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5559d6d38578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5559d6d435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5559d6aeed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5559d6aeed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5559d6aef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5559d6aee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5559d6aee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5559d6aee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5559db3d094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559db3d97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5559db3c1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5559db3ebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ef1bff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5559d4d1043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x32,0x12,0x3d,0x3c,0x27,0x27,0x37,0x2f,0x30,0x27,0x67,0x27,0x27,0x66,0x27,0x27,0x27,0x27,0x34,0xe2,0x81,0xa5,0x2d,0x3d,0x27,0x34,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x35,0x27,0x24,0x27,0x2d, Step #5: $22\022=<''7/0'g''f''''4\342\201\245-='4'''''''5'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-1dbe91837ab7b9ad90a3986b48f697edba27fe57 Step #5: Base64: JDIyEj08Jyc3LzAnZycnZicnJyc04oGlLT0nNCcnJycnJyc1JyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2992 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 909951988 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56087da8fd60, 0x56087dc7871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56087dc78720,0x56087fb022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1dbe91837ab7b9ad90a3986b48f697edba27fe57' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3660 processed earlier; will process 7316 files now Step #5: ==107788== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608745d22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56087ac0d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56087abf046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56087abf038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608745d8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56087453942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560874533c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608745ca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608775f98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608775f98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608775f98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608775f98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608775f98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608775f98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608775f98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608775f98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608775f98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608775f98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608797fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56087655a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608765655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560876310d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560876310d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560876311808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560876310944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560876310944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560876310944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56087abf294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56087abfb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56087abe3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56087ac0dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1555b4b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56087453243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e,0x3c,0xe9,0x88,0x87,0x3e, Step #5: <\351\210\207><\351\210\207><\351\210\207><\351\210\207><\351\210\207><\351\210\207><\351\210\207><\351\210\207> Step #5: artifact_prefix='./'; Test unit written to ./oom-73728b85a6ed454dfa701fbb81e8ffa68c603e1d Step #5: Base64: POmIhz486YiHPjzpiIc+POmIhz486YiHPjzpiIc+POmIhz486YiHPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2993 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 910449550 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5612ea0d7d60, 0x5612ea2c071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5612ea2c0720,0x5612ec14a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/73728b85a6ed454dfa701fbb81e8ffa68c603e1d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3661 processed earlier; will process 7315 files now Step #5: #1 pulse cov: 3599 ft: 3600 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 11458 ft: 12336 exec/s: 0 rss: 193Mb Step #5: ==107824== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612e0c1a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5612e7255728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5612e723846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5612e723838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612e0c20652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5612e0b8142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5612e0b7bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612e0c12595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612e3c418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612e3c418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612e3c418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612e3c418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612e3c418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612e3c418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612e3c418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612e3c418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612e3c418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612e3c418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5612e5e4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5612e2ba2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612e2bad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612e2958d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612e2958d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612e2959808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612e2958944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612e2958944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612e2958944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5612e723a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5612e72437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5612e722b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5612e7255fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82dd483082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5612e0b7a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0x9,0x2b,0xa,0xa,0x9,0x9,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xa,0x9,0x2b,0x9,0x73,0xa,0x0,0x2b,0x0,0x0,0x0,0x74,0x72,0x65,0x61,0x6d,0x9,0xd5,0x75,0x7e,0x74,0x81,0x81,0x81,0x14,0x81, Step #5: +\011+\012\012\011\011\000\000\000\000\000\000\000\012\011+\011s\012\000+\000\000\000tream\011\325u~t\201\201\201\024\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-f9bafb8c324da01a428ab285b9440ecabf91e7b0 Step #5: Base64: KwkrCgoJCQAAAAAAAAAKCSsJcwoAKwAAAHRyZWFtCdV1fnSBgYEUgQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2994 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 911073394 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d7d29d0d60, 0x55d7d2bb971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d7d2bb9720,0x55d7d4a432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f9bafb8c324da01a428ab285b9440ecabf91e7b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3664 processed earlier; will process 7312 files now Step #5: ==107860== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d7c95132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d7cfb4e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d7cfb3146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d7cfb3138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d7c9519652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d7c947a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d7c9474c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d7c950b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d7cc53a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d7cc53a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d7cc53a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d7cc53a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d7cc53a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d7cc53a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d7cc53a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d7cc53a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d7cc53a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d7cc53a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d7ce73f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d7cb49b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d7cb4a65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d7cb251d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d7cb251d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d7cb252808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d7cb251944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d7cb251944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d7cb251944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d7cfb3394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d7cfb3c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d7cfb24529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d7cfb4efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1348324082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d7c947343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7d,0x7d, Step #5: \"\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}\\u}} Step #5: artifact_prefix='./'; Test unit written to ./oom-de2bb946010b40abd0b85bcd6c1a1b66a032c62f Step #5: Base64: Ilx1e2J9XHV7Yn1cdXtifVx1e2J9XHV7Yn1cdXtifVx1e2J9XHV9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2995 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 911598743 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562521b21d60, 0x562521d0a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562521d0a720,0x562523b942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/de2bb946010b40abd0b85bcd6c1a1b66a032c62f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3665 processed earlier; will process 7311 files now Step #5: ==107896== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5625186642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56251ec9f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56251ec8246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56251ec8238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56251866a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5625185cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5625185c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56251865c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56251b68b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56251b68b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56251b68b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56251b68b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56251b68b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56251b68b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56251b68b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56251b68b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56251b68b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56251b68b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56251d89045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56251a5ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56251a5f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56251a3a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56251a3a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56251a3a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56251a3a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56251a3a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56251a3a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56251ec8494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56251ec8d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56251ec75529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56251ec9ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f86b769c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5625185c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x66,0x69,0x6c,0x65,0x3a,0xf0,0x91,0x96,0xbd,0xf0,0x91,0x96,0xaf,0xf0,0x91,0x96,0xb9,0xf0,0x91,0x96,0xaf,0x0,0x3a,0xf0,0x91,0x96,0xb9,0xf0,0x91,0x96,0xaf,0xf0,0x91,0x96,0xb9,0xf0,0x91,0x96,0xaf,0x30, Step #5: file:\360\221\226\275\360\221\226\257\360\221\226\271\360\221\226\257\000:\360\221\226\271\360\221\226\257\360\221\226\271\360\221\226\2570 Step #5: artifact_prefix='./'; Test unit written to ./oom-d8c6c42a128748bc798def4f3348b52f31ca8de7 Step #5: Base64: ZmlsZTrwkZa98JGWr/CRlrnwkZavADrwkZa58JGWr/CRlrnwkZavMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2996 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 912108770 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b4b4e6d60, 0x557b4b6cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b4b6cf720,0x557b4d5592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d8c6c42a128748bc798def4f3348b52f31ca8de7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3666 processed earlier; will process 7310 files now Step #5: ==107932== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b420292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b48664728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b4864746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b4864738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b4202f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b41f9042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b41f8ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b42021595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b450508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b450508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b450508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b450508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b450508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b450508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b450508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b450508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b450508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b450508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557b4725545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b43fb1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b43fbc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b43d67d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b43d67d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b43d68808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b43d67944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b43d67944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b43d67944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b4864994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b486527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b4863a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b48664fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f798b8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b41f8943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x90,0xa,0xcd,0x90,0xa,0xcd,0x90,0xa,0xed,0x90,0x90,0xa,0xed,0x96,0x90,0xed,0x90,0x90,0xa,0xed,0x90,0x90,0xa,0xed,0x96,0xa5,0xed,0x90,0x90,0xa,0xed,0x96,0x90,0xed,0x90,0x90,0xa,0xed,0x90, Step #5: \315\220\012\315\220\012\315\220\012\355\220\220\012\355\226\220\355\220\220\012\355\220\220\012\355\226\245\355\220\220\012\355\226\220\355\220\220\012\355\220 Step #5: artifact_prefix='./'; Test unit written to ./oom-2bf86cc8dd331e44ad9648ef7c3e3c27e6604360 Step #5: Base64: zZAKzZAKzZAK7ZCQCu2WkO2QkArtkJAK7Zal7ZCQCu2WkO2QkArtkA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2997 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 912620744 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec1c957d60, 0x55ec1cb4071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec1cb40720,0x55ec1e9ca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2bf86cc8dd331e44ad9648ef7c3e3c27e6604360' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3667 processed earlier; will process 7309 files now Step #5: ==107968== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec1349a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec19ad5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec19ab846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec19ab838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec134a0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec1340142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec133fbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec13492595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec164c18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec164c18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec164c18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec164c18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec164c18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec164c18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec164c18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec164c18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec164c18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec164c18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec186c645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec15422578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec1542d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec151d8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec151d8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec151d9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec151d8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec151d8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec151d8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec19aba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec19ac37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec19aab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec19ad5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa5a1b45082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec133fa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xcd,0x9e,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0x49,0xcd,0x9d,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: ws:\315\236\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204\315\204I\315\235\315\204\315\204\315\204\315\204\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-ec16eecbf724d61e25444cc23d81745e04a335f2 Step #5: Base64: d3M6zZ7NhM2EzYTNhM2EzYTNhM2EzYRJzZ3NhM2EzYTNhM2EzYTNhA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2998 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 913141999 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a85d295d60, 0x55a85d47e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a85d47e720,0x55a85f3082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ec16eecbf724d61e25444cc23d81745e04a335f2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3668 processed earlier; will process 7308 files now Step #5: ==108004== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a853dd82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a85a413728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a85a3f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a85a3f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a853dde652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a853d3f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a853d39c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a853dd0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a856dff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a856dff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a856dff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a856dff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a856dff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a856dff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a856dff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a856dff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a856dff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a856dff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a85900445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a855d60578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a855d6b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a855b16d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a855b16d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a855b17808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a855b16944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a855b16944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a855b16944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a85a3f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a85a4017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a85a3e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a85a413fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f431ce20082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a853d3843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x54,0x18,0x1,0xa,0x1,0x9,0x79,0x20,0x0,0xc2,0xb7,0x8,0x46,0x55,0x5a,0xf3,0xa0,0x80,0xb5,0x5a,0x2d,0x54,0x18,0x1,0x1,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0xec,0x20,0x0,0x0,0x0,0x2b, Step #5: \000T\030\001\012\001\011y \000\302\267\010FUZ\363\240\200\265Z-T\030\001\001FUZZ-TAG\354 \000\000\000+ Step #5: artifact_prefix='./'; Test unit written to ./oom-a3c707b4eb3307f69c97588cac7469b888601356 Step #5: Base64: AFQYAQoBCXkgAMK3CEZVWvOggLVaLVQYAQFGVVpaLVRBR+wgAAAAKw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2999 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 913654878 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5557d62b4d60, 0x5557d649d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5557d649d720,0x5557d83272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a3c707b4eb3307f69c97588cac7469b888601356' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3669 processed earlier; will process 7307 files now Step #5: #1 pulse cov: 3680 ft: 3681 exec/s: 0 rss: 171Mb Step #5: ==108040== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5557ccdf72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5557d3432728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5557d341546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5557d341538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5557ccdfd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5557ccd5e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5557ccd58c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5557ccdef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5557cfe1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5557cfe1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5557cfe1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5557cfe1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5557cfe1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5557cfe1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5557cfe1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5557cfe1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5557cfe1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5557cfe1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5557d202345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5557ced7f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5557ced8a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5557ceb35d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5557ceb35d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5557ceb36808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5557ceb35944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5557ceb35944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5557ceb35944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5557d341794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5557d34207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5557d3408529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5557d3432fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0fe127b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5557ccd5743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdd,0x84,0xb,0x0,0x0,0x0,0x0,0x1,0x1f,0x0,0x0,0x0,0x0,0x0,0x1f,0x0,0x0,0x1,0x1,0x0,0x0,0x0,0x0,0x1f,0x0,0x0,0x1,0x1,0x0,0x0,0x0,0x0,0x1f,0x0,0x0,0x1,0x1,0x0,0xec,0x1, Step #5: \335\204\013\000\000\000\000\001\037\000\000\000\000\000\037\000\000\001\001\000\000\000\000\037\000\000\001\001\000\000\000\000\037\000\000\001\001\000\354\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-9ec59e1fbf72b3bdfc377be8a2a445aa2478e9eb Step #5: Base64: 3YQLAAAAAAEfAAAAAAAfAAABAQAAAAAfAAABAQAAAAAfAAABAQDsAQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3000 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 914214002 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55687121ed60, 0x55687140771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556871407720,0x5568732912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ec59e1fbf72b3bdfc377be8a2a445aa2478e9eb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3671 processed earlier; will process 7305 files now Step #5: ==108076== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556867d612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55686e39c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55686e37f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55686e37f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556867d67652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556867cc842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556867cc2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556867d59595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55686ad888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55686ad888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55686ad888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55686ad888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55686ad888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55686ad888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55686ad888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55686ad888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55686ad888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55686ad888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55686cf8d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556869ce9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556869cf45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556869a9fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556869a9fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556869aa0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556869a9f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556869a9f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556869a9f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55686e38194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55686e38a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55686e372529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55686e39cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd9458af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556867cc143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x3a,0x2f,0xcd,0x95,0xcd,0x9d,0xcd,0x9b,0xcd,0x9b,0xcd,0x89,0x53,0x3a,0x2f,0x2f,0xce,0x95,0xcd,0x9b,0xcd,0x9b,0x67,0xcd,0x82,0xcd,0x95,0xcd,0x96,0xcd,0x95,0xcd,0x95,0xc5,0x95,0xcd,0x95,0xcd,0x9d, Step #5: i:/\315\225\315\235\315\233\315\233\315\211S://\316\225\315\233\315\233g\315\202\315\225\315\226\315\225\315\225\305\225\315\225\315\235 Step #5: artifact_prefix='./'; Test unit written to ./oom-1c8d6dee02b85cc8321d37e2dda03a39829f8f61 Step #5: Base64: aTovzZXNnc2bzZvNiVM6Ly/Olc2bzZtnzYLNlc2WzZXNlcWVzZXNnQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3001 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 914726847 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fb00fe0d60, 0x55fb011c971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fb011c9720,0x55fb030532c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1c8d6dee02b85cc8321d37e2dda03a39829f8f61' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3672 processed earlier; will process 7304 files now Step #5: ==108112== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55faf7b232d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fafe15e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fafe14146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fafe14138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55faf7b29652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55faf7a8a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55faf7a84c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55faf7b1b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fafab4a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fafab4a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fafab4a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fafab4a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fafab4a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fafab4a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fafab4a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fafab4a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fafab4a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fafab4a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fafcd4f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55faf9aab578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55faf9ab65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55faf9861d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55faf9861d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55faf9862808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55faf9861944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55faf9861944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55faf9861944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fafe14394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fafe14c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fafe134529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fafe15efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8531348082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55faf7a8343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5b,0x5b,0x5b,0x5b,0x0,0x5b,0x53,0x1f,0x3f,0x2d,0x32,0x32,0x5f,0x3f,0x30,0x3a,0xef,0xbd,0xbf,0x5f,0x3f,0x75,0x6c,0x3a,0x5f,0x3f,0x30,0x3a,0x5f,0x38,0x37,0x34,0x35,0x36,0x32,0x2d,0x2d,0x31,0x2d, Step #5: [[[[[\000[S\037?-22_?0:\357\275\277_?ul:_?0:_874562--1- Step #5: artifact_prefix='./'; Test unit written to ./oom-03d4e57675d971a2dba4070e7049d55b643d87c2 Step #5: Base64: W1tbW1sAW1MfPy0yMl8/MDrvvb9fP3VsOl8/MDpfODc0NTYyLS0xLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3002 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 915236491 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558c4d723d60, 0x558c4d90c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558c4d90c720,0x558c4f7962c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/03d4e57675d971a2dba4070e7049d55b643d87c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3673 processed earlier; will process 7303 files now Step #5: ==108148== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558c442662d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558c4a8a1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558c4a88446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558c4a88438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558c4426c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558c441cd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558c441c7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558c4425e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558c4728d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558c4728d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558c4728d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558c4728d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558c4728d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558c4728d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558c4728d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558c4728d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558c4728d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558c4728d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558c4949245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558c461ee578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558c461f95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558c45fa4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558c45fa4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558c45fa5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558c45fa4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558c45fa4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558c45fa4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558c4a88694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558c4a88f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558c4a877529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558c4a8a1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8108438082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558c441c643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21,0x69,0x66,0x31,0x30,0x29,0x29,0x29,0x29,0xd7,0xa9,0x28,0x0,0x0,0x0,0x51,0x51,0x0,0x30,0x29,0x74,0x0,0x10,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x30,0x9,0x0,0x0,0x0, Step #5: !if10))))\327\251(\000\000\000QQ\0000)t\000\020\000\000\000\000\000\000\000\000\000\000\000\000\0000\011\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-8ec5e3054d051eb5859e68f092deb8d7d4bab23d Step #5: Base64: IWlmMTApKSkp16koAAAAUVEAMCl0ABAAAAAAAAAAAAAAAAAAMAkAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3003 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 915755106 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5584dce07d60, 0x5584dcff071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5584dcff0720,0x5584dee7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ec5e3054d051eb5859e68f092deb8d7d4bab23d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3674 processed earlier; will process 7302 files now Step #5: ==108184== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5584d394a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5584d9f85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5584d9f6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5584d9f6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5584d3950652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5584d38b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584d38abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5584d3942595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584d69718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584d69718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584d69718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584d69718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584d69718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584d69718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584d69718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584d69718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584d69718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584d69718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5584d8b7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5584d58d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584d58dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584d5688d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584d5688d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584d5689808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584d5688944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584d5688944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584d5688944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5584d9f6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5584d9f737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5584d9f5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5584d9f85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f26ed0ad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584d38aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x0,0x5b,0x27,0x5b,0x13,0x0,0x18,0x0,0x5b,0x28,0x5d,0x5b,0x27,0x5b,0x13,0x0,0x18,0x0,0x5b,0x28,0x5d,0x5b,0x27,0x5d,0x5b,0x28,0x5d,0x5b,0x27,0x27,0x5d,0x5b,0x28,0x5d,0x5b,0x27,0x5d,0x5b,0x28,0x0, Step #5: 0\000['[\023\000\030\000[(]['[\023\000\030\000[(]['][(][''][(]['][(\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-be1182bac1e53ae49393b4c030fc52b18e2fd3ae Step #5: Base64: MABbJ1sTABgAWyhdWydbEwAYAFsoXVsnXVsoXVsnJ11bKF1bJ11bKAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3004 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 916265057 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56060bfd9d60, 0x56060c1c271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56060c1c2720,0x56060e04c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be1182bac1e53ae49393b4c030fc52b18e2fd3ae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3675 processed earlier; will process 7301 files now Step #5: #1 pulse cov: 4009 ft: 4010 exec/s: 0 rss: 171Mb Step #5: #2 pulse cov: 4648 ft: 5000 exec/s: 0 rss: 174Mb Step #5: ==108220== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560602b1c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560609157728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56060913a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56060913a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560602b22652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560602a8342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560602a7dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560602b14595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560605b438c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560605b438c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560605b438c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560605b438c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560605b438c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560605b438c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560605b438c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560605b438c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560605b438c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560605b438c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560607d4845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560604aa4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560604aaf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56060485ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56060485ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56060485b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56060485a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56060485a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56060485a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56060913c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606091457b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56060912d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560609157fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe92c4c3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560602a7c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x26,0x22,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0xaa,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x8a,0xd6,0x27,0xff,0x1c,0xaa,0x61,0x21, Step #5: HU&\"\326\212\326\212\326\212\326\212\326\212\326\212\326\212\326\252\326\212\326\212\326\212\326\212\326\212\326\212\326\212\326'\377\034\252a! Step #5: artifact_prefix='./'; Test unit written to ./oom-b5dab88180c620c83375a4073b25d817696991a4 Step #5: Base64: SFUmItaK1orWitaK1orWitaK1qrWitaK1orWitaK1orWitYn/xyqYSE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3005 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 916864331 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557afe697d60, 0x557afe88071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557afe880720,0x557b0070a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5dab88180c620c83375a4073b25d817696991a4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3678 processed earlier; will process 7298 files now Step #5: ==108256== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557af51da2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557afb815728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557afb7f846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557afb7f838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557af51e0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557af514142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557af513bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557af51d2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557af82018c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557af82018c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557af82018c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557af82018c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557af82018c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557af82018c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557af82018c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557af82018c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557af82018c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557af82018c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557afa40645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557af7162578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557af716d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557af6f18d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557af6f18d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557af6f19808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557af6f18944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557af6f18944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557af6f18944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557afb7fa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557afb8037b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557afb7eb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557afb815fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3faac1a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557af513a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x63,0x68,0x61,0x72,0x22,0x0,0x78,0xcd,0xab,0xcd,0xab,0xcd,0xab,0xcd,0xab,0xcd,0xab,0xcd,0xab,0xcd,0xab,0xcd,0xab,0x28,0x3f, Step #5: Step #5: Step #5: #0 0x55868712d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55868d768728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55868d74b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55868d74b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558687133652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55868709442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55868708ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558687125595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55868a1548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55868a1548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55868a1548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55868a1548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55868a1548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55868a1548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55868a1548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55868a1548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55868a1548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55868a1548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55868c35945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5586890b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5586890c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558688e6bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558688e6bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558688e6c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558688e6b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558688e6b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558688e6b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55868d74d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55868d7567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55868d73e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55868d768fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f88c8bde082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55868708d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x3e,0x32,0x2d,0x3d,0x3e,0xde,0xae,0x21,0xde,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0xde,0xae,0x21,0xce,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x2d,0x5c,0x5c,0x4c,0x43,0xb2,0xb2,0xb2,0xb2,0x24, Step #5: =>2-=>\336\256!\336\256-\\\\\\\\\336\256!\316\256-\\\\\\\\\\\\\\\\\\-\\\\LC\262\262\262\262$ Step #5: artifact_prefix='./'; Test unit written to ./oom-c62eccb8f133d72c0efed8b325ac5716f04f7158 Step #5: Base64: PT4yLT0+3q4h3q4tXFxcXN6uIc6uLVxcXFxcXFxcXC1cXExDsrKysiQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3007 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 918042577 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557410db9d60, 0x557410fa271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557410fa2720,0x557412e2c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c62eccb8f133d72c0efed8b325ac5716f04f7158' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3683 processed earlier; will process 7293 files now Step #5: ==108328== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5574078fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55740df37728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55740df1a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55740df1a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557407902652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55740786342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55740785dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5574078f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55740a9238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55740a9238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55740a9238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55740a9238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55740a9238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55740a9238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55740a9238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55740a9238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55740a9238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55740a9238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55740cb2845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557409884578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55740988f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55740963ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55740963ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55740963b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55740963a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55740963a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55740963a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55740df1c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55740df257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55740df0d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55740df37fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac3051e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55740785c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x67,0x6c,0x79,0x66,0x66,0x67,0x7f,0x66,0x67,0x7f,0x66,0x3b,0x67,0x3f,0x74,0x67,0x6c,0x79,0x67,0x7f,0x66,0x3b,0x67,0x66,0x3f,0x66,0x3b,0x67,0x3f,0x74,0x67,0x6c,0x79,0x66,0x3f,0x67,0x3f,0x67,0x3f,0x6e, Step #5: tglyffg\177fg\177f;g?tglyg\177f;gf?f;g?tglyf?g?g?n Step #5: artifact_prefix='./'; Test unit written to ./oom-614cb6dba1539c9d94f551516f9b82fd9a3b1bf6 Step #5: Base64: dGdseWZmZ39mZ39mO2c/dGdseWd/ZjtnZj9mO2c/dGdseWY/Zz9nP24= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3008 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 918557475 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565546fe5d60, 0x5655471ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5655471ce720,0x5655490582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/614cb6dba1539c9d94f551516f9b82fd9a3b1bf6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3684 processed earlier; will process 7292 files now Step #5: ==108364== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56553db282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565544163728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56554414646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56554414638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56553db2e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56553da8f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56553da89c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56553db20595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x565540b4f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x565540b4f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x565540b4f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x565540b4f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x565540b4f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x565540b4f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x565540b4f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x565540b4f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x565540b4f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x565540b4f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x565542d5445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56553fab0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56553fabb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56553f866d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56553f866d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56553f867808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56553f866944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56553f866944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56553f866944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56554414894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5655441517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565544139529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565544163fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff863a05082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56553da8843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x0,0x0,0x3,0x8,0x0,0x5f,0x47,0x45,0x4f,0x0,0x0,0x3,0x8,0x0,0x5f,0x47,0x45,0x4f,0x0,0x0,0x3,0x8,0x0,0x5f,0x47,0x45,0x4f,0x0,0x0,0x3,0x8,0x0,0x5f,0x47,0x45,0x4f,0x45, Step #5: ID3\002\000\000\003\010\000_GEO\000\000\003\010\000_GEO\000\000\003\010\000_GEO\000\000\003\010\000_GEOE Step #5: artifact_prefix='./'; Test unit written to ./oom-664d8c98141c51e867a04c5e83352a684a5c15f4 Step #5: Base64: SUQzAgAAAwgAX0dFTwAAAwgAX0dFTwAAAwgAX0dFTwAAAwgAX0dFT0U= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3009 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 919078287 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ba729ad60, 0x558ba748371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ba7483720,0x558ba930d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/664d8c98141c51e867a04c5e83352a684a5c15f4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3685 processed earlier; will process 7291 files now Step #5: ==108400== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558b9dddd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558ba4418728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558ba43fb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558ba43fb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558b9dde3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558b9dd4442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558b9dd3ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558b9ddd5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ba0e048c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ba0e048c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ba0e048c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ba0e048c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ba0e048c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ba0e048c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ba0e048c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ba0e048c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ba0e048c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ba0e048c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558ba300945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558b9fd65578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558b9fd705a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558b9fb1bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558b9fb1bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558b9fb1c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558b9fb1b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558b9fb1b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558b9fb1b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558ba43fd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558ba44067b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558ba43ee529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558ba4418fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe93ef09082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558b9dd3d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x51,0x30,0x35,0x5c,0x53,0x5c,0x53,0x5c,0x52,0x5c,0x3b,0x5c,0x65,0x5c,0x30,0x79,0x5b,0x71,0x2d,0xf0,0x97,0xa7,0xa7,0x52,0x2d,0xf0,0x97,0xa7,0xa7,0x52,0x5c,0x5c,0x53,0x26,0x52,0x53,0xfe,0xff,0xff,0xff, Step #5: BQ05\\S\\S\\R\\;\\e\\0y[q-\360\227\247\247R-\360\227\247\247R\\\\S&RS\376\377\377\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-0844c9e60af7275e0241d76e3484059154d601d5 Step #5: Base64: QlEwNVxTXFNcUlw7XGVcMHlbcS3wl6enUi3wl6enUlxcUyZSU/7///8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3010 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 919587737 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eb66427d60, 0x55eb6661071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eb66610720,0x55eb6849a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0844c9e60af7275e0241d76e3484059154d601d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3686 processed earlier; will process 7290 files now Step #5: ==108436== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eb5cf6a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eb635a5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eb6358846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eb6358838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eb5cf70652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eb5ced142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eb5cecbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eb5cf62595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eb5ff918c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eb5ff918c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eb5ff918c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eb5ff918c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eb5ff918c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eb5ff918c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eb5ff918c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eb5ff918c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eb5ff918c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eb5ff918c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eb6219645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eb5eef2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eb5eefd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eb5eca8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eb5eca8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eb5eca9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eb5eca8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eb5eca8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eb5eca8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eb6358a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eb635937b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eb6357b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eb635a5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f04fd19f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eb5ceca43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d,0x5c,0x75,0x7b,0x44,0x7d, Step #5: a\\u{D}\\u{D}\\u{D}\\u{D}\\u{D}\\u{D}\\u{D}\\u{D} Step #5: artifact_prefix='./'; Test unit written to ./oom-5a3933bced0b5869f14ff637d6d27f0c6ec9e1db Step #5: Base64: YVx1e0R9XHV7RH1cdXtEfVx1e0R9XHV7RH1cdXtEfVx1e0R9XHV7RH0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3011 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 920104969 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557b57d06d60, 0x557b57eef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557b57eef720,0x557b59d792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5a3933bced0b5869f14ff637d6d27f0c6ec9e1db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3687 processed earlier; will process 7289 files now Step #5: ==108472== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557b4e8492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557b54e84728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557b54e6746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557b54e6738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557b4e84f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557b4e7b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557b4e7aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557b4e841595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557b518708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557b518708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557b518708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557b518708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557b518708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557b518708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557b518708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557b518708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557b518708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557b518708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557b53a7545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557b507d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557b507dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557b50587d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557b50587d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557b50588808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557b50587944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557b50587944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557b50587944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557b54e6994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557b54e727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557b54e5a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557b54e84fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff270cd0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557b4e7a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x81,0xa5,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c, Step #5: \363\240\201\245\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-49c791bd0867c1c8b02268606223111835d0e281 Step #5: Base64: 86CBpVxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3012 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 920617243 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c986cc9d60, 0x55c986eb271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c986eb2720,0x55c988d3c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/49c791bd0867c1c8b02268606223111835d0e281' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3688 processed earlier; will process 7288 files now Step #5: ==108508== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c97d80c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c983e47728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c983e2a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c983e2a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c97d812652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c97d77342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c97d76dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c97d804595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c9808338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c9808338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c9808338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c9808338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c9808338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c9808338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c9808338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c9808338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c9808338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c9808338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c982a3845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c97f794578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c97f79f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c97f54ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c97f54ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c97f54b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c97f54a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c97f54a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c97f54a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c983e2c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c983e357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c983e1d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c983e47fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcdac9a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c97d76c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0xf,0x32,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x0,0x11,0xf,0x31,0x11,0x2d,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x3a,0x2d,0x3a,0x24,0x5b, Step #5: $\000\000/\000\000\000/\000\0172\0171\021\0171\021-\000\021\0171\021-\000\000\000/\000\0171\021\0171\021-:-:$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-8cb4c2e99fbad3363da4f7e5c68f4db5e2e6ddc7 Step #5: Base64: JAAALwAAAC8ADzIPMREPMREtABEPMREtAAAALwAPMREPMREtOi06JFs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3013 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 921136506 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56356a0d6d60, 0x56356a2bf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56356a2bf720,0x56356c1492c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8cb4c2e99fbad3363da4f7e5c68f4db5e2e6ddc7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3689 processed earlier; will process 7287 files now Step #5: ==108544== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563560c192d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563567254728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56356723746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56356723738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563560c1f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563560b8042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563560b7ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563560c11595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563563c408c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563563c408c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563563c408c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563563c408c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563563c408c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563563c408c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563563c408c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563563c408c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563563c408c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563563c408c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563565e4545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563562ba1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563562bac5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563562957d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563562957d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563562958808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563562957944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563562957944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563562957944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56356723994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5635672427b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56356722a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563567254fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fad764e2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563560b7943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xac,0xac,0xe3,0x8d,0xbf,0xe3,0x8c,0x96,0xef,0xb7,0xbc,0xe3,0x8f,0xaf,0xe3,0x8c,0x96,0xef,0xb7,0xbc,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8c,0xb4,0xe3,0x8c,0x96,0xef,0xb7,0xbc,0xcd,0x84,0xe3,0x8d,0xbf, Step #5: \357\254\254\343\215\277\343\214\226\357\267\274\343\217\257\343\214\226\357\267\274\343\216\257\343\216\257\343\214\264\343\214\226\357\267\274\315\204\343\215\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-bfe252d06e0ac4bb44f5eaec9b5c0930153bb226 Step #5: Base64: 76ys442/44yW77e844+v44yW77e8446v446v44y044yW77e8zYTjjb8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3014 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 921650505 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5599eb06ed60, 0x5599eb25771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5599eb257720,0x5599ed0e12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bfe252d06e0ac4bb44f5eaec9b5c0930153bb226' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3690 processed earlier; will process 7286 files now Step #5: ==108580== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5599e1bb12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5599e81ec728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5599e81cf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5599e81cf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5599e1bb7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5599e1b1842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5599e1b12c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5599e1ba9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5599e4bd88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5599e4bd88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5599e4bd88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5599e4bd88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5599e4bd88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5599e4bd88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5599e4bd88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5599e4bd88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5599e4bd88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5599e4bd88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5599e6ddd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5599e3b39578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5599e3b445a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5599e38efd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5599e38efd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5599e38f0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5599e38ef944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5599e38ef944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5599e38ef944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5599e81d194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5599e81da7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5599e81c2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5599e81ecfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd3c9654082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5599e1b1143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: - - - - - - - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-78991b10e6282cdcbfbca8cc8f5cd910d004bdde Step #5: Base64: LSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3015 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 922196545 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557422829d60, 0x557422a1271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557422a12720,0x55742489c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/78991b10e6282cdcbfbca8cc8f5cd910d004bdde' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3691 processed earlier; will process 7285 files now Step #5: #1 pulse cov: 3883 ft: 3884 exec/s: 0 rss: 174Mb Step #5: ==108616== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55741936c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55741f9a7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55741f98a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55741f98a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557419372652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5574192d342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5574192cdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557419364595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55741c3938c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55741c3938c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55741c3938c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55741c3938c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55741c3938c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55741c3938c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55741c3938c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55741c3938c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55741c3938c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55741c3938c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55741e59845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55741b2f4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55741b2ff5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55741b0aad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55741b0aad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55741b0ab808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55741b0aa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55741b0aa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55741b0aa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55741f98c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55741f9957b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55741f97d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55741f9a7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff548bfa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5574192cc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40,0x2a,0x2a,0x2a,0x2a,0x0,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x3b,0x2a,0x2a,0x2a,0x0,0x0,0x1e,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x3b,0x2a,0x2a,0x2a,0x2a,0x25,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x57, Step #5: @****\000******;***\000\000\036*********;****%******W Step #5: artifact_prefix='./'; Test unit written to ./oom-5dc07d26076a2e9e3700326df6ab725eb906e07f Step #5: Base64: QCoqKioAKioqKioqOyoqKgAAHioqKioqKioqKjsqKioqJSoqKioqKlc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3016 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 922756566 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1b0ad7d60, 0x55e1b0cc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1b0cc0720,0x55e1b2b4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5dc07d26076a2e9e3700326df6ab725eb906e07f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3693 processed earlier; will process 7283 files now Step #5: ==108652== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1a761a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1adc55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1adc3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1adc3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1a7620652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1a758142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1a757bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1a7612595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1aa6418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1aa6418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1aa6418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1aa6418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1aa6418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1aa6418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1aa6418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1aa6418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1aa6418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1aa6418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1ac84645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1a95a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1a95ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1a9358d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1a9358d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1a9359808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1a9358944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1a9358944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1a9358944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1adc3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1adc437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1adc2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1adc55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f009c838082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1a757a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0xa,0x2d,0x20,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x24,0x24,0x3b,0xa,0x2d,0x20, Step #5: x-----BE----BEGIN -----\012\012- GIN ----$$;\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-75f3f4f922f0f1ae51953d07f02165d58babd02a Step #5: Base64: eC0tLS0tQkUtLS0tQkVHSU4gLS0tLS0KCi0gR0lOIC0tLS0kJDsKLSA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3017 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 923282499 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557339df6d60, 0x557339fdf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557339fdf720,0x55733be692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/75f3f4f922f0f1ae51953d07f02165d58babd02a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3694 processed earlier; will process 7282 files now Step #5: ==108688== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5573309392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557336f74728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557336f5746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557336f5738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55733093f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5573308a042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55733089ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557330931595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5573339608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5573339608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5573339608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5573339608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5573339608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5573339608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5573339608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5573339608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5573339608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5573339608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557335b6545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5573328c1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5573328cc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557332677d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557332677d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557332678808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557332677944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557332677944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557332677944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557336f5994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557336f627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557336f4a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557336f74fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f73b3c46082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55733089943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0x72,0x65,0x61,0x74,0x65,0x32,0x2d,0x66,0x6f,0x72,0x6d,0x61,0x74,0x73,0x9,0x32,0xa,0x66,0x6c,0x6f,0x77,0x2d,0x63,0x6f,0x6e,0x74,0x72,0x6f,0x6c,0x23,0x32,0x31,0x34,0x37,0x34,0x38,0x33,0x36,0x34,0x37, Step #5: create2-formats\0112\012flow-control#2147483647 Step #5: artifact_prefix='./'; Test unit written to ./oom-a8115483d4ab5bca3f4448e7c22397d7b5e4bc84 Step #5: Base64: Y3JlYXRlMi1mb3JtYXRzCTIKZmxvdy1jb250cm9sIzIxNDc0ODM2NDc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3018 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 923793137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fda92b4d60, 0x55fda949d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fda949d720,0x55fdab3272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a8115483d4ab5bca3f4448e7c22397d7b5e4bc84' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3695 processed earlier; will process 7281 files now Step #5: #1 pulse cov: 3585 ft: 3586 exec/s: 0 rss: 174Mb Step #5: ==108724== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd9fdf72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fda6432728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fda641546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fda641538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd9fdfd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd9fd5e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd9fd58c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd9fdef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fda2e1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fda2e1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fda2e1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fda2e1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fda2e1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fda2e1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fda2e1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fda2e1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fda2e1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fda2e1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fda502345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fda1d7f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fda1d8a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fda1b35d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fda1b35d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fda1b36808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fda1b35944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fda1b35944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fda1b35944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fda641794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fda64207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fda6408529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fda6432fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f13e5741082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd9fd5743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x3e,0x32,0x2d,0x3d,0x3e,0xde,0xae,0x21,0xde,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0xde,0xae,0x21,0xde,0xae,0x2d,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x2d,0x5c,0x5c,0x4c,0x43,0xb2,0xb2,0xb2,0xb2,0x24, Step #5: =>2-=>\336\256!\336\256-\\\\\\\\\336\256!\336\256-\\\\\\\\\\\\\\\\\\-\\\\LC\262\262\262\262$ Step #5: artifact_prefix='./'; Test unit written to ./oom-91fb195b5795db29ce8a5b91f3707c08455d4474 Step #5: Base64: PT4yLT0+3q4h3q4tXFxcXN6uId6uLVxcXFxcXFxcXC1cXExDsrKysiQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3019 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 924350195 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d35e643d60, 0x55d35e82c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d35e82c720,0x55d3606b62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/91fb195b5795db29ce8a5b91f3707c08455d4474' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3697 processed earlier; will process 7279 files now Step #5: ==108760== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d3551862d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d35b7c1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d35b7a446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d35b7a438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d35518c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d3550ed42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d3550e7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d35517e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d3581ad8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d3581ad8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d3581ad8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d3581ad8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d3581ad8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d3581ad8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d3581ad8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d3581ad8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d3581ad8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d3581ad8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d35a3b245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d35710e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d3571195a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d356ec4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d356ec4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d356ec5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d356ec4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d356ec4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d356ec4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d35b7a694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d35b7af7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d35b797529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d35b7c1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f36339c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d3550e643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd3,0x81,0xe6,0x8d,0x8b,0x5b,0x7e,0x39,0xf3,0xa0,0x80,0xa9,0xd3,0x81,0xe6,0x80,0xa9,0xd3,0x81,0xe6,0x8d,0x8b,0x5b,0x7e,0x39,0x80,0xf3,0xe6,0x81,0xa9,0xa0,0xd3,0x8d,0x8b,0x5b,0x7e,0xf3,0xa0,0x80,0x9b,0x73, Step #5: \323\201\346\215\213[~9\363\240\200\251\323\201\346\200\251\323\201\346\215\213[~9\200\363\346\201\251\240\323\215\213[~\363\240\200\233s Step #5: artifact_prefix='./'; Test unit written to ./oom-47f74b05d8963fa5abda2a8365412c5e781cddea Step #5: Base64: 04HmjYtbfjnzoICp04HmgKnTgeaNi1t+OYDz5oGpoNONi1t+86CAm3M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3020 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 924858536 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556c09080d60, 0x556c0926971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556c09269720,0x556c0b0f32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/47f74b05d8963fa5abda2a8365412c5e781cddea' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3698 processed earlier; will process 7278 files now Step #5: ==108796== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556bffbc32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556c061fe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556c061e146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556c061e138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556bffbc9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556bffb2a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556bffb24c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556bffbbb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556c02bea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556c02bea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556c02bea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556c02bea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556c02bea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556c02bea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556c02bea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556c02bea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556c02bea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556c02bea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556c04def45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556c01b4b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556c01b565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556c01901d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556c01901d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556c01902808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556c01901944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556c01901944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556c01901944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556c061e394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556c061ec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556c061d4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556c061fefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f814e1af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556bffb2343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x30,0x2,0x77,0x9,0x63,0x62,0x63,0x63,0x54,0xd3,0xbf,0xe2,0x81,0xa8,0x3c,0xc7,0xff,0xe2,0x80,0x82,0x2,0xda,0xb9,0xdf,0x2b,0x2,0xdb,0x2,0xdf,0x2d,0x2d,0x31,0xdb,0xbf,0xdf,0xb,0xdb,0xbf,0xdf, Step #5: ID0\002w\011cbccT\323\277\342\201\250<\307\377\342\200\202\002\332\271\337+\002\333\002\337--1\333\277\337\013\333\277\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-fffa03d2ad4927c80d53a47063996975e8d73368 Step #5: Base64: SUQwAncJY2JjY1TTv+KBqDzH/+KAggLaud8rAtsC3y0tMdu/3wvbv98= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3021 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 925367416 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55917abbdd60, 0x55917ada671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55917ada6720,0x55917cc302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fffa03d2ad4927c80d53a47063996975e8d73368' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3699 processed earlier; will process 7277 files now Step #5: #1 pulse cov: 10934 ft: 10935 exec/s: 0 rss: 190Mb Step #5: ==108832== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5591717002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559177d3b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559177d1e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559177d1e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559171706652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55917166742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559171661c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5591716f8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5591747278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5591747278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5591747278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5591747278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5591747278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5591747278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5591747278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5591747278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5591747278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5591747278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55917692c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559173688578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5591736935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55917343ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55917343ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55917343f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55917343e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55917343e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55917343e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559177d2094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559177d297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559177d11529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559177d3bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc09a88e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55917166043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x12,0x27,0x32,0x3d,0x3c,0x37,0x27,0x2f,0x30,0x27,0x67,0x27,0x27,0x66,0x7d,0x27,0x27,0x27,0x27,0x34,0xe2,0x81,0xa5,0x2d,0x3d,0x27,0x34,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x35,0x27,0x24,0x27,0x2d, Step #5: $2\022'2=<7'/0'g''f}''''4\342\201\245-='4'''''''5'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-81011460da00ec1b38d88f79242afa8cd95558fa Step #5: Base64: JDISJzI9PDcnLzAnZycnZn0nJycnNOKBpS09JzQnJycnJycnNSckJy0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3022 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 925953725 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc63fa7d60, 0x55dc6419071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc64190720,0x55dc6601a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/81011460da00ec1b38d88f79242afa8cd95558fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3701 processed earlier; will process 7275 files now Step #5: ==108868== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc5aaea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc61125728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc6110846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc6110838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc5aaf0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc5aa5142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc5aa4bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc5aae2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc5db118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc5db118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc5db118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc5db118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc5db118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc5db118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc5db118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc5db118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc5db118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc5db118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc5fd1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc5ca72578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc5ca7d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc5c828d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc5c828d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc5c829808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc5c828944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc5c828944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc5c828944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc6110a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc611137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc610fb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc61125fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe1d3d35082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc5aa4a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x25,0xd,0x25,0x59,0x41,0x4d,0x4c,0x20,0x36,0x2e,0x30,0x31,0x23,0x35,0x7e,0xf0,0x90,0x90,0x8d,0x6f,0xd8,0x8c,0x7e,0xf0,0x90,0x90,0xa4,0x21,0x6d,0xd8,0x8c,0x7e,0xf0,0x90,0x90,0xa4,0x63,0x20, Step #5: \000\000\000%\015%YAML 6.01#5~\360\220\220\215o\330\214~\360\220\220\244!m\330\214~\360\220\220\244c Step #5: artifact_prefix='./'; Test unit written to ./oom-4b70c0ad3cdfc22e5fc7a67bac7deff933022d29 Step #5: Base64: AAAAJQ0lWUFNTCA2LjAxIzV+8JCQjW/YjH7wkJCkIW3YjH7wkJCkYyA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3023 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 926466106 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa22c99d60, 0x55aa22e8271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa22e82720,0x55aa24d0c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4b70c0ad3cdfc22e5fc7a67bac7deff933022d29' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3702 processed earlier; will process 7274 files now Step #5: ==108904== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa197dc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa1fe17728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa1fdfa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa1fdfa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa197e2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa1974342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa1973dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa197d4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa1c8038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa1c8038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa1c8038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa1c8038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa1c8038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa1c8038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa1c8038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa1c8038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa1c8038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa1c8038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa1ea0845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa1b764578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa1b76f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa1b51ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa1b51ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa1b51b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa1b51a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa1b51a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa1b51a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa1fdfc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa1fe057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa1fded529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa1fe17fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a6351b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa1973c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x67,0x6c,0x79,0x66,0x66,0x67,0x7f,0x66,0x67,0x7f,0x66,0x3b,0x67,0x3f,0x74,0x67,0x6c,0x67,0x7f,0x79,0x3b,0x67,0x66,0x66,0x3f,0x66,0x3b,0x67,0x3f,0x74,0x67,0x6c,0x79,0x66,0x3f,0x67,0x3f,0x67,0x3f,0x6e, Step #5: tglyffg\177fg\177f;g?tglg\177y;gff?f;g?tglyf?g?g?n Step #5: artifact_prefix='./'; Test unit written to ./oom-ed44fe8b0a9e682183debd580d732a0bc5639b12 Step #5: Base64: dGdseWZmZ39mZ39mO2c/dGdsZ395O2dmZj9mO2c/dGdseWY/Zz9nP24= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3024 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 926988803 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563a9b40cd60, 0x563a9b5f571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563a9b5f5720,0x563a9d47f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ed44fe8b0a9e682183debd580d732a0bc5639b12' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3703 processed earlier; will process 7273 files now Step #5: ==108940== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563a91f4f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563a9858a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563a9856d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563a9856d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563a91f55652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563a91eb642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563a91eb0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563a91f47595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563a94f768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563a94f768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563a94f768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563a94f768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563a94f768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563a94f768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563a94f768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563a94f768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563a94f768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563a94f768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563a9717b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563a93ed7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563a93ee25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563a93c8dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563a93c8dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563a93c8e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563a93c8d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563a93c8d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563a93c8d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563a9856f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563a985787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563a98560529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563a9858afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f50d09ad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563a91eaf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x6e,0x69,0x6f,0x6e,0x2d,0x6b,0x65,0x79,0xa,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x52,0x53,0x41,0x20,0x50,0x55,0x42,0x4c,0x49,0x43,0x20,0x4b,0x45,0x59,0x42,0x45,0x2d,0x2d,0x2d,0xa, Step #5: onion-key\012-----BEGIN RSA PUBLIC KEYBE---\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-c9b1d0313eedfb6a0e37cd8bfd45382c394fb46f Step #5: Base64: b25pb24ta2V5Ci0tLS0tQkVHSU4gUlNBIFBVQkxJQyBLRVlCRS0tLQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3025 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 927512152 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56178362cd60, 0x56178381571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561783815720,0x56178569f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c9b1d0313eedfb6a0e37cd8bfd45382c394fb46f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3704 processed earlier; will process 7272 files now Step #5: #1 pulse cov: 12480 ft: 12481 exec/s: 0 rss: 192Mb Step #5: ==108976== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56177a16f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5617807aa728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56178078d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56178078d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56177a175652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56177a0d642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56177a0d0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56177a167595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56177d1968c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56177d1968c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56177d1968c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56177d1968c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56177d1968c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56177d1968c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56177d1968c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56177d1968c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56177d1968c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56177d1968c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56177f39b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56177c0f7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56177c1025a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56177beadd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56177beadd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56177beae808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56177bead944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56177bead944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56177bead944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56178078f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5617807987b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561780780529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5617807aafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa580ae1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56177a0cf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x2f,0x26,0x2f,0x23,0x22,0x26,0x2f,0x73,0x25,0x36,0x36,0x34,0x37,0x37,0x26,0x2f,0x73,0x25,0x36,0x36,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0xe2,0x80,0xaa,0x32,0x37,0x30,0x26,0x2f,0x23,0x22,0x26,0x2f,0x26, Step #5: '/&/#\"&/s%66477&/s%664294967\342\200\252270&/#\"&/& Step #5: artifact_prefix='./'; Test unit written to ./oom-9f954bad34b89cd7f6eaf664c77512b20833b295 Step #5: Base64: Jy8mLyMiJi9zJTY2NDc3Ji9zJTY2NDI5NDk2N+KAqjI3MCYvIyImLyY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3026 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 928112981 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560c8fddd60, 0x5560c91c671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560c91c6720,0x5560cb0502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9f954bad34b89cd7f6eaf664c77512b20833b295' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3706 processed earlier; will process 7270 files now Step #5: ==109012== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560bfb202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560c615b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560c613e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560c613e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560bfb26652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560bfa8742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560bfa81c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560bfb18595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560c2b478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560c2b478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560c2b478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560c2b478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560c2b478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560c2b478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560c2b478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560c2b478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560c2b478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560c2b478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560c4d4c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560c1aa8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560c1ab35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560c185ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560c185ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560c185f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560c185e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560c185e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560c185e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560c614094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560c61497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560c6131529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560c615bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc054510082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560bfa8043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0x90,0xd9,0x90,0xd9,0x91,0xd9,0x90,0xd9,0x91,0x20,0xef,0xb8,0x8f,0xd9,0x90,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \331\220\331\220\331\221\331\220\331\221 \357\270\217\331\220' Step #5: artifact_prefix='./'; Test unit written to ./oom-00675b840640898b30ae1ebf7e72ac4af6faf1a3 Step #5: Base64: PHN2Zz48dGV4dD7ZkNmQ2ZHZkNmRIO+4j9mQJzwvdGV4dD48L3N2Zz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3027 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 928634783 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556a12e12d60, 0x556a12ffb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556a12ffb720,0x556a14e852c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00675b840640898b30ae1ebf7e72ac4af6faf1a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3707 processed earlier; will process 7269 files now Step #5: ==109048== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556a099552d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556a0ff90728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556a0ff7346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556a0ff7338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556a0995b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556a098bc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556a098b6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556a0994d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556a0c97c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556a0c97c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556a0c97c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556a0c97c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556a0c97c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556a0c97c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556a0c97c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556a0c97c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556a0c97c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556a0c97c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556a0eb8145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556a0b8dd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556a0b8e85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556a0b693d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556a0b693d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556a0b694808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556a0b693944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556a0b693944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556a0b693944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556a0ff7594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556a0ff7e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556a0ff66529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556a0ff90fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd35eb18082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556a098b543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x11,0xde,0xa6,0x0,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x39,0x2e,0x0,0x0,0x0,0x42,0x0,0x0,0x0,0x30,0x0, Step #5: \021\336\246\000999999999999999999999999999.\000\000\000B\000\000\0000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-a9e142e2eec825ecec2b19d05de8f18f269469e4 Step #5: Base64: Ed6mADk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OTk5OS4AAABCAAAAMAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3028 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 929141696 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec8eaf2d60, 0x55ec8ecdb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec8ecdb720,0x55ec90b652c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9e142e2eec825ecec2b19d05de8f18f269469e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3708 processed earlier; will process 7268 files now Step #5: #1 pulse cov: 3875 ft: 3876 exec/s: 0 rss: 171Mb Step #5: ==109084== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec856352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec8bc70728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec8bc5346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec8bc5338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec8563b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec8559c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec85596c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec8562d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec8865c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec8865c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec8865c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec8865c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec8865c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec8865c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec8865c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec8865c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec8865c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec8865c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec8a86145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec875bd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec875c85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec87373d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec87373d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec87374808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec87373944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec87373944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec87373944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec8bc5594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec8bc5e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec8bc46529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec8bc70fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f06ac0f7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec8559543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1a,0x1a,0x65,0x60,0xdb,0xa4,0x64,0x65,0x60,0xdb,0xa4,0x0,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x60,0x42,0x65,0x60,0xdb,0xa4,0x47,0x49,0x4e,0xb9,0x0,0x2d,0x0,0x60,0x65,0x60,0xdb,0xa4,0x60,0x2d,0xfc,0x42,0xfc, Step #5: \032\032e`\333\244de`\333\244\000-----BE`Be`\333\244GIN\271\000-\000`e`\333\244`-\374B\374 Step #5: artifact_prefix='./'; Test unit written to ./oom-602082af1827b309674f9c3a4a1643d17181f47e Step #5: Base64: GhplYNukZGVg26QALS0tLS1CRWBCZWDbpEdJTrkALQBgZWDbpGAt/EL8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3029 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 929828180 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a5ebfbed60, 0x55a5ec1a771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a5ec1a7720,0x55a5ee0312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/602082af1827b309674f9c3a4a1643d17181f47e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3710 processed earlier; will process 7266 files now Step #5: ==109120== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a5e2b012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a5e913c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a5e911f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a5e911f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a5e2b07652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a5e2a6842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a5e2a62c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a5e2af9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a5e5b288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a5e5b288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a5e5b288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a5e5b288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a5e5b288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a5e5b288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a5e5b288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a5e5b288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a5e5b288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a5e5b288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a5e7d2d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a5e4a89578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a5e4a945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a5e483fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a5e483fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a5e4840808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a5e483f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a5e483f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a5e483f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a5e912194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a5e912a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a5e9112529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a5e913cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feed02f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a5e2a6143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6,0x1,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x6,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4,0x4, Step #5: \006\001\004\004\004\004\004\004\004\004\004\004\004\004\006\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004\004 Step #5: artifact_prefix='./'; Test unit written to ./oom-59af84ebb56a7425d8d57a782e3f7ac6fde39303 Step #5: Base64: BgEEBAQEBAQEBAQEBAQGBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3030 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 930340913 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ab08337d60, 0x55ab0852071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ab08520720,0x55ab0a3aa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/59af84ebb56a7425d8d57a782e3f7ac6fde39303' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3711 processed earlier; will process 7265 files now Step #5: ==109156== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aafee7a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ab054b5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ab0549846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ab0549838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aafee80652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aafede142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aafeddbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aafee72595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ab01ea18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ab01ea18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ab01ea18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ab01ea18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ab01ea18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ab01ea18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ab01ea18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ab01ea18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ab01ea18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ab01ea18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ab040a645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ab00e02578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ab00e0d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ab00bb8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ab00bb8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ab00bb9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ab00bb8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ab00bb8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ab00bb8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ab0549a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ab054a37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ab0548b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ab054b5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd96ec6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aafedda43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x2a,0x0,0x2f,0x0,0x7e,0x0,0x0,0x2f,0x0,0xf,0xf,0xf,0xf,0xf,0x31,0xf,0x2d,0x31,0x5b,0x24,0x11,0x3a,0x11,0xf,0xf,0xf,0xf,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x3a,0x24,0x5b,0x2d,0x3a,0x24,0x5b, Step #5: $*\000/\000~\000\000/\000\017\017\017\017\0171\017-1[$\021:\021\017\017\017\017\0171\021\0171\021-:$[-:$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-065de5841267dfd58980e7034423b2572909f5b0 Step #5: Base64: JCoALwB+AAAvAA8PDw8PMQ8tMVskEToRDw8PDw8xEQ8xES06JFstOiRb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3031 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 930862200 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bfa03b9d60, 0x55bfa05a271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bfa05a2720,0x55bfa242c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/065de5841267dfd58980e7034423b2572909f5b0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3712 processed earlier; will process 7264 files now Step #5: ==109192== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bf96efc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bf9d537728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bf9d51a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bf9d51a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bf96f02652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bf96e6342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bf96e5dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bf96ef4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bf99f238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bf99f238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bf99f238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bf99f238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bf99f238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bf99f238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bf99f238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bf99f238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bf99f238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bf99f238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bf9c12845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bf98e84578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bf98e8f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bf98c3ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bf98c3ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bf98c3b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bf98c3a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bf98c3a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bf98c3a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bf9d51c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bf9d5257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bf9d50d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bf9d537fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdd7b90a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bf96e5c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0x44,0xe0,0xb8,0xb8,0x49,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8,0x77,0xe0,0xb8,0xb8,0xe0,0xb8,0xb8, Step #5: \340\270\270\340\270\270\340\270\270\340\270\270\340\270\270\340\270\270D\340\270\270I\340\270\270\340\270\270\340\270\270\340\270\270w\340\270\270\340\270\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-4086037c708cf4dcff6f7b07f67f9cb81ece60d8 Step #5: Base64: 4Li44Li44Li44Li44Li44Li4ROC4uEnguLjguLjguLjguLh34Li44Li4 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3032 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 931375859 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5620d0f3ed60, 0x5620d112771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5620d1127720,0x5620d2fb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4086037c708cf4dcff6f7b07f67f9cb81ece60d8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3713 processed earlier; will process 7263 files now Step #5: ==109228== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5620c7a812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5620ce0bc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5620ce09f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5620ce09f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5620c7a87652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5620c79e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5620c79e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5620c7a79595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5620caaa88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5620caaa88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5620caaa88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5620caaa88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5620caaa88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5620caaa88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5620caaa88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5620caaa88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5620caaa88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5620caaa88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5620cccad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5620c9a09578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5620c9a145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5620c97bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5620c97bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5620c97c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5620c97bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5620c97bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5620c97bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5620ce0a194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5620ce0aa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5620ce092529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5620ce0bcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7d11a61082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5620c79e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x32,0x2d,0x3d,0x3c,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x27,0x27,0x27,0x32,0x2d,0x3d,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $22-=<'''/''''/''''''2-='''''''''''''.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-336d30f1637e67cdba9327e1f010d52b0823c6da Step #5: Base64: JDIyLT08JycnLycnJycvJycnJycnMi09JycnJycnJycnJycnJy4nJCct Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3033 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 931890338 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564cce981d60, 0x564cceb6a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564cceb6a720,0x564cd09f42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/336d30f1637e67cdba9327e1f010d52b0823c6da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3714 processed earlier; will process 7262 files now Step #5: ==109264== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564cc54c42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ccbaff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ccbae246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ccbae238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564cc54ca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564cc542b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564cc5425c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564cc54bc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564cc84eb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564cc84eb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564cc84eb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564cc84eb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564cc84eb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564cc84eb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564cc84eb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564cc84eb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564cc84eb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564cc84eb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564cca6f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564cc744c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564cc74575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564cc7202d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564cc7202d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564cc7203808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564cc7202944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564cc7202944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564cc7202944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ccbae494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ccbaed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ccbad5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ccbafffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4035bb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564cc542443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x54,0x38,0x39,0x5c,0x52,0x5c,0x53,0x5c,0x52,0x5c,0x31,0x5c,0x65,0x5c,0x18,0x28,0x3f,0x69,0x29,0xf0,0x90,0x8f,0x93,0x2a,0xf0,0x90,0x90,0x8a,0x70,0xce,0xa0,0x53,0x64,0x5c,0xfe,0x1c,0x6d,0xa4,0xdb,0xc,0x5f, Step #5: IT89\\R\\S\\R\\1\\e\\\030(?i)\360\220\217\223*\360\220\220\212p\316\240Sd\\\376\034m\244\333\014_ Step #5: artifact_prefix='./'; Test unit written to ./oom-6fc9939de630cff0b7761e40689f825acb4f4692 Step #5: Base64: SVQ4OVxSXFNcUlwxXGVcGCg/aSnwkI+TKvCQkIpwzqBTZFz+HG2k2wxf Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3034 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 932401148 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5654aa7b7d60, 0x5654aa9a071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5654aa9a0720,0x5654ac82a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6fc9939de630cff0b7761e40689f825acb4f4692' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3715 processed earlier; will process 7261 files now Step #5: #1 pulse cov: 3946 ft: 3947 exec/s: 0 rss: 172Mb Step #5: ==109300== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5654a12fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5654a7935728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5654a791846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5654a791838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5654a1300652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5654a126142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5654a125bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5654a12f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5654a43218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5654a43218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5654a43218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5654a43218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5654a43218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5654a43218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5654a43218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5654a43218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5654a43218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5654a43218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5654a652645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5654a3282578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5654a328d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5654a3038d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5654a3038d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5654a3039808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5654a3038944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5654a3038944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5654a3038944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5654a791a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5654a79237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5654a790b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5654a7935fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc720d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5654a125a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0x4f,0xf,0xf,0xf,0xf,0x31,0x11,0xf,0x31,0x2d,0x3a,0x24,0x5b,0x2d,0xf,0xf,0xf,0x31,0x11,0x60,0xf,0x31,0x11,0x2d,0x3a,0x24,0x2a,0x24,0x5b,0x2d,0x3a,0x24,0x60, Step #5: $\000\000/\000\000\000/\000O\017\017\017\0171\021\0171-:$[-\017\017\0171\021`\0171\021-:$*$[-:$` Step #5: artifact_prefix='./'; Test unit written to ./oom-e11bbd9703e3a54380dcf3ec23cf94cb17477b2d Step #5: Base64: JAAALwAAAC8ATw8PDw8xEQ8xLTokWy0PDw8xEWAPMREtOiQqJFstOiRg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3035 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 933081489 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fdcbbc0d60, 0x55fdcbda971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fdcbda9720,0x55fdcdc332c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e11bbd9703e3a54380dcf3ec23cf94cb17477b2d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3717 processed earlier; will process 7259 files now Step #5: ==109336== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fdc27032d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fdc8d3e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fdc8d2146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fdc8d2138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fdc2709652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fdc266a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fdc2664c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fdc26fb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fdc572a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fdc572a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fdc572a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fdc572a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fdc572a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fdc572a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fdc572a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fdc572a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fdc572a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fdc572a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fdc792f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fdc468b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fdc46965a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fdc4441d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fdc4441d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fdc4442808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fdc4441944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fdc4441944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fdc4441944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fdc8d2394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fdc8d2c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fdc8d14529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fdc8d3efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08894f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fdc266343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x9,0x2b,0xa,0x9,0x9,0x2b,0xa,0x2b,0xa,0x9,0x2b,0xa,0x9,0x9,0x2b,0xa,0x9,0x26,0x76,0x7e,0x7e,0x21,0x7e,0x3,0x70,0x2b,0x7e,0x9,0x26,0x76,0x7e,0x7e,0x21,0x7e,0x3,0x70,0x2b,0x7e,0x8,0x0, Step #5: +\012\011+\012\011\011+\012+\012\011+\012\011\011+\012\011&v~~!~\003p+~\011&v~~!~\003p+~\010\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-ccb57efb81a5c31a127ba446340f2887c27d79e2 Step #5: Base64: KwoJKwoJCSsKKwoJKwoJCSsKCSZ2fn4hfgNwK34JJnZ+fiF+A3ArfggA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3036 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 933603959 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5571e2e82d60, 0x5571e306b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5571e306b720,0x5571e4ef52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ccb57efb81a5c31a127ba446340f2887c27d79e2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3718 processed earlier; will process 7258 files now Step #5: ==109372== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571d99c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5571e0000728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5571dffe346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5571dffe338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571d99cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5571d992c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5571d9926c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5571d99bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571dc9ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571dc9ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571dc9ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571dc9ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571dc9ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571dc9ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571dc9ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571dc9ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571dc9ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571dc9ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5571debf145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5571db94d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571db9585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571db703d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571db703d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571db704808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571db703944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571db703944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571db703944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5571dffe594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571dffee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5571dffd6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5571e0000fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9697fe1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5571d992543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbd,0xb1,0xe0,0xbf,0xb1,0xe0,0xa2,0xb2,0xe0,0xbc,0xaf,0xe0,0xbb,0x8a,0xe0,0xba,0xa3,0xe0,0xbb,0x80,0xe0,0xba,0xa3,0xf1,0x7c,0x0,0x30,0x95,0x0,0x7e,0x40,0xc3,0x9b,0xbf,0xa3,0xe1,0x63,0x7b,0x84,0x60,0xf9, Step #5: \340\275\261\340\277\261\340\242\262\340\274\257\340\273\212\340\272\243\340\273\200\340\272\243\361|\0000\225\000~@\303\233\277\243\341c{\204`\371 Step #5: artifact_prefix='./'; Test unit written to ./oom-edc851ea3452f58378ae999df86a973f8e9d0fe2 Step #5: Base64: 4L2x4L+x4KKy4Lyv4LuK4Lqj4LuA4Lqj8XwAMJUAfkDDm7+j4WN7hGD5 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3037 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 934117996 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56106317ed60, 0x56106336771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561063367720,0x5610651f12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/edc851ea3452f58378ae999df86a973f8e9d0fe2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3719 processed earlier; will process 7257 files now Step #5: ==109408== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561059cc12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5610602fc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5610602df46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5610602df38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561059cc7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561059c2842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561059c22c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561059cb9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56105cce88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56105cce88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56105cce88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56105cce88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56105cce88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56105cce88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56105cce88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56105cce88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56105cce88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56105cce88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56105eeed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56105bc49578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56105bc545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56105b9ffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56105b9ffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56105ba00808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56105b9ff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56105b9ff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56105b9ff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5610602e194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5610602ea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5610602d2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5610602fcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa81fbef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561059c2143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd8,0xad,0x29,0x7e,0x76,0x21,0x39,0xa,0x0,0xe2,0x81,0x9f,0x7d,0x7d,0x7c,0xfd,0xd7,0xaf,0x69,0x66,0x7d,0xd7,0xaf,0x6d,0x0,0x7e,0x73,0x74,0x39,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3f,0x30, Step #5: \330\255)~v!9\012\000\342\201\237}}|\375\327\257if}\327\257m\000~st9>>>>>>>>>>>?0 Step #5: artifact_prefix='./'; Test unit written to ./oom-321d4d556b2e318238ae78f3e0ea645bc0077eb0 Step #5: Base64: 2K0pfnYhOQoA4oGffX18/devaWZ9169tAH5zdDk+Pj4+Pj4+Pj4+Pj8w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3038 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 934654062 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e5b14d1d60, 0x55e5b16ba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e5b16ba720,0x55e5b35442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/321d4d556b2e318238ae78f3e0ea645bc0077eb0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3720 processed earlier; will process 7256 files now Step #5: ==109444== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e5a80142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e5ae64f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e5ae63246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e5ae63238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e5a801a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e5a7f7b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e5a7f75c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e5a800c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e5ab03b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e5ab03b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e5ab03b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e5ab03b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e5ab03b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e5ab03b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e5ab03b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e5ab03b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e5ab03b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e5ab03b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e5ad24045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e5a9f9c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e5a9fa75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e5a9d52d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e5a9d52d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e5a9d53808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e5a9d52944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e5a9d52944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e5a9d52944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e5ae63494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e5ae63d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e5ae625529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e5ae64ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbc433db082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e5a7f7443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0xa,0x32,0xb,0x78,0x2e,0xa,0x32,0xb,0x78,0x2e,0x66,0xa,0x4d,0x60,0x66,0x5b,0x0,0x0,0x5f,0x0,0x0,0x0,0x0,0xa,0x78,0x6e,0x2e,0x6e,0x62,0x60,0x66,0x2e,0x66,0x6e,0x62,0x60,0x66,0xa,0xd,0x60,0x66, Step #5: 2\0122\013x.\0122\013x.f\012M`f[\000\000_\000\000\000\000\012xn.nb`f.fnb`f\012\015`f Step #5: artifact_prefix='./'; Test unit written to ./oom-13b4bfbeff6db8f2e96be63a31b7a6f8c32324dd Step #5: Base64: MgoyC3guCjILeC5mCk1gZlsAAF8AAAAACnhuLm5iYGYuZm5iYGYKDWBm Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3039 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 935290811 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aadfc66d60, 0x55aadfe4f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aadfe4f720,0x55aae1cd92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/13b4bfbeff6db8f2e96be63a31b7a6f8c32324dd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3721 processed earlier; will process 7255 files now Step #5: ==109480== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aad67a92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aadcde4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aadcdc746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aadcdc738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aad67af652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aad671042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aad670ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aad67a1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aad97d08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aad97d08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aad97d08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aad97d08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aad97d08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aad97d08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aad97d08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aad97d08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aad97d08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aad97d08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aadb9d545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aad8731578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aad873c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aad84e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aad84e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aad84e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aad84e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aad84e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aad84e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aadcdc994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aadcdd27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aadcdba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aadcde4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f52a24e8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aad670943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x61,0x73,0x74,0x72,0x65,0x61,0x6d,0x41,0x5c,0x3a,0x23,0x68,0x0,0x43,0x43,0x43,0x43,0x7a,0x0,0x0,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43, Step #5: \000CCCCCCCCastreamA\\:#h\000CCCCz\000\000CCCCCCCCCCCCC Step #5: artifact_prefix='./'; Test unit written to ./oom-56fe2dc8cef45fb327f195208a7944243878a27f Step #5: Base64: AENDQ0NDQ0NDYXN0cmVhbUFcOiNoAENDQ0N6AABDQ0NDQ0NDQ0NDQ0ND Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3040 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 935803556 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5579e0b44d60, 0x5579e0d2d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5579e0d2d720,0x5579e2bb72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56fe2dc8cef45fb327f195208a7944243878a27f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3722 processed earlier; will process 7254 files now Step #5: ==109516== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5579d76872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5579ddcc2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5579ddca546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5579ddca538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5579d768d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5579d75ee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5579d75e8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5579d767f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5579da6ae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5579da6ae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5579da6ae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5579da6ae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5579da6ae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5579da6ae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5579da6ae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5579da6ae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5579da6ae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5579da6ae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5579dc8b345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579d960f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579d961a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5579d93c5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5579d93c5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5579d93c6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5579d93c5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5579d93c5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5579d93c5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5579ddca794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5579ddcb07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5579ddc98529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5579ddcc2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd040598082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5579d75e743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x9,0x3d,0xe2,0x81,0xa7,0x54,0x54,0xe2,0x81,0xa7,0x54,0x0,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xe8,0xcb,0xb3,0x0,0x71,0xe,0x27,0xcf,0xe2,0x80,0x3d, Step #5: -\011=\342\201\247TT\342\201\247T\000\350\350\350\350\350\350\350\350\350\350\350\350\350\350\350\350\350\350\350\313\263\000q\016'\317\342\200= Step #5: artifact_prefix='./'; Test unit written to ./oom-8b4d687f72f5e5af8cc6b07cffc4985f5a705ddc Step #5: Base64: LQk94oGnVFTigadUAOjo6Ojo6Ojo6Ojo6Ojo6Ojo6OjLswBxDifP4oA9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3041 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 936315951 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555761c8ed60, 0x555761e7771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555761e77720,0x555763d012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8b4d687f72f5e5af8cc6b07cffc4985f5a705ddc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3723 processed earlier; will process 7253 files now Step #5: ==109552== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5557587d12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55575ee0c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55575edef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55575edef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5557587d7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55575873842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555758732c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5557587c9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55575b7f88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55575b7f88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55575b7f88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55575b7f88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55575b7f88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55575b7f88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55575b7f88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55575b7f88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55575b7f88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55575b7f88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55575d9fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55575a759578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55575a7645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55575a50fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55575a50fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55575a510808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55575a50f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55575a50f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55575a50f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55575edf194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55575edfa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55575ede2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55575ee0cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8c6d62a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55575873143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x74,0x65,0x73,0x74,0x41,0x6c,0x6c,0x54,0x79,0x70,0x65,0x73,0x22,0x3a,0x7b,0x22,0x6f,0x6e,0x65,0x6f,0x66,0x55,0x69,0x6e,0x74,0x33,0x32,0x22,0x3a,0x22,0xe3,0x80,0x80,0xe3,0x80,0x80,0xe2,0x88,0x80,0x22, Step #5: {\"testAllTypes\":{\"oneofUint32\":\"\343\200\200\343\200\200\342\210\200\" Step #5: artifact_prefix='./'; Test unit written to ./oom-6b5bc9fd7a50e847648952ff236d36554f382547 Step #5: Base64: eyJ0ZXN0QWxsVHlwZXMiOnsib25lb2ZVaW50MzIiOiLjgIDjgIDiiIAi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3042 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 936828028 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5608df944d60, 0x5608dfb2d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5608dfb2d720,0x5608e19b72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b5bc9fd7a50e847648952ff236d36554f382547' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3724 processed earlier; will process 7252 files now Step #5: ==109588== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608d64872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5608dcac2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5608dcaa546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5608dcaa538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608d648d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5608d63ee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5608d63e8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608d647f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608d94ae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608d94ae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608d94ae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608d94ae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608d94ae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608d94ae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608d94ae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608d94ae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608d94ae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608d94ae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608db6b345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608d840f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608d841a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608d81c5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608d81c5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608d81c6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608d81c5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608d81c5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608d81c5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5608dcaa794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5608dcab07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5608dca98529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5608dcac2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff650fa7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5608d63e743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x5c,0x75,0x7b,0x62,0x7d,0x7d, Step #5: \"\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}\\u{b}} Step #5: artifact_prefix='./'; Test unit written to ./oom-65cc88cf85569e2936d619ff77c771d6861fc9f6 Step #5: Base64: Ilx1e2J9XHV7Yn1cdXtifVx1e2J9XHV7Yn1cdXtifVx1e2J9XHV7Yn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3043 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 937344968 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b83a17ad60, 0x55b83a36371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b83a363720,0x55b83c1ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/65cc88cf85569e2936d619ff77c771d6861fc9f6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3725 processed earlier; will process 7251 files now Step #5: ==109624== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b830cbd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b8372f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b8372db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b8372db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b830cc3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b830c2442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b830c1ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b830cb5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b833ce48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b833ce48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b833ce48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b833ce48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b833ce48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b833ce48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b833ce48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b833ce48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b833ce48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b833ce48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b835ee945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b832c45578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b832c505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8329fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8329fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8329fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8329fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8329fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8329fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b8372dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b8372e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b8372ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b8372f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9f2a912082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b830c1d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x4e,0xc,0x44,0x45,0x46,0x41,0x55,0x4c,0x54,0x28,0x2d,0x28,0x28,0x28,0x28,0x28,0x28,0x57,0x69,0x74,0x68,0x28,0x28,0x28,0x33,0x33,0x35,0x2c,0x30,0x2c,0x2c,0x2c,0xe2,0x81,0x9f,0x33,0x36,0x36,0x31,0x29,0xa, Step #5: \012N\014DEFAULT(-((((((With(((335,0,,,\342\201\2373661)\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-61023084199bc071c98d04d881959e7ba8cfdd51 Step #5: Base64: Ck4MREVGQVVMVCgtKCgoKCgoV2l0aCgoKDMzNSwwLCws4oGfMzY2MSkK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3044 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 937857957 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56345feb1d60, 0x56346009a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56346009a720,0x563461f242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/61023084199bc071c98d04d881959e7ba8cfdd51' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3726 processed earlier; will process 7250 files now Step #5: ==109660== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634569f42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56345d02f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56345d01246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56345d01238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5634569fa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56345695b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563456955c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5634569ec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563459a1b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563459a1b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563459a1b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563459a1b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563459a1b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563459a1b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563459a1b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563459a1b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563459a1b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563459a1b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56345bc2045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56345897c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634589875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563458732d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563458732d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563458733808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563458732944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563458732944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563458732944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56345d01494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56345d01d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56345d005529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56345d02ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2b1c68f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56345695443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x0,0x11,0xf,0x31,0x11,0x2d,0x0,0x0,0x0,0x29,0x2f,0x0,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x3a,0x2d,0x3a,0x24,0x5b, Step #5: $\000\000/\000\000\000/\000\0171\0171\021\0171\021-\000\021\0171\021-\000\000\000)/\000\0171\021\0171\021-:-:$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-6b141151ceab130b00db09db5fda608db543890d Step #5: Base64: JAAALwAAAC8ADzEPMREPMREtABEPMREtAAAAKS8ADzERDzERLTotOiRb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3045 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 938372766 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56045fb1ed60, 0x56045fd0771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56045fd07720,0x560461b912c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b141151ceab130b00db09db5fda608db543890d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3727 processed earlier; will process 7249 files now Step #5: ==109696== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5604566612d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56045cc9c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56045cc7f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56045cc7f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560456667652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5604565c842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5604565c2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560456659595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604596888c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604596888c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604596888c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604596888c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604596888c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604596888c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604596888c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604596888c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604596888c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604596888c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56045b88d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5604585e9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604585f45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56045839fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56045839fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5604583a0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56045839f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56045839f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56045839f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56045cc8194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56045cc8a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56045cc72529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56045cc9cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f601d587082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5604565c143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x40,0x24,0x62,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0xe,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x24,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e, Step #5: @$b.............\016.............$........... Step #5: artifact_prefix='./'; Test unit written to ./oom-d915d5c88acd3aec6ee11cc0139f3af80e5ddeeb Step #5: Base64: QCRiLi4uLi4uLi4uLi4uLg4uLi4uLi4uLi4uLi4uJC4uLi4uLi4uLi4u Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3046 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 938887292 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55835fcc6d60, 0x55835feaf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55835feaf720,0x558361d392c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d915d5c88acd3aec6ee11cc0139f3af80e5ddeeb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3728 processed earlier; will process 7248 files now Step #5: ==109732== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583568092d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55835ce44728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55835ce2746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55835ce2738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55835680f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55835677042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55835676ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558356801595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5583598308c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5583598308c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5583598308c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5583598308c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5583598308c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5583598308c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5583598308c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5583598308c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5583598308c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5583598308c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55835ba3545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558358791578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55835879c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558358547d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558358547d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558358548808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558358547944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558358547944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558358547944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55835ce2994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55835ce327b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55835ce1a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55835ce44fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5679507082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55835676943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd8,0xad,0x29,0x7e,0x76,0x21,0x39,0xa,0x0,0xe2,0x81,0x9f,0x7d,0x7d,0x7d,0x7d,0xd7,0xaf,0x69,0x66,0x7d,0xd7,0xaf,0x6d,0x0,0x7e,0x73,0x74,0x39,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3f,0x30, Step #5: \330\255)~v!9\012\000\342\201\237}}}}\327\257if}\327\257m\000~st9>>>>>>>>>>>?0 Step #5: artifact_prefix='./'; Test unit written to ./oom-77d63332918d8214043ea13778554d33c438dc13 Step #5: Base64: 2K0pfnYhOQoA4oGffX19fdevaWZ9169tAH5zdDk+Pj4+Pj4+Pj4+Pj8w Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3047 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 939402129 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b14a9dd60, 0x560b14c8671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b14c86720,0x560b16b102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/77d63332918d8214043ea13778554d33c438dc13' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3729 processed earlier; will process 7247 files now Step #5: #1 pulse cov: 3495 ft: 3496 exec/s: 0 rss: 173Mb Step #5: ==109768== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b0b5e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b11c1b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b11bfe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b11bfe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b0b5e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b0b54742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b0b541c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b0b5d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b0e6078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b0e6078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b0e6078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b0e6078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b0e6078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b0e6078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b0e6078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b0e6078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b0e6078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b0e6078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b1080c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b0d568578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b0d5735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b0d31ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b0d31ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b0d31f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b0d31e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b0d31e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b0d31e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b11c0094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b11c097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b11bf1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b11c1bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1f14799082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b0b54043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0xf3,0xa0,0xa0,0x80,0x0,0x41,0x50,0x7f,0x5b,0x5b,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x80,0xa0,0x80,0xa3,0x5b,0x5b,0xa,0x47,0x0,0x5b,0xf7,0x64,0x4c,0x63,0x6f,0x63,0x6f,0x6e,0x75,0x74,0x5b,0x5b,0x52, Step #5: C\363\240\240\200\000AP\177[[\000\000\000\000\000\000\000\000\200\240\200\243[[\012G\000[\367dLcoconut[[R Step #5: artifact_prefix='./'; Test unit written to ./oom-f6d956d163db4f618dc0c67636451125f74d8f7a Step #5: Base64: Q/OgoIAAQVB/W1sAAAAAAAAAAICggKNbWwpHAFv3ZExjb2NvbnV0W1tS Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3048 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 939970691 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642ce8b0d60, 0x5642cea9971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5642cea99720,0x5642d09232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f6d956d163db4f618dc0c67636451125f74d8f7a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3731 processed earlier; will process 7245 files now Step #5: ==109804== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5642c53f32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5642cba2e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5642cba1146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5642cba1138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5642c53f9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5642c535a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5642c5354c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5642c53eb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5642c841a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5642c841a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5642c841a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5642c841a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5642c841a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5642c841a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5642c841a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5642c841a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5642c841a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5642c841a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5642ca61f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5642c737b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5642c73865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5642c7131d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5642c7131d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5642c7132808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5642c7131944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5642c7131944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5642c7131944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5642cba1394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5642cba1c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5642cba04529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5642cba2efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe6f4f56082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5642c535343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x13,0x3a,0x11,0xa,0xf,0x78,0xe6,0xa3,0x80,0xef,0xa3,0x84,0x2d,0xef,0xa7,0x80,0xe4,0xa2,0x80,0xc,0xa,0x13,0x3a,0x11,0xa,0xf,0x78,0x30,0xe6,0xa3,0x80,0xef,0xa3,0x84,0x2d,0xef,0xa7,0x80,0xe4,0xa2,0x80, Step #5: \012\023:\021\012\017x\346\243\200\357\243\204-\357\247\200\344\242\200\014\012\023:\021\012\017x0\346\243\200\357\243\204-\357\247\200\344\242\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-7bc820f894794fdb8eaf4ab1ea48e2295139bd43 Step #5: Base64: ChM6EQoPeOajgO+jhC3vp4DkooAMChM6EQoPeDDmo4Dvo4Qt76eA5KKA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3049 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 940491029 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a9f739dd60, 0x55a9f758671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a9f7586720,0x55a9f94102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7bc820f894794fdb8eaf4ab1ea48e2295139bd43' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3732 processed earlier; will process 7244 files now Step #5: ==109840== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a9edee02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a9f451b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a9f44fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a9f44fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a9edee6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a9ede4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a9ede41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a9eded8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a9f0f078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a9f0f078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a9f0f078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a9f0f078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a9f0f078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a9f0f078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a9f0f078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a9f0f078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a9f0f078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a9f0f078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a9f310c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a9efe68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a9efe735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a9efc1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a9efc1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a9efc1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a9efc1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a9efc1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a9efc1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a9f450094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a9f45097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a9f44f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a9f451bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7861ef4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a9ede4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x4,0x33,0x3,0x0,0x0,0x45,0x30,0x50,0x55,0x53,0x4c,0x54,0x0,0x0,0x20,0xb,0x0,0x0,0x71,0x70,0x78,0x60,0x74,0x6d,0x21,0x60,0x32,0x50,0x55,0x53,0x4c,0x32,0x50,0x55,0x53,0x4c,0x32,0x54,0x0,0xc7,0x50, Step #5: I\0043\003\000\000E0PUSLT\000\000 \013\000\000qpx`tm!`2PUSL2PUSL2T\000\307P Step #5: artifact_prefix='./'; Test unit written to ./oom-0d25c668a4c98d08f94273b7fbd24d8e7d9c6ebf Step #5: Base64: SQQzAwAARTBQVVNMVAAAIAsAAHFweGB0bSFgMlBVU0wyUFVTTDJUAMdQ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3050 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 941128903 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56037e09fd60, 0x56037e28871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56037e288720,0x5603801122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0d25c668a4c98d08f94273b7fbd24d8e7d9c6ebf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3733 processed earlier; will process 7243 files now Step #5: #1 pulse cov: 3750 ft: 3751 exec/s: 0 rss: 171Mb Step #5: ==109876== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560374be22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56037b21d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56037b20046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56037b20038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560374be8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560374b4942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560374b43c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560374bda595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560377c098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560377c098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560377c098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560377c098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560377c098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560377c098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560377c098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560377c098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560377c098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560377c098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560379e0e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560376b6a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560376b755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560376920d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560376920d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560376921808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560376920944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560376920944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560376920944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56037b20294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56037b20b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56037b1f3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56037b21dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7651278082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560374b4243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2a,0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2a,0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2b,0xd,0x2d,0xd,0x2b,0xd,0x2d, Step #5: \015-\015+\015-\015+\015-\015+\015-\015*\015-\015+\015-\015+\015-\015*\015-\015+\015-\015+\015-\015+\015- Step #5: artifact_prefix='./'; Test unit written to ./oom-bb31b71373acb20c789f4c753027f8920b7296c9 Step #5: Base64: DS0NKw0tDSsNLQ0rDS0NKg0tDSsNLQ0rDS0NKg0tDSsNLQ0rDS0NKw0t Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3051 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 941710664 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555ebf005d60, 0x555ebf1ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555ebf1ee720,0x555ec10782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bb31b71373acb20c789f4c753027f8920b7296c9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3735 processed earlier; will process 7241 files now Step #5: ==109912== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555eb5b482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555ebc183728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555ebc16646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555ebc16638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555eb5b4e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555eb5aaf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555eb5aa9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555eb5b40595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555eb8b6f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555eb8b6f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555eb8b6f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555eb8b6f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555eb8b6f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555eb8b6f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555eb8b6f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555eb8b6f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555eb8b6f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555eb8b6f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555ebad7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555eb7ad0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555eb7adb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555eb7886d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555eb7886d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555eb7887808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555eb7886944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555eb7886944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555eb7886944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555ebc16894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555ebc1717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555ebc159529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555ebc183fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f073b207082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555eb5aa843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x33,0x3a,0x3a,0x3d,0xa,0x31,0x3a,0x3a,0x40,0x3d,0xa,0x6b,0x3a,0x3a,0x3d,0xa,0x3a,0x3a,0x3d,0xa,0x3d,0xa,0x21,0x3a,0x3a,0x3d,0xa,0x67,0x3a,0x3a,0x3d,0xa,0x64,0x3a,0x3a,0x3d,0xa,0x2b,0x3a,0x3a,0x3d,0xa,0x3d, Step #5: 3::=\0121::@=\012k::=\012::=\012=\012!::=\012g::=\012d::=\012+::=\012= Step #5: artifact_prefix='./'; Test unit written to ./oom-b9cbbe72b9fce2e8620d1b01bd6420057558fc39 Step #5: Base64: Mzo6PQoxOjpAPQprOjo9Cjo6PQo9CiE6Oj0KZzo6PQpkOjo9Cis6Oj0KPQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3052 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 942230353 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dbfdef1d60, 0x55dbfe0da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dbfe0da720,0x55dbfff642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b9cbbe72b9fce2e8620d1b01bd6420057558fc39' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3736 processed earlier; will process 7240 files now Step #5: #1 pulse cov: 3916 ft: 3917 exec/s: 0 rss: 172Mb Step #5: ==109948== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dbf4a342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dbfb06f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dbfb05246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dbfb05238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dbf4a3a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dbf499b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dbf4995c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dbf4a2c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dbf7a5b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dbf7a5b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dbf7a5b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dbf7a5b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dbf7a5b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dbf7a5b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dbf7a5b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dbf7a5b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dbf7a5b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dbf7a5b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dbf9c6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dbf69bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dbf69c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dbf6772d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dbf6772d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dbf6773808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dbf6772944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dbf6772944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dbf6772944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dbfb05494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dbfb05d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dbfb045529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dbfb06ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3cd80f3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dbf499443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x0,0x0,0x0,0x67,0x0,0x0,0x0,0x7a,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x24,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x2f,0xa,0x60,0x60,0x20,0x20,0x20,0x60,0xa,0x9, Step #5: `\000\000\000g\000\000\000z\000\000\000\000\000\000\000$\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000/\012`` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-cafbaa44c12636b89337319f1e56e1307ca30d38 Step #5: Base64: YAAAAGcAAAB6AAAAAAAAACQAAAAAAAAAAAAAAAAAAAAALwpgYCAgIGAKCQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3053 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 942918044 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581b82aad60, 0x5581b849371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581b8493720,0x5581ba31d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cafbaa44c12636b89337319f1e56e1307ca30d38' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3738 processed earlier; will process 7238 files now Step #5: ==109984== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581aeded2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581b5428728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581b540b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581b540b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581aedf3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581aed5442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581aed4ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581aede5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581b1e148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581b1e148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581b1e148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581b1e148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581b1e148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581b1e148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581b1e148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581b1e148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581b1e148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581b1e148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581b401945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581b0d75578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581b0d805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581b0b2bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581b0b2bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581b0b2c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581b0b2b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581b0b2b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581b0b2b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581b540d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581b54167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581b53fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581b5428fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a6c6d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581aed4d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x7f,0x7f,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x28,0x0,0x72,0x0,0x64,0x0,0x20,0x0,0x72,0x64,0x64,0xb7,0x64,0x64, Step #5: = \177\177\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000(\000r\000d\000 \000rdd\267dd Step #5: artifact_prefix='./'; Test unit written to ./oom-b9af0d18515166ba16df93508315daaf2c0bc695 Step #5: Base64: PSB/fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAHIAZAAgAHJkZLdkZA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3054 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 943423520 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56089b389d60, 0x56089b57271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56089b572720,0x56089d3fc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b9af0d18515166ba16df93508315daaf2c0bc695' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3739 processed earlier; will process 7237 files now Step #5: ==110020== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560891ecc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560898507728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5608984ea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5608984ea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560891ed2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560891e3342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560891e2dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560891ec4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560894ef38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560894ef38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560894ef38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560894ef38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560894ef38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560894ef38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560894ef38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560894ef38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560894ef38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560894ef38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608970f845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560893e54578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560893e5f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560893c0ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560893c0ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560893c0b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560893c0a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560893c0a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560893c0a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5608984ec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5608984f57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5608984dd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560898507fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3b3392f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560891e2c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x0,0x0,0x0,0x0,0x0,0x6c,0x7c,0x7c,0x0,0x3,0x3,0x3,0x3,0x0,0x0,0x33,0x0,0x0,0x0,0x0,0x6c,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xd6,0xae,0x0,0x0,0x0,0x27,0xd6,0xae,0xd5,0x0,0x0, Step #5: M\000\000\000\000\000l||\000\003\003\003\003\000\0003\000\000\000\000l\000\000\000\000\000\000\000\000\000\000\326\256\000\000\000'\326\256\325\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-b5c0a6831de1e6da3c4f4c28e339b7a794208720 Step #5: Base64: TQAAAAAAbHx8AAMDAwMAADMAAAAAbAAAAAAAAAAAAADWrgAAACfWrtUAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3055 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 943951120 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ff843cfd60, 0x55ff845b871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ff845b8720,0x55ff864422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5c0a6831de1e6da3c4f4c28e339b7a794208720' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3740 processed earlier; will process 7236 files now Step #5: ==110056== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ff7af122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ff8154d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ff8153046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ff8153038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ff7af18652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ff7ae7942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ff7ae73c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ff7af0a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ff7df398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ff7df398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ff7df398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ff7df398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ff7df398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ff7df398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ff7df398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ff7df398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ff7df398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ff7df398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ff8013e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ff7ce9a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ff7cea55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ff7cc50d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ff7cc50d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ff7cc51808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ff7cc50944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ff7cc50944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ff7cc50944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ff8153294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ff8153b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ff81523529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ff8154dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22d33b2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ff7ae7243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6c,0x65,0x74,0x20,0x6d,0x4c,0x3d,0x20,0x23,0x7b,0x7d,0x3b,0xa,0x6c,0x65,0x74,0x20,0x6c,0x4c,0x3d,0x20,0x23,0x7b,0x7d,0x3b,0xa,0x6c,0x65,0x74,0x20,0x6c,0x4c,0x3d,0x20,0x23,0x7b,0x7d,0x3b,0xa,0x6c,0x65,0x3b,0x7b, Step #5: let mL= #{};\012let lL= #{};\012let lL= #{};\012le;{ Step #5: artifact_prefix='./'; Test unit written to ./oom-08f221f87b5bf76363e1a42b09aca67c975a30bc Step #5: Base64: bGV0IG1MPSAje307CmxldCBsTD0gI3t9OwpsZXQgbEw9ICN7fTsKbGU7ew== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3056 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 944463508 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c514aa8d60, 0x55c514c9171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c514c91720,0x55c516b1b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/08f221f87b5bf76363e1a42b09aca67c975a30bc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3741 processed earlier; will process 7235 files now Step #5: #1 pulse cov: 3921 ft: 3922 exec/s: 0 rss: 174Mb Step #5: ==110092== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c50b5eb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c511c26728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c511c0946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c511c0938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c50b5f1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c50b55242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c50b54cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c50b5e3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c50e6128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c50e6128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c50e6128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c50e6128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c50e6128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c50e6128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c50e6128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c50e6128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c50e6128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c50e6128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c51081745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c50d573578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c50d57e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c50d329d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c50d329d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c50d32a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c50d329944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c50d329944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c50d329944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c511c0b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c511c147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c511bfc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c511c26fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff7f3176082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c50b54b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0x90,0xd9,0x91,0x20,0xe2,0x86,0x8d,0x31,0xe1,0x82,0x8d,0xef,0xb8,0x8f,0x3b,0xd9,0x90,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \331\220\331\221 \342\206\2151\341\202\215\357\270\217;\331\220' Step #5: artifact_prefix='./'; Test unit written to ./oom-40008abfce0405a8af8b94d6b7805d9c6117f033 Step #5: Base64: PHN2Zz48dGV4dD7ZkNmRIOKGjTHhgo3vuI872ZAnPC90ZXh0Pjwvc3ZnPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3057 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 945029942 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564e8f27ed60, 0x564e8f46771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564e8f467720,0x564e912f12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/40008abfce0405a8af8b94d6b7805d9c6117f033' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3743 processed earlier; will process 7233 files now Step #5: ==110128== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564e85dc12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564e8c3fc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564e8c3df46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564e8c3df38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564e85dc7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564e85d2842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564e85d22c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564e85db9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564e88de88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564e88de88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564e88de88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564e88de88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564e88de88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564e88de88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564e88de88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564e88de88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564e88de88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564e88de88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564e8afed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564e87d49578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564e87d545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564e87affd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564e87affd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564e87b00808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564e87aff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564e87aff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564e87aff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564e8c3e194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564e8c3ea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564e8c3d2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564e8c3fcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fed5d713082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564e85d2143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x1,0x0,0x0,0x11,0x0,0x0,0x2f,0x39,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xf,0x31,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x0,0x0,0x0,0x2f,0x0,0xf,0x30,0x11,0xf,0x31,0x11,0x2d,0x3a,0x2d,0x3a,0x24,0x5b, Step #5: $\001\000\000\021\000\000/9\000\000\000\000\000\000\000\000\0171\0171\021\0171\021-\000\000\000/\000\0170\021\0171\021-:-:$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-40a176390dfb5694b471fe4e87b5a6932626b2ce Step #5: Base64: JAEAABEAAC85AAAAAAAAAAAPMQ8xEQ8xES0AAAAvAA8wEQ8xES06LTokWw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3058 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 945548242 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559ec4d17d60, 0x559ec4f0071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559ec4f00720,0x559ec6d8a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/40a176390dfb5694b471fe4e87b5a6932626b2ce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3744 processed earlier; will process 7232 files now Step #5: ==110164== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559ebb85a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559ec1e95728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559ec1e7846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559ec1e7838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559ebb860652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559ebb7c142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559ebb7bbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559ebb852595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559ebe8818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559ebe8818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559ebe8818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559ebe8818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559ebe8818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559ebe8818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559ebe8818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559ebe8818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559ebe8818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559ebe8818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559ec0a8645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559ebd7e2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559ebd7ed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559ebd598d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559ebd598d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559ebd599808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559ebd598944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559ebd598944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559ebd598944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559ec1e7a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559ec1e837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559ec1e6b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559ec1e95fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6cf0a31082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559ebb7ba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xde,0xa6,0x3d,0xa,0x1,0x0,0x0,0x0,0x3d,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0xa,0x3d,0xa,0x3d,0x3d,0xa,0x28,0x3f,0x69,0x3a,0xf0,0x9e,0xa,0x2a,0xa3,0x0,0x87,0x0,0x0,0x0, Step #5: \336\246=\012\001\000\000\000==\012=\012=\012=\012=\012=\012=\012\012=\012==\012(?i:\360\236\012*\243\000\207\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-c527a7a15c34e67fb25f63086ad627edccaef3e4 Step #5: Base64: 3qY9CgEAAAA9PQo9Cj0KPQo9Cj0KPQoKPQo9PQooP2k68J4KKqMAhwAAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3059 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 946089365 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5609c67e3d60, 0x5609c69cc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5609c69cc720,0x5609c88562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c527a7a15c34e67fb25f63086ad627edccaef3e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3745 processed earlier; will process 7231 files now Step #5: #1 pulse cov: 3945 ft: 3946 exec/s: 0 rss: 173Mb Step #5: ==110200== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5609bd3262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5609c3961728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5609c394446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5609c394438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5609bd32c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5609bd28d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5609bd287c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5609bd31e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609c034d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609c034d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609c034d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609c034d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609c034d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609c034d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609c034d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609c034d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609c034d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609c034d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5609c255245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5609bf2ae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5609bf2b95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5609bf064d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5609bf064d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5609bf065808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5609bf064944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5609bf064944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5609bf064944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5609c394694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5609c394f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5609c3937529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5609c3961fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f66a779e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5609bd28643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x2d,0x33,0x2d,0x32,0x31,0x36,0x3a,0x38,0x3a,0x31,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0,0xc2,0xa0, Step #5: 0-3-216:8:1\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240\302\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-f9a3c462d3d4e4752c910ddd5e7610c168d9ba97 Step #5: Base64: MC0zLTIxNjo4OjHCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3060 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 946652263 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ed029bed60, 0x55ed02ba771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ed02ba7720,0x55ed04a312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f9a3c462d3d4e4752c910ddd5e7610c168d9ba97' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3747 processed earlier; will process 7229 files now Step #5: #1 pulse cov: 3737 ft: 3738 exec/s: 0 rss: 174Mb Step #5: ==110236== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ecf95012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ecffb3c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ecffb1f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ecffb1f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ecf9507652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ecf946842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ecf9462c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ecf94f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ecfc5288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ecfc5288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ecfc5288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ecfc5288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ecfc5288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ecfc5288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ecfc5288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ecfc5288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ecfc5288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ecfc5288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ecfe72d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ecfb489578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ecfb4945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ecfb23fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ecfb23fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ecfb240808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ecfb23f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ecfb23f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ecfb23f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ecffb2194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ecffb2a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ecffb12529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ecffb3cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ab2222082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ecf946143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x20,0x7f,0x7f,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x6c,0x6f,0x63,0x61,0x6c,0x5f,0x73,0x69,0x7a,0x79,0x3d,0x34,0x32,0x39,0x34,0x39,0x35,0x33,0x36,0x39,0x36,0x39,0x36,0x29,0x3b, Step #5: = \177\177\000\000\000\000\000\000\000\000\000\000\000\000\000\000local_sizy=429495369696); Step #5: artifact_prefix='./'; Test unit written to ./oom-460ba4fec97836114a06a09e1b438df0ba7eeba2 Step #5: Base64: PSB/fwAAAAAAAAAAAAAAAAAAbG9jYWxfc2l6eT00Mjk0OTUzNjk2OTYpOw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3061 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 947234223 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c4215b8d60, 0x55c4217a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c4217a1720,0x55c42362b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/460ba4fec97836114a06a09e1b438df0ba7eeba2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3749 processed earlier; will process 7227 files now Step #5: ==110272== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c4180fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c41e736728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c41e71946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c41e71938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c418101652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c41806242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c41805cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c4180f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c41b1228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c41b1228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c41b1228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c41b1228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c41b1228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c41b1228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c41b1228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c41b1228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c41b1228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c41b1228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c41d32745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c41a083578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c41a08e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c419e39d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c419e39d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c419e3a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c419e39944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c419e39944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c419e39944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c41e71b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c41e7247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c41e70c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c41e736fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff34c958082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c41805b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x29,0x4,0x43,0x20,0x0,0x24,0x31, Step #5: $\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000)\004C \000$1 Step #5: artifact_prefix='./'; Test unit written to ./oom-a0b5af8e4d91766cf2b3f4f8a4d6e59f506f87a5 Step #5: Base64: JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKQRDIAAkMQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3062 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 947762405 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5606f4ec3d60, 0x5606f50ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5606f50ac720,0x5606f6f362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a0b5af8e4d91766cf2b3f4f8a4d6e59f506f87a5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3750 processed earlier; will process 7226 files now Step #5: ==110308== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5606eba062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5606f2041728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5606f202446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5606f202438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5606eba0c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5606eb96d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5606eb967c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5606eb9fe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5606eea2d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5606eea2d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5606eea2d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5606eea2d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5606eea2d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5606eea2d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5606eea2d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5606eea2d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5606eea2d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5606eea2d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5606f0c3245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5606ed98e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5606ed9995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5606ed744d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5606ed744d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5606ed745808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5606ed744944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5606ed744944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5606ed744944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5606f202694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5606f202f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5606f2017529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5606f2041fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f06a7ba6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5606eb96643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xec,0x8c,0xbd,0xcc,0xa2,0xec,0x8c,0xbd,0xcc,0xa2,0xec,0x8c,0xbd,0xcc,0xa2,0xec,0x8c,0xbd,0xcc,0xb2,0xec,0x8c,0xbd,0xcc,0xa2,0xec,0x8c,0xbd,0xcc,0xa2,0xec,0x8c,0xbd,0xcc,0xa2,0xec,0x84,0xbd,0xcc,0xa2, Step #5: ws:\354\214\275\314\242\354\214\275\314\242\354\214\275\314\242\354\214\275\314\262\354\214\275\314\242\354\214\275\314\242\354\214\275\314\242\354\204\275\314\242 Step #5: artifact_prefix='./'; Test unit written to ./oom-497bb044a1ba13db344938ef16a5d1bb97899c80 Step #5: Base64: d3M67Iy9zKLsjL3MouyMvcyi7Iy9zLLsjL3MouyMvcyi7Iy9zKLshL3Mog== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3063 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 948283973 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55da8fff1d60, 0x55da901da71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55da901da720,0x55da920642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/497bb044a1ba13db344938ef16a5d1bb97899c80' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3751 processed earlier; will process 7225 files now Step #5: ==110344== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55da86b342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55da8d16f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55da8d15246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55da8d15238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55da86b3a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55da86a9b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55da86a95c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55da86b2c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55da89b5b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55da89b5b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55da89b5b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55da89b5b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55da89b5b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55da89b5b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55da89b5b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55da89b5b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55da89b5b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55da89b5b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55da8bd6045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55da88abc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55da88ac75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55da88872d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55da88872d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55da88873808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55da88872944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55da88872944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55da88872944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55da8d15494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55da8d15d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55da8d145529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55da8d16ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc5d6a89082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55da86a9443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x31,0x32,0x38,0x12,0x3d,0x3c,0x27,0x27,0x32,0x36,0x2f,0x30,0x27,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0x32,0x39,0x36,0xe2,0x81,0xa5,0x2d,0x3d,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x36,0x27,0x24,0x27,0x2d, Step #5: $128\022=<''26/0'4294967296\342\201\245-='''''''''6'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-612276203c45c41925fe31dd2874bc91aff8c0fd Step #5: Base64: JDEyOBI9PCcnMjYvMCc0Mjk0OTY3Mjk24oGlLT0nJycnJycnJyc2JyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3064 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 948813157 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fed2426d60, 0x55fed260f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fed260f720,0x55fed44992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/612276203c45c41925fe31dd2874bc91aff8c0fd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3752 processed earlier; will process 7224 files now Step #5: ==110380== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fec8f692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fecf5a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fecf58746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fecf58738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fec8f6f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fec8ed042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fec8ecac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fec8f61595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fecbf908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fecbf908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fecbf908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fecbf908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fecbf908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fecbf908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fecbf908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fecbf908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fecbf908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fecbf908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fece19545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fecaef1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fecaefc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fecaca7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fecaca7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fecaca8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fecaca7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fecaca7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fecaca7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fecf58994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fecf5927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fecf57a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fecf5a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78d6fdb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fec8ec943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x40,0x5c,0x2b,0x5c,0x4d,0x5c,0x5,0x5,0x2,0x29,0x0,0x0,0x29,0x3d,0x0,0x0,0xd9,0xbe,0x19,0x0,0x0,0xef,0xbf,0xb4,0xef,0xbf,0xaf,0xef,0xbf,0xad,0x0,0x1,0x0,0x0,0x0,0x0,0x1b,0x0,0xf,0x25,0x0,0x0, Step #5: \\@\\+\\M\\\005\005\002)\000\000)=\000\000\331\276\031\000\000\357\277\264\357\277\257\357\277\255\000\001\000\000\000\000\033\000\017%\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-754b8ceb96231d7d5ec8b68a7c3b2e0b9b776a3c Step #5: Base64: XEBcK1xNXAUFAikAACk9AADZvhkAAO+/tO+/r++/rQABAAAAABsADyUAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3065 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 949359007 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55587416cd60, 0x55587435571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555874355720,0x5558761df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/754b8ceb96231d7d5ec8b68a7c3b2e0b9b776a3c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3753 processed earlier; will process 7223 files now Step #5: ==110416== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55586acaf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5558712ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5558712cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5558712cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55586acb5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55586ac1642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55586ac10c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55586aca7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55586dcd68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55586dcd68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55586dcd68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55586dcd68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55586dcd68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55586dcd68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55586dcd68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55586dcd68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55586dcd68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55586dcd68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55586fedb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55586cc37578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55586cc425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55586c9edd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55586c9edd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55586c9ee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55586c9ed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55586c9ed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55586c9ed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5558712cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5558712d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5558712c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5558712eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0df2f6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55586ac0f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c,0x59,0x31,0x32,0x5c,0x6a,0x5c,0x52,0x5c,0x31,0xcc,0xa3,0xc4,0xa3,0x65,0x5c,0x40,0x28,0x3f,0x78,0x29,0xdb,0xad,0xdb,0xad,0xc4,0xa3,0xc4,0x80,0x0,0xbb,0x0,0x6a,0x5c,0xa8,0x5c,0x52,0x5c,0x65,0xff,0x3b,0x5c,0x65, Step #5: LY12\\j\\R\\1\314\243\304\243e\\@(?x)\333\255\333\255\304\243\304\200\000\273\000j\\\250\\R\\e\377;\\e Step #5: artifact_prefix='./'; Test unit written to ./oom-b21ab2d3bc370a4da7757832799eab9198f00630 Step #5: Base64: TFkxMlxqXFJcMcyjxKNlXEAoP3gp263brcSjxIAAuwBqXKhcUlxl/ztcZQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3066 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 949885021 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bcc3b81d60, 0x55bcc3d6a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bcc3d6a720,0x55bcc5bf42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b21ab2d3bc370a4da7757832799eab9198f00630' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3754 processed earlier; will process 7222 files now Step #5: ==110452== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bcba6c42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bcc0cff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bcc0ce246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bcc0ce238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bcba6ca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bcba62b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bcba625c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bcba6bc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bcbd6eb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bcbd6eb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bcbd6eb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bcbd6eb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bcbd6eb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bcbd6eb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bcbd6eb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bcbd6eb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bcbd6eb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bcbd6eb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bcbf8f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bcbc64c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bcbc6575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bcbc402d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bcbc402d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bcbc403808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bcbc402944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bcbc402944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bcbc402944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bcc0ce494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bcc0ced7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bcc0cd5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bcc0cfffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28573c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bcba62443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x45,0x78,0x65,0x63,0x5d,0xa,0x55,0x73,0x65,0x72,0x3d,0xe2,0x81,0xa8,0x73,0x25,0x72,0x3d,0xe2,0x81,0xa8,0x5b,0x45,0x0,0x55,0x73,0x65,0x72,0x3d,0xe2,0x81,0xa8,0x73,0x25,0x72,0x3d,0xe2,0x81,0xa8,0x5b,0x65,0x30, Step #5: [Exec]\012User=\342\201\250s%r=\342\201\250[E\000User=\342\201\250s%r=\342\201\250[e0 Step #5: artifact_prefix='./'; Test unit written to ./oom-4a769e9e4a93e996535ec97902b6a22e9a95cac6 Step #5: Base64: W0V4ZWNdClVzZXI94oGocyVyPeKBqFtFAFVzZXI94oGocyVyPeKBqFtlMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3067 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 950402209 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8cbd18d60, 0x55e8cbf0171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8cbf01720,0x55e8cdd8b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4a769e9e4a93e996535ec97902b6a22e9a95cac6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3755 processed earlier; will process 7221 files now Step #5: ==110488== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8c285b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8c8e96728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8c8e7946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8c8e7938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8c2861652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8c27c242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8c27bcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8c2853595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8c58828c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8c58828c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8c58828c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8c58828c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8c58828c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8c58828c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8c58828c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8c58828c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8c58828c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8c58828c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8c7a8745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8c47e3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8c47ee5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8c4599d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8c4599d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8c459a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8c4599944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8c4599944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8c4599944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8c8e7b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8c8e847b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8c8e6c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8c8e96fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f36f894b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8c27bb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x2d,0x31,0x2d,0x32,0x31,0x39,0x3a,0x34,0x3a,0x32,0xd9,0x91,0xd9,0x92,0xd9,0x8e,0xd8,0x91,0xd9,0x91,0xd9,0x8e,0xd8,0x91,0xd9,0x92,0xd9,0x92,0xd9,0x8e,0xd9,0x91,0xd9,0x98,0xd9,0x91,0xd9,0x8e,0xd8,0x91,0xd9,0x92, Step #5: 6-1-219:4:2\331\221\331\222\331\216\330\221\331\221\331\216\330\221\331\222\331\222\331\216\331\221\331\230\331\221\331\216\330\221\331\222 Step #5: artifact_prefix='./'; Test unit written to ./oom-d4990f13a49a766a723cfec5245f71543617f31d Step #5: Base64: Ni0xLTIxOTo0OjLZkdmS2Y7YkdmR2Y7YkdmS2ZLZjtmR2ZjZkdmO2JHZkg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3068 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 950917254 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a730ec2d60, 0x55a7310ab71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a7310ab720,0x55a732f352c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d4990f13a49a766a723cfec5245f71543617f31d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3756 processed earlier; will process 7220 files now Step #5: #1 pulse cov: 3701 ft: 3702 exec/s: 0 rss: 174Mb Step #5: ==110524== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a727a052d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a72e040728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a72e02346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a72e02338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a727a0b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a72796c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a727966c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a7279fd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a72aa2c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a72aa2c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a72aa2c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a72aa2c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a72aa2c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a72aa2c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a72aa2c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a72aa2c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a72aa2c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a72aa2c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a72cc3145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a72998d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a7299985a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a729743d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a729743d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a729744808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a729743944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a729743944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a729743944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a72e02594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a72e02e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a72e016529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a72e040fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4524426082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a72796543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x9,0x3f,0xb,0x61,0xa,0x41,0x55,0x74,0x68,0x6f,0x72,0x69,0x7a,0x61,0x74,0x69,0x4f,0x6e,0x3a,0x4f,0x41,0x75,0x74,0x68,0x20,0x6f,0x61,0x55,0x74,0x68,0x5f,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x3d,0x31,0xca,0xbb, Step #5: o\011?\013a\012AUthorizatiOn:OAuth oaUth_version=1\312\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-bf7ec9ee1dfab445eb20fa27b2e5604849a1facc Step #5: Base64: bwk/C2EKQVV0aG9yaXphdGlPbjpPQXV0aCBvYVV0aF92ZXJzaW9uPTHKuw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3069 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 951476873 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5630937d0d60, 0x5630939b971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5630939b9720,0x5630958432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bf7ec9ee1dfab445eb20fa27b2e5604849a1facc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3758 processed earlier; will process 7218 files now Step #5: ==110560== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56308a3132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56309094e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56309093146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56309093138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56308a319652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56308a27a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56308a274c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56308a30b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56308d33a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56308d33a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56308d33a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56308d33a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56308d33a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56308d33a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56308d33a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56308d33a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56308d33a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56308d33a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56308f53f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56308c29b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56308c2a65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56308c051d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56308c051d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56308c052808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56308c051944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56308c051944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56308c051944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56309093394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56309093c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563090924529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56309094efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4a57def082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56308a27343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x6c,0x31,0x46,0x50,0x3c,0x1d,0x54,0x11,0x11,0x11,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x1b,0x44,0x33,0x2,0x0,0x0,0x0,0x0, Step #5: ID3\002l1FP<\035T\021\021\021\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033\033D3\002\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f8e25751351fd74057cc47ac7ab93929d5254d13 Step #5: Base64: SUQzAmwxRlA8HVQREREbGxsbGxsbGxsbGxsbGxsbGxsbGxsbRDMCAAAAAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3070 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 951996075 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e036070d60, 0x55e03625971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e036259720,0x55e0380e32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f8e25751351fd74057cc47ac7ab93929d5254d13' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3759 processed earlier; will process 7217 files now Step #5: ==110596== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e02cbb32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e0331ee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e0331d146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e0331d138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e02cbb9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e02cb1a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e02cb14c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e02cbab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e02fbda8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e02fbda8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e02fbda8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e02fbda8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e02fbda8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e02fbda8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e02fbda8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e02fbda8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e02fbda8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e02fbda8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e031ddf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e02eb3b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e02eb465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e02e8f1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e02e8f1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e02e8f2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e02e8f1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e02e8f1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e02e8f1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e0331d394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e0331dc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e0331c4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e0331eefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f430173e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e02cb1343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x53,0x3a,0xc5,0x99,0xcd,0x99,0xd6,0xbd,0xd6,0xbb,0xd6,0xb9,0xc5,0x99,0xcd,0x99,0xd6,0xbd,0xd6,0xbb,0xd6,0xb9,0xc5,0x99,0xcd,0x99,0xd6,0xbd,0xd6,0xbb,0xd6,0xb9,0xc5,0xb8,0xcd,0x9a,0xd6,0xbd,0xd6,0xbb,0xd6,0xb9, Step #5: wS:\305\231\315\231\326\275\326\273\326\271\305\231\315\231\326\275\326\273\326\271\305\231\315\231\326\275\326\273\326\271\305\270\315\232\326\275\326\273\326\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-aba1e17a1b9c0e379f3264aeaa06ccd27176fa6b Step #5: Base64: d1M6xZnNmda91rvWucWZzZnWvda71rnFmc2Z1r3Wu9a5xbjNmta91rvWuQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3071 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 952520069 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b907c09d60, 0x55b907df271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b907df2720,0x55b909c7c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aba1e17a1b9c0e379f3264aeaa06ccd27176fa6b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3760 processed earlier; will process 7216 files now Step #5: ==110632== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8fe74c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b904d87728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b904d6a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b904d6a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8fe752652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8fe6b342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8fe6adc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8fe744595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9017738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9017738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9017738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9017738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9017738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9017738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9017738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9017738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9017738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9017738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b90397845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9006d4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9006df5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b90048ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b90048ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b90048b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b90048a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b90048a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b90048a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b904d6c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b904d757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b904d5d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b904d87fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2eba81c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8fe6ac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0xa,0x74,0xa,0x74,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x29,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x50,0xa,0x2d,0xa,0x2d, Step #5: 0\012t\012t\012-\012-\012-\012-\012-\012-\012-\012-\012)\012-\012-\012-\012-\012-\012-\012-\012P\012-\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-c12781911b434730dba7328fc4096889194491cb Step #5: Base64: MAp0CnQKLQotCi0KLQotCi0KLQotCikKLQotCi0KLQotCi0KLQpQCi0KLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3072 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 953066455 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560dee8d7d60, 0x560deeac071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560deeac0720,0x560df094a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c12781911b434730dba7328fc4096889194491cb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3761 processed earlier; will process 7215 files now Step #5: ==110668== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560de541a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560deba55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560deba3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560deba3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560de5420652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560de538142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560de537bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560de5412595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560de84418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560de84418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560de84418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560de84418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560de84418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560de84418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560de84418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560de84418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560de84418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560de84418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560dea64645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560de73a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560de73ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560de7158d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560de7158d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560de7159808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560de7158944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560de7158944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560de7158944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560deba3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560deba437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560deba2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560deba55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcedc60c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560de537a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6c,0x6f,0x63,0x61,0x6c,0xd,0x66,0x75,0x6e,0x63,0x74,0x69,0x6f,0x6e,0xc,0x6e,0x28,0x29,0x65,0x6e,0x64,0xd,0x6c,0x6f,0x63,0x61,0x6c,0xd,0x66,0x75,0x6e,0x63,0x74,0x69,0x6f,0x6e,0xc,0x6e,0x28,0x29,0x65,0x6e,0x64, Step #5: local\015function\014n()end\015local\015function\014n()end Step #5: artifact_prefix='./'; Test unit written to ./oom-0856e08940884973e0520f27aa3bf121d642e94c Step #5: Base64: bG9jYWwNZnVuY3Rpb24MbigpZW5kDWxvY2FsDWZ1bmN0aW9uDG4oKWVuZA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3073 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 953585971 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563fa64f5d60, 0x563fa66de71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563fa66de720,0x563fa85682c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0856e08940884973e0520f27aa3bf121d642e94c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3762 processed earlier; will process 7214 files now Step #5: ==110704== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563f9d0382d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563fa3673728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563fa365646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563fa365638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563f9d03e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563f9cf9f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563f9cf99c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563f9d030595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563fa005f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563fa005f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563fa005f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563fa005f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563fa005f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563fa005f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563fa005f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563fa005f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563fa005f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563fa005f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563fa226445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563f9efc0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563f9efcb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563f9ed76d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563f9ed76d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563f9ed77808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563f9ed76944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563f9ed76944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563f9ed76944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563fa365894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563fa36617b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563fa3649529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563fa3673fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7eff8e1b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563f9cf9843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7b,0x38,0x7d,0x24,0x7f,0x32,0x7d,0x24,0x7b,0x28,0x7d,0x24,0x7b,0x31,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x7f,0x32,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x38,0x7d,0x24,0x7b,0x38,0x7d,0x24,0x7b,0x38,0x7d,0x3b,0x7b,0x38,0x7d, Step #5: ${8}$\1772}${(}${1}${8}$\1772}${8}$8}${8}${8};{8} Step #5: artifact_prefix='./'; Test unit written to ./oom-8a23e20cee18c5e8e71ae7b99389926497bf8ebe Step #5: Base64: JHs4fSR/Mn0keyh9JHsxfSR7OH0kfzJ9JHs4fSQ4fSR7OH0kezh9O3s4fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3074 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 954102465 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5555d19e3d60, 0x5555d1bcc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5555d1bcc720,0x5555d3a562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8a23e20cee18c5e8e71ae7b99389926497bf8ebe' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3763 processed earlier; will process 7213 files now Step #5: ==110740== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5555c85262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5555ceb61728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5555ceb4446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5555ceb4438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5555c852c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5555c848d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5555c8487c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5555c851e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5555cb54d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5555cb54d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5555cb54d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5555cb54d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5555cb54d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5555cb54d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5555cb54d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5555cb54d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5555cb54d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5555cb54d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5555cd75245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5555ca4ae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5555ca4b95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5555ca264d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5555ca264d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5555ca265808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5555ca264944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5555ca264944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5555ca264944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5555ceb4694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5555ceb4f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5555ceb37529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5555ceb61fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f007e682082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5555c848643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0xa,0x22,0x5f,0x7,0x22,0x72,0x69,0x66,0x3d,0x42,0x42,0xa,0x7d,0x20,0x20,0xa,0x3d,0x20,0x20,0x2e,0x1d,0x20,0x2e,0x2d,0x13,0x1d,0x60,0x1,0x22,0x2,0x4a,0x2,0x0,0x6,0x60,0x20,0x0,0x65,0x20,0x60,0xa,0x60, Step #5: _\012\"_\007\"rif=BB\012} \012= .\035 .-\023\035`\001\"\002J\002\000\006` \000e `\012` Step #5: artifact_prefix='./'; Test unit written to ./oom-638fb9e6174ccae7efce6472a760ce602b5c6ccc Step #5: Base64: XwoiXwcicmlmPUJCCn0gIAo9ICAuHSAuLRMdYAEiAkoCAAZgIABlIGAKYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3075 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 954738861 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f4a9e94d60, 0x55f4aa07d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f4aa07d720,0x55f4abf072c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/638fb9e6174ccae7efce6472a760ce602b5c6ccc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3764 processed earlier; will process 7212 files now Step #5: ==110776== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f4a09d72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f4a7012728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f4a6ff546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f4a6ff538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f4a09dd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f4a093e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f4a0938c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f4a09cf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f4a39fe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f4a39fe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f4a39fe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f4a39fe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f4a39fe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f4a39fe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f4a39fe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f4a39fe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f4a39fe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f4a39fe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f4a5c0345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f4a295f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f4a296a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f4a2715d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f4a2715d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f4a2716808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f4a2715944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f4a2715944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f4a2715944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f4a6ff794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4a70007b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f4a6fe8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f4a7012fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3676b0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f4a093743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x29,0x44,0x33,0x2,0x23,0x33,0x38,0x33,0x1,0x1,0x54,0x58,0x58,0x0,0x0,0x1,0x33,0x43,0x48,0x41,0x0,0x0,0x12,0x49,0x29,0x44,0x33,0x2,0x23,0x33,0x38,0x33,0x1,0x1,0x54,0x58,0x58,0x0,0x0,0x1,0x33,0x43, Step #5: I)D3\002#383\001\001TXX\000\000\0013CHA\000\000\022I)D3\002#383\001\001TXX\000\000\0013C Step #5: artifact_prefix='./'; Test unit written to ./oom-515846fc449c994378eafdd1f279c9a8289fb879 Step #5: Base64: SSlEMwIjMzgzAQFUWFgAAAEzQ0hBAAASSSlEMwIjMzgzAQFUWFgAAAEzQw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3076 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 955248507 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559391367d60, 0x55939155071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559391550720,0x5593933da2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/515846fc449c994378eafdd1f279c9a8289fb879' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3765 processed earlier; will process 7211 files now Step #5: ==110812== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559387eaa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55938e4e5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55938e4c846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55938e4c838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559387eb0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559387e1142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559387e0bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559387ea2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55938aed18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55938aed18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55938aed18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55938aed18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55938aed18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55938aed18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55938aed18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55938aed18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55938aed18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55938aed18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55938d0d645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559389e32578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559389e3d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559389be8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559389be8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559389be9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559389be8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559389be8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559389be8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55938e4ca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55938e4d37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55938e4bb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55938e4e5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7377ca1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559387e0a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0x82,0x69,0xd7,0xbf,0xd1,0xb6,0xd7,0xbd,0xd3,0xb6,0xd7,0xaf,0xdf,0xbf,0xd7,0xbf,0xd7,0xbf,0xd1,0xb6,0xd7,0xbd,0xd7,0xaf,0xdf,0xbf,0x0,0x0,0x0,0x30,0x77,0x69,0x34,0x30,0x36,0x31,0x37,0x9,0x6b,0x6c, Step #5: \363\240\200\202i\327\277\321\266\327\275\323\266\327\257\337\277\327\277\327\277\321\266\327\275\327\257\337\277\000\000\0000wi40617\011kl Step #5: artifact_prefix='./'; Test unit written to ./oom-c20aea19ceb6e5eb43ff3857999009c94c71f0ab Step #5: Base64: 86CAgmnXv9G2173Tttev37/Xv9e/0bbXvdev378AAAAwd2k0MDYxNwlrbA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3077 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 955773052 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581b1bdad60, 0x5581b1dc371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581b1dc3720,0x5581b3c4d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c20aea19ceb6e5eb43ff3857999009c94c71f0ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3766 processed earlier; will process 7210 files now Step #5: ==110848== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581a871d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581aed58728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581aed3b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581aed3b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581a8723652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581a868442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581a867ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581a8715595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581ab7448c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581ab7448c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581ab7448c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581ab7448c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581ab7448c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581ab7448c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581ab7448c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581ab7448c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581ab7448c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581ab7448c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581ad94945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581aa6a5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581aa6b05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581aa45bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581aa45bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581aa45c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581aa45b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581aa45b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581aa45b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581aed3d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581aed467b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581aed2e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581aed58fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3f90abd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581a867d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0xa,0x22,0x5f,0x7,0x22,0x72,0x69,0x66,0x3d,0x42,0x42,0xa,0x7d,0x20,0x20,0xa,0x3d,0x20,0x20,0x2e,0x1d,0x20,0x2e,0x2d,0x13,0x1d,0x60,0x1,0x22,0x2,0xa,0x2,0x0,0x6,0x60,0x20,0x0,0x65,0x20,0x60,0xa,0x60, Step #5: _\012\"_\007\"rif=BB\012} \012= .\035 .-\023\035`\001\"\002\012\002\000\006` \000e `\012` Step #5: artifact_prefix='./'; Test unit written to ./oom-b3018d3cfa0bed7758a78d7582ceabff9665748f Step #5: Base64: XwoiXwcicmlmPUJCCn0gIAo9ICAuHSAuLRMdYAEiAgoCAAZgIABlIGAKYA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3078 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 956425791 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a448aadd60, 0x55a448c9671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a448c96720,0x55a44ab202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b3018d3cfa0bed7758a78d7582ceabff9665748f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3767 processed earlier; will process 7209 files now Step #5: #1 pulse cov: 4141 ft: 4142 exec/s: 0 rss: 175Mb Step #5: ==110884== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a43f5f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a445c2b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a445c0e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a445c0e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a43f5f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a43f55742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a43f551c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a43f5e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4426178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4426178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4426178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4426178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4426178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4426178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4426178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4426178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4426178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4426178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a44481c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a441578578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4415835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a44132ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a44132ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a44132f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a44132e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a44132e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a44132e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a445c1094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a445c197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a445c01529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a445c2bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f09b9f49082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a43f55043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0xf,0xf,0xf,0xf,0xf,0x30,0xf,0x2d,0x31,0x5b,0x26,0x11,0x0,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0xf,0xf,0xf,0xf,0xf,0x30,0xf,0x2d,0x24,0x5b,0x2d,0x3a,0xee,0x24,0x5b, Step #5: $\000\000/\000\000\000/\000\017\017\017\017\0170\017-1[&\021\000\000/\000\000\000/\000\017\017\017\017\0170\017-$[-:\356$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-45a84c67f832e08bb95a736cd249084493c9cf7c Step #5: Base64: JAAALwAAAC8ADw8PDw8wDy0xWyYRAAAvAAAALwAPDw8PDzAPLSRbLTruJFs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3079 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 956980900 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b3c325fd60, 0x55b3c344871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b3c3448720,0x55b3c52d22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/45a84c67f832e08bb95a736cd249084493c9cf7c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3769 processed earlier; will process 7207 files now Step #5: #1 pulse cov: 3680 ft: 3681 exec/s: 0 rss: 173Mb Step #5: ==110920== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b3b9da22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b3c03dd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b3c03c046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b3c03c038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b3b9da8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b3b9d0942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b3b9d03c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b3b9d9a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b3bcdc98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b3bcdc98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b3bcdc98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b3bcdc98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b3bcdc98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b3bcdc98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b3bcdc98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b3bcdc98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b3bcdc98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b3bcdc98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b3befce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b3bbd2a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b3bbd355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b3bbae0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b3bbae0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b3bbae1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b3bbae0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b3bbae0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b3bbae0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b3c03c294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b3c03cb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b3c03b3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b3c03ddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc7e5914082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b3b9d0243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x55,0x0,0x6,0x0,0x0,0xef,0xbe,0xa0,0xe0,0xb9,0x84,0x0,0x0,0x0,0xe0,0xb9,0x84,0xf3,0xa0,0x80,0xa4,0x0,0x0,0x0,0xef,0xac,0xac,0x2,0x0,0x6,0x0,0x0,0x0,0x6,0x0,0x0,0xb,0x0,0xf6,0xf0,0x9f,0x92,0xa9,0x6, Step #5: U\000\006\000\000\357\276\240\340\271\204\000\000\000\340\271\204\363\240\200\244\000\000\000\357\254\254\002\000\006\000\000\000\006\000\000\013\000\366\360\237\222\251\006 Step #5: artifact_prefix='./'; Test unit written to ./oom-47d7e4ceff31d73f58f8f989707bc005997d5640 Step #5: Base64: VQAGAADvvqDguYQAAADguYTzoICkAAAA76ysAgAGAAAABgAACwD28J+SqQY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3080 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 957551191 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c45e64dd60, 0x55c45e83671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c45e836720,0x55c4606c02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/47d7e4ceff31d73f58f8f989707bc005997d5640' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3771 processed earlier; will process 7205 files now Step #5: ==110956== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c4551902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c45b7cb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c45b7ae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c45b7ae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c455196652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c4550f742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c4550f1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c455188595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c4581b78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c4581b78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c4581b78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c4581b78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c4581b78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c4581b78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c4581b78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c4581b78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c4581b78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c4581b78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c45a3bc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c457118578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c4571235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c456eced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c456eced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c456ecf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c456ece944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c456ece944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c456ece944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c45b7b094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c45b7b97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c45b7a1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c45b7cbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff8468bf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c4550f043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x28,0x0,0xcf,0x87,0xc6,0xb0,0xc6,0xbd,0xc6,0xbd,0xc6,0xb0,0xcf,0x87,0xc6,0xb0,0xc6,0xbd,0xc9,0xb2,0x5b,0xef,0xbf,0xbd,0xc6,0xbd,0xc6,0xbd,0xc6,0xbd,0xc6,0xbd,0xc7,0xbd,0xdd,0xb0,0xcf,0xb0,0xcf,0x87,0x2f, Step #5: \000\000\000(\000\317\207\306\260\306\275\306\275\306\260\317\207\306\260\306\275\311\262[\357\277\275\306\275\306\275\306\275\306\275\307\275\335\260\317\260\317\207/ Step #5: artifact_prefix='./'; Test unit written to ./oom-eb05285c790298b8769871cc96d7006823ede106 Step #5: Base64: AAAAKADPh8awxr3Gvcawz4fGsMa9ybJb77+9xr3Gvca9xr3Hvd2wz7DPhy8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3081 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 958066293 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55656d121d60, 0x55656d30a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55656d30a720,0x55656f1942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eb05285c790298b8769871cc96d7006823ede106' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3772 processed earlier; will process 7204 files now Step #5: ==110992== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556563c642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55656a29f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55656a28246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55656a28238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556563c6a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556563bcb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556563bc5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556563c5c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556566c8b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556566c8b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556566c8b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556566c8b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556566c8b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556566c8b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556566c8b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556566c8b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556566c8b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556566c8b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556568e9045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556565bec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556565bf75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5565659a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5565659a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5565659a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5565659a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5565659a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5565659a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55656a28494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55656a28d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55656a275529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55656a29ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd0b6ded082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556563bc443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xba,0xd6,0xba,0xd6,0xb7,0xd6,0xb1,0xcc,0xb7,0xef,0xbb,0xba,0xd6,0xba,0xd6,0xb7,0xd6,0xb1,0xcc,0xb7,0xef,0xbb,0xba,0xd6,0xba,0xd6,0xb7,0xd6,0xb1,0xcc,0xb7,0xef,0xbb,0xba,0xd6,0xba,0xd6,0xb7,0xd6,0xb1,0xcc,0xb7, Step #5: \357\273\272\326\272\326\267\326\261\314\267\357\273\272\326\272\326\267\326\261\314\267\357\273\272\326\272\326\267\326\261\314\267\357\273\272\326\272\326\267\326\261\314\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-5783ec6cb9681e560759e1d70c82a4d037327624 Step #5: Base64: 77u61rrWt9axzLfvu7rWuta31rHMt++7uta61rfWscy377u61rrWt9axzLc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3082 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 958578086 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d0db87d60, 0x556d0dd7071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d0dd70720,0x556d0fbfa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5783ec6cb9681e560759e1d70c82a4d037327624' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3773 processed earlier; will process 7203 files now Step #5: #1 pulse cov: 3922 ft: 3923 exec/s: 0 rss: 171Mb Step #5: ==111028== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d046ca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d0ad05728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d0ace846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d0ace838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d046d0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d0463142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d0462bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d046c2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d076f18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d076f18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d076f18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d076f18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d076f18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d076f18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d076f18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d076f18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d076f18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d076f18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d098f645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d06652578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d0665d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d06408d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d06408d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d06409808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d06408944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d06408944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d06408944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d0acea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d0acf37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d0acdb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d0ad05fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcacc296082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d0462a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x2,0x0,0x1,0x0,0x30,0x63,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x49,0x0,0x0,0x0,0x0,0x0,0x2c,0x0,0x0,0x60,0x2a,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x1e,0x0,0xe9,0x0,0x0, Step #5: DanM\002\000\001\0000c````````I\000\000\000\000\000,\000\000`*``````````\036\000\351\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-285e4be867dd6acfe8f2582ab6f014cbd9a8b1c5 Step #5: Base64: RGFuTQIAAQAwY2BgYGBgYGBgSQAAAAAALAAAYCpgYGBgYGBgYGBgHgDpAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3083 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 959260889 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fae4cced60, 0x55fae4eb771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fae4eb7720,0x55fae6d412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/285e4be867dd6acfe8f2582ab6f014cbd9a8b1c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3775 processed earlier; will process 7201 files now Step #5: #1 pulse cov: 3524 ft: 3525 exec/s: 0 rss: 173Mb Step #5: ==111064== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fadb8112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fae1e4c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fae1e2f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fae1e2f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fadb817652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fadb77842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fadb772c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fadb809595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fade8388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fade8388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fade8388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fade8388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fade8388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fade8388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fade8388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fade8388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fade8388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fade8388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fae0a3d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fadd799578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fadd7a45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fadd54fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fadd54fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fadd550808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fadd54f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fadd54f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fadd54f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fae1e3194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fae1e3a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fae1e22529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fae1e4cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0d83c57082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fadb77143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x68,0x3e,0x3c,0x21,0x5b,0x43,0x44,0x41,0x54,0x41,0x5b,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f,0xd,0xe1,0x85,0x9f, Step #5: Step #5: Step #5: #0 0x5632023352d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563208970728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56320895346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56320895338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56320233b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56320229c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563202296c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56320232d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56320535c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56320535c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56320535c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56320535c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56320535c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56320535c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56320535c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56320535c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56320535c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56320535c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56320756145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5632042bd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5632042c85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563204073d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563204073d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563204074808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563204073944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563204073944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563204073944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56320895594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56320895e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563208946529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563208970fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f012ef7c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56320229543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x2d,0x2d,0x2d,0x2e,0x2d,0x2d,0x2d,0xa,0x3a,0xa,0xf3,0xa0,0x81,0x97,0x21,0xa,0x2d,0xa,0x3a,0xa,0xf3,0xa0,0x81,0x97,0x21,0xa,0xf3,0xa0,0x81,0x97,0x21,0xa,0xf3,0xa0,0x81,0x97,0x21,0xa,0x2d,0xa,0x2d,0xa,0xa, Step #5: \012---.---\012:\012\363\240\201\227!\012-\012:\012\363\240\201\227!\012\363\240\201\227!\012\363\240\201\227!\012-\012-\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-95fd40b69ce678eb9f34449fbc593e8366475c1d Step #5: Base64: Ci0tLS4tLS0KOgrzoIGXIQotCjoK86CBlyEK86CBlyEK86CBlyEKLQotCgo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3085 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 960335980 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5562b863dd60, 0x5562b882671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5562b8826720,0x5562ba6b02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/95fd40b69ce678eb9f34449fbc593e8366475c1d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3778 processed earlier; will process 7198 files now Step #5: ==111136== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5562af1802d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5562b57bb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5562b579e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5562b579e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5562af186652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5562af0e742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5562af0e1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5562af178595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5562b21a78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5562b21a78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5562b21a78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5562b21a78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5562b21a78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5562b21a78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5562b21a78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5562b21a78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5562b21a78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5562b21a78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5562b43ac45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5562b1108578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5562b11135a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5562b0ebed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5562b0ebed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5562b0ebf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5562b0ebe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5562b0ebe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5562b0ebe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5562b57a094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5562b57a97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5562b5791529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5562b57bbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f89bd823082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5562af0e043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x21,0x73,0x3b,0x77,0x29,0x29,0x29,0x30,0x29,0x29,0x2b,0x77,0x29,0xd6,0x92,0x29,0x22,0x3a,0x31,0x2c,0x22,0x21,0x73,0x3b,0x77,0x29,0x29,0x29,0x30,0x29,0x29,0x2b,0x77,0x29,0xd6,0x92,0xd6,0x92,0x22,0x3a,0x37,0x7d, Step #5: {\"!s;w)))0))+w)\326\222)\":1,\"!s;w)))0))+w)\326\222\326\222\":7} Step #5: artifact_prefix='./'; Test unit written to ./oom-23ee8f30a13fae583cf737f4af298e9a93908b52 Step #5: Base64: eyIhczt3KSkpMCkpK3cp1pIpIjoxLCIhczt3KSkpMCkpK3cp1pLWkiI6N30= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3086 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 960855186 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563d5a80dd60, 0x563d5a9f671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563d5a9f6720,0x563d5c8802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/23ee8f30a13fae583cf737f4af298e9a93908b52' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3779 processed earlier; will process 7197 files now Step #5: ==111172== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563d513502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563d5798b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563d5796e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563d5796e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563d51356652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563d512b742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563d512b1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563d51348595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563d543778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563d543778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563d543778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563d543778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563d543778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563d543778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563d543778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563d543778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563d543778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563d543778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563d5657c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563d532d8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563d532e35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563d5308ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563d5308ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563d5308f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563d5308e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563d5308e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563d5308e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563d5797094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563d579797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563d57961529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563d5798bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f849120d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563d512b043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x24,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x5c,0x3d,0x24,0x5c,0x5c, Step #5: =$\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\\=$\\\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-98d7e058b36e6142fd3bfd64dfe9b3e8a917e9ef Step #5: Base64: PSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXD0kXFw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3087 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 961367046 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563bdc20dd60, 0x563bdc3f671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563bdc3f6720,0x563bde2802c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/98d7e058b36e6142fd3bfd64dfe9b3e8a917e9ef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3780 processed earlier; will process 7196 files now Step #5: ==111208== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563bd2d502d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563bd938b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563bd936e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563bd936e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563bd2d56652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563bd2cb742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563bd2cb1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563bd2d48595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563bd5d778c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563bd5d778c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563bd5d778c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563bd5d778c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563bd5d778c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563bd5d778c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563bd5d778c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563bd5d778c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563bd5d778c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563bd5d778c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563bd7f7c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563bd4cd8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563bd4ce35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563bd4a8ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563bd4a8ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563bd4a8f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563bd4a8e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563bd4a8e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563bd4a8e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563bd937094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563bd93797b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563bd9361529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563bd938bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd97930d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563bd2cb043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x54,0x32,0x32,0x36,0x5c,0x52,0x5c,0x53,0x5c,0x52,0x5c,0x52,0x5c,0x3,0x2e,0x2b,0x5c,0x2f,0x5c,0x5c,0x75,0x44,0x39,0x31,0x34,0x5c,0x5c,0xea,0xa1,0xa1,0x8d,0xff,0x31,0x37,0x30,0x36,0x36,0x30,0x34,0x34,0x36,0x2f,0x53, Step #5: IT226\\R\\S\\R\\R\\\003.+\\/\\\\uD914\\\\\352\241\241\215\377170660446/S Step #5: artifact_prefix='./'; Test unit written to ./oom-fa8605e81b106ca494a16ab7cf6e141335fcae0c Step #5: Base64: SVQyMjZcUlxTXFJcUlwDLitcL1xcdUQ5MTRcXOqhoY3/MTcwNjYwNDQ2L1M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3088 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 961874802 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557773615d60, 0x5577737fe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5577737fe720,0x5577756882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fa8605e81b106ca494a16ab7cf6e141335fcae0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3781 processed earlier; will process 7195 files now Step #5: #1 pulse cov: 3685 ft: 3686 exec/s: 0 rss: 171Mb Step #5: ==111244== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55776a1582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557770793728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55777077646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55777077638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55776a15e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55776a0bf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55776a0b9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55776a150595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55776d17f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55776d17f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55776d17f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55776d17f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55776d17f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55776d17f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55776d17f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55776d17f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55776d17f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55776d17f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55776f38445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55776c0e0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55776c0eb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55776be96d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55776be96d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55776be97808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55776be96944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55776be96944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55776be96944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55777077894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5577707817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557770769529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557770793fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f55fea99082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55776a0b843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x2d,0x2c,0xd5,0xa4,0x21,0xd5,0xa4,0x21,0xd5,0xa4,0x60,0x5b,0x2d,0x31,0x2d,0x33,0x38,0x37,0x35,0x34,0x38,0x33,0x30,0x30,0x5d,0xff,0x5f,0x5f,0x5f,0x1,0x85,0x85,0x0,0x57,0x11,0x5f,0x1,0x85,0x57,0x11,0x5f,0x0,0x2a, Step #5: `-,\325\244!\325\244!\325\244`[-1-387548300]\377___\001\205\205\000W\021_\001\205W\021_\000* Step #5: artifact_prefix='./'; Test unit written to ./oom-ae66a415e7d523e00062718e468f3f6ea1fbeb28 Step #5: Base64: YC0s1aQh1aQh1aRgWy0xLTM4NzU0ODMwMF3/X19fAYWFAFcRXwGFVxFfACo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3089 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 962553325 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560d26391d60, 0x560d2657a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560d2657a720,0x560d284042c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae66a415e7d523e00062718e468f3f6ea1fbeb28' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3783 processed earlier; will process 7193 files now Step #5: ==111280== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560d1ced42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560d2350f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560d234f246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560d234f238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560d1ceda652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560d1ce3b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560d1ce35c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560d1cecc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560d1fefb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560d1fefb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560d1fefb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560d1fefb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560d1fefb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560d1fefb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560d1fefb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560d1fefb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560d1fefb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560d1fefb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560d2210045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560d1ee5c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560d1ee675a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560d1ec12d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560d1ec12d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560d1ec13808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560d1ec12944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560d1ec12944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560d1ec12944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560d234f494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560d234fd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560d234e5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560d2350ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f19b51e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560d1ce3443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5f,0x52,0x49,0x43,0x33,0x34,0x52,0x52,0x41,0x59,0x61,0x61,0x69,0x46,0x78,0x43,0x75,0x32,0x61,0x69,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x51,0x69,0x6a,0x6a,0x68,0x79,0x79,0x46,0x47,0x44,0x5f,0x7a,0x7a,0x45,0x63,0x42,0x61,0x5f, Step #5: _RIC34RRAYaaiFxCu2aiooooooQijjhyyFGD_zzEcBa_ Step #5: artifact_prefix='./'; Test unit written to ./oom-5caf855915ee39229151e2121704a8e16725503b Step #5: Base64: X1JJQzM0UlJBWWFhaUZ4Q3UyYWlvb29vb29RaWpqaHl5RkdEX3p6RWNCYV8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3090 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 963072027 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55becb04fd60, 0x55becb23871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55becb238720,0x55becd0c22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5caf855915ee39229151e2121704a8e16725503b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3784 processed earlier; will process 7192 files now Step #5: #1 pulse cov: 11886 ft: 11887 exec/s: 0 rss: 193Mb Step #5: ==111316== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bec1b922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bec81cd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bec81b046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bec81b038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bec1b98652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bec1af942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bec1af3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bec1b8a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bec4bb98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bec4bb98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bec4bb98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bec4bb98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bec4bb98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bec4bb98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bec4bb98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bec4bb98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bec4bb98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bec4bb98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bec6dbe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bec3b1a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bec3b255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bec38d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bec38d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bec38d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bec38d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bec38d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bec38d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bec81b294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bec81bb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bec81a3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bec81cdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ce7c25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bec1af243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x49,0x4c,0x45,0x20,0x40,0x20,0x4d,0x50,0x33,0xa,0x46,0x49,0x4c,0x45,0x20,0x60,0x20,0x4d,0x50,0x33,0xa,0x46,0x49,0x4c,0x45,0x20,0x60,0x20,0x4d,0x50,0x33,0xa,0x46,0x49,0x4c,0x45,0x20,0x40,0x20,0x4d,0x50,0x33,0xa, Step #5: FILE @ MP3\012FILE ` MP3\012FILE ` MP3\012FILE @ MP3\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-896b8225af95518db290c2b3740c84422956057d Step #5: Base64: RklMRSBAIE1QMwpGSUxFIGAgTVAzCkZJTEUgYCBNUDMKRklMRSBAIE1QMwo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3091 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 963778273 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55de26f81d60, 0x55de2716a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55de2716a720,0x55de28ff42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/896b8225af95518db290c2b3740c84422956057d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3786 processed earlier; will process 7190 files now Step #5: ==111352== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55de1dac42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55de240ff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55de240e246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55de240e238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55de1daca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55de1da2b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55de1da25c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55de1dabc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55de20aeb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55de20aeb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55de20aeb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55de20aeb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55de20aeb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55de20aeb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55de20aeb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55de20aeb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55de20aeb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55de20aeb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55de22cf045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55de1fa4c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55de1fa575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55de1f802d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55de1f802d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55de1f803808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55de1f802944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55de1f802944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55de1f802944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55de240e494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55de240ed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55de240d5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55de240fffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8c4cf2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55de1da2443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x88,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0x2f,0xa,0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0xf3,0xa0,0x81,0xba,0x2f,0x1,0x0,0x0,0x0,0x60,0xa,0x9,0x60,0x20,0x60,0x60,0xa,0x9, Step #5: `\342\210\210-\000`\012\363\240\201\272/\012`\342\200\210-\000`\012\363\240\201\272\363\240\201\272/\001\000\000\000`\012\011` ``\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-dc025d11e90d39280433961a9ac43cbff9df24da Step #5: Base64: YOKIiC0AYArzoIG6Lwpg4oCILQBgCvOggbrzoIG6LwEAAABgCglgIGBgCgk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3092 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 964423111 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1e2fe7d60, 0x55e1e31d071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1e31d0720,0x55e1e505a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dc025d11e90d39280433961a9ac43cbff9df24da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3787 processed earlier; will process 7189 files now Step #5: #1 pulse cov: 3934 ft: 3935 exec/s: 0 rss: 173Mb Step #5: ==111388== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1d9b2a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1e0165728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1e014846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1e014838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1d9b30652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1d9a9142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1d9a8bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1d9b22595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1dcb518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1dcb518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1dcb518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1dcb518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1dcb518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1dcb518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1dcb518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1dcb518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1dcb518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1dcb518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1ded5645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1dbab2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1dbabd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1db868d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1db868d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1db869808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1db868944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1db868944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1db868944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1e014a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1e01537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1e013b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1e0165fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa899f6b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1d9a8a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x76,0x73,0x34,0x72,0x65,0x61,0x6d,0x50,0x50,0x4f,0x50,0x76,0x73,0x34,0x72,0x65,0x61,0x6d,0x50,0x50,0x4f,0x50,0x76,0x73,0x34,0x72,0x65,0x61,0x6d,0x50,0x50,0x4f,0x50,0x76,0x73,0x34,0x72,0x65,0x61,0x6d,0x50,0x50,0x4f,0x50, Step #5: vs4reamPPOPvs4reamPPOPvs4reamPPOPvs4reamPPOP Step #5: artifact_prefix='./'; Test unit written to ./oom-5bd30e7c940639fa7b0483b897f0b539f05f2aa8 Step #5: Base64: dnM0cmVhbVBQT1B2czRyZWFtUFBPUHZzNHJlYW1QUE9QdnM0cmVhbVBQT1A= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3093 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 964975547 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5637871bdd60, 0x5637873a671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5637873a6720,0x5637892302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5bd30e7c940639fa7b0483b897f0b539f05f2aa8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3789 processed earlier; will process 7187 files now Step #5: #1 pulse cov: 13158 ft: 13159 exec/s: 0 rss: 194Mb Step #5: #2 pulse cov: 13890 ft: 14764 exec/s: 0 rss: 196Mb Step #5: ==111424== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56377dd002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56378433b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56378431e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56378431e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56377dd06652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56377dc6742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56377dc61c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56377dcf8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563780d278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563780d278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563780d278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563780d278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563780d278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563780d278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563780d278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563780d278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563780d278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563780d278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563782f2c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56377fc88578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56377fc935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56377fa3ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56377fa3ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56377fa3f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56377fa3e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56377fa3e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56377fa3e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56378432094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5637843297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563784311529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56378433bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f18ee0a0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56377dc6043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x3a,0x20,0x7b,0x7b,0x6f,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0xd,0x67,0x7d,0x7d, Step #5: 2: {{o\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015\015g}} Step #5: artifact_prefix='./'; Test unit written to ./oom-f184289c9d4dbc324b2c7a6292d470d12d7d4a11 Step #5: Base64: Mjoge3tvDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ1nfX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3094 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 965607972 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561ab57a8d60, 0x561ab599171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561ab5991720,0x561ab781b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f184289c9d4dbc324b2c7a6292d470d12d7d4a11' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3792 processed earlier; will process 7184 files now Step #5: ==111460== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561aac2eb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ab2926728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ab290946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ab290938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561aac2f1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561aac25242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561aac24cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561aac2e3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561aaf3128c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561aaf3128c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561aaf3128c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561aaf3128c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561aaf3128c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561aaf3128c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561aaf3128c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561aaf3128c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561aaf3128c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561aaf3128c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ab151745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561aae273578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561aae27e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561aae029d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561aae029d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561aae02a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561aae029944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561aae029944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561aae029944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ab290b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ab29147b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ab28fc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ab2926fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f282e78e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561aac24b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x62,0x28,0x17,0x29,0x28,0x29,0x4d,0x26,0xe1,0x83,0x83,0x46,0x70,0x6a,0x28,0x29,0x4d,0x26,0xe1,0x83,0x83,0x46,0x26,0xe1,0x83,0x83,0x46,0x70,0x26,0x74,0x4d,0x52,0x29,0x2e,0x6a,0x6a,0x29,0x2e,0x2e,0x1,0x0,0x0,0x28,0x29, Step #5: b(\027)()M&\341\203\203Fpj()M&\341\203\203F&\341\203\203Fp&tMR).jj)..\001\000\000() Step #5: artifact_prefix='./'; Test unit written to ./oom-b61679b0d18fffffdb6a83b751f9424c004c0fa6 Step #5: Base64: YigXKSgpTSbhg4NGcGooKU0m4YODRibhg4NGcCZ0TVIpLmpqKS4uAQAAKCk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3095 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 966119707 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5578d850ed60, 0x5578d86f771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5578d86f7720,0x5578da5812c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b61679b0d18fffffdb6a83b751f9424c004c0fa6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3793 processed earlier; will process 7183 files now Step #5: ==111496== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5578cf0512d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5578d568c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5578d566f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5578d566f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5578cf057652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5578cefb842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5578cefb2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5578cf049595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5578d20788c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5578d20788c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5578d20788c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5578d20788c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5578d20788c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5578d20788c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5578d20788c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5578d20788c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5578d20788c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5578d20788c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5578d427d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5578d0fd9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5578d0fe45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5578d0d8fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5578d0d8fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5578d0d90808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5578d0d8f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5578d0d8f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5578d0d8f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5578d567194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5578d567a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5578d5662529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5578d568cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f48855a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5578cefb143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x2b,0x32,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x66,0x7a,0x0,0x0,0xfe,0x1,0x44,0x33,0x4,0x8c,0x0,0x4,0x3,0x32,0x7a,0x0,0x1, Step #5: ID3\004+2ffffffffffffffffffffffz\000\000\376\001D3\004\214\000\004\0032z\000\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-746155c2e959c52975d3a6def8644371bff57c7e Step #5: Base64: SUQzBCsyZmZmZmZmZmZmZmZmZmZmZmZmZmZmZnoAAP4BRDMEjAAEAzJ6AAE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3096 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 966636216 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eac620fd60, 0x55eac63f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eac63f8720,0x55eac82822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/746155c2e959c52975d3a6def8644371bff57c7e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3794 processed earlier; will process 7182 files now Step #5: ==111532== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eabcd522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eac338d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eac337046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eac337038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eabcd58652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eabccb942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eabccb3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eabcd4a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eabfd798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eabfd798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eabfd798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eabfd798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eabfd798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eabfd798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eabfd798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eabfd798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eabfd798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eabfd798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eac1f7e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eabecda578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eabece55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eabea90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eabea90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eabea91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eabea90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eabea90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eabea90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eac337294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eac337b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eac3363529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eac338dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5987595082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eabccb243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0xa,0x25,0x54,0x41,0x47,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0x9,0xa,0x2d,0x2d,0x2d, Step #5: ---\012%TAG\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\011\012--- Step #5: artifact_prefix='./'; Test unit written to ./oom-8c45bb837ddeb53bf041d8d7bd1d821765a22ff3 Step #5: Base64: LS0tCiVUQUcJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQotLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3097 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 967139280 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5591d076cd60, 0x5591d095571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5591d0955720,0x5591d27df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8c45bb837ddeb53bf041d8d7bd1d821765a22ff3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3795 processed earlier; will process 7181 files now Step #5: ==111568== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5591c72af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591cd8ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5591cd8cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5591cd8cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5591c72b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5591c721642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5591c7210c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5591c72a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5591ca2d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5591ca2d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5591ca2d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5591ca2d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5591ca2d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5591ca2d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5591ca2d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5591ca2d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5591ca2d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5591ca2d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5591cc4db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5591c9237578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5591c92425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5591c8fedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5591c8fedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5591c8fee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5591c8fed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5591c8fed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5591c8fed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5591cd8cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591cd8d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5591cd8c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591cd8eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c245ba082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5591c720f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x24,0x30,0x2,0x2,0x0,0x30,0x24,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x31,0x0,0x32,0x32,0x35,0x0, Step #5: 0$0\002\002\0000$1\0001\0001\0001\0001\0001\0001\0001\0001\0001\0001\0001\0001\0001\0001\0001\000225\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-94aabd27bd7d0b045f1c7669a5127dc71587101b Step #5: Base64: MCQwAgIAMCQxADEAMQAxADEAMQAxADEAMQAxADEAMQAxADEAMQAxADIyNQA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3098 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 967672436 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5573979b4d60, 0x557397b9d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557397b9d720,0x557399a272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/94aabd27bd7d0b045f1c7669a5127dc71587101b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3796 processed earlier; will process 7180 files now Step #5: ==111604== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55738e4f72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557394b32728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557394b1546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557394b1538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55738e4fd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55738e45e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55738e458c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55738e4ef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55739151e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55739151e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55739151e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55739151e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55739151e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55739151e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55739151e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55739151e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55739151e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55739151e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55739372345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55739047f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55739048a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557390235d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557390235d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557390236808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557390235944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557390235944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557390235944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557394b1794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557394b207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557394b08529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557394b32fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0cb628f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55738e45743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x3f,0x3a,0x24,0x7c,0x7a,0x7c,0x24,0x7c,0x0,0x7c,0x24,0x7c,0x11,0x7c,0x24,0x28,0x3f,0x3a,0x24,0x7c,0x7a,0x7c,0x24,0x7c,0x0,0x7c,0x24,0x7c,0x11,0x7c,0x24,0x7c,0x7a,0x29,0x7c,0x29,0x7c,0x29,0x7c, Step #5: (?:(?:?:$|z|$|\000|$|\021|$(?:$|z|$|\000|$|\021|$|z)|)|)| Step #5: artifact_prefix='./'; Test unit written to ./oom-efbb54b6e26a23e36927e49b9b56fc118094f02e Step #5: Base64: KD86KD86PzokfHp8JHwAfCR8EXwkKD86JHx6fCR8AHwkfBF8JHx6KXwpfCl8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3099 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 968207821 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bb823b3d60, 0x55bb8259c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bb8259c720,0x55bb844262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/efbb54b6e26a23e36927e49b9b56fc118094f02e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3797 processed earlier; will process 7179 files now Step #5: ==111640== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bb78ef62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bb7f531728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bb7f51446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bb7f51438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb78efc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb78e5d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb78e57c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb78eee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bb7bf1d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bb7bf1d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bb7bf1d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bb7bf1d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bb7bf1d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bb7bf1d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bb7bf1d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bb7bf1d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bb7bf1d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bb7bf1d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bb7e12245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb7ae7e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb7ae895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb7ac34d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb7ac34d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb7ac35808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb7ac34944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb7ac34944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb7ac34944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bb7f51694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bb7f51f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bb7f507529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bb7f531fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a60130082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb78e5643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x20,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xa,0x2d,0xa,0x2d,0xa,0x20,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xa,0x2d,0x9,0x0,0x0,0x0,0xa,0x2d,0xf3, Step #5: --\012-\012-\012-\012-\012-\012-\012 \000\000\000\000\000\000\000\012-\012-\012 \000\000\000\000\000\000\000\012-\011\000\000\000\012-\363 Step #5: artifact_prefix='./'; Test unit written to ./oom-bc9be194cd09cbc4a2a842e4f228d1b3b65f3b90 Step #5: Base64: LS0KLQotCi0KLQotCi0KIAAAAAAAAAAKLQotCiAAAAAAAAAACi0JAAAACi3z Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3100 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 968745204 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55803a23fd60, 0x55803a42871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55803a428720,0x55803c2b22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bc9be194cd09cbc4a2a842e4f228d1b3b65f3b90' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3798 processed earlier; will process 7178 files now Step #5: ==111676== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558030d822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5580373bd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5580373a046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5580373a038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558030d88652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558030ce942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558030ce3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558030d7a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558033da98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558033da98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558033da98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558033da98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558033da98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558033da98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558033da98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558033da98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558033da98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558033da98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558035fae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558032d0a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558032d155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558032ac0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558032ac0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558032ac1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558032ac0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558032ac0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558032ac0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5580373a294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5580373ab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558037393529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5580373bdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6110cc6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558030ce243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa0,0x8c,0x3d,0x0,0x0,0x0,0x2d,0x0,0x0,0x0,0x7f,0x20,0x7f,0x7f,0x0,0x0,0x3f,0xe2,0x80,0xac,0x0,0xe1,0x76,0x30,0x0,0xf3,0xa0,0x81,0xb8,0x0,0x28,0xd,0x0,0x72,0x64,0xe5,0x64,0xb5,0xf3,0xa0,0x81,0x87,0x64,0x64, Step #5: \341\240\214=\000\000\000-\000\000\000\177 \177\177\000\000?\342\200\254\000\341v0\000\363\240\201\270\000(\015\000rd\345d\265\363\240\201\207dd Step #5: artifact_prefix='./'; Test unit written to ./oom-7628ebb7a570478d96df67ef06f1461f1defcf18 Step #5: Base64: 4aCMPQAAAC0AAAB/IH9/AAA/4oCsAOF2MADzoIG4ACgNAHJk5WS186CBh2Rk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3101 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 969260085 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55632cfb8d60, 0x55632d1a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55632d1a1720,0x55632f02b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7628ebb7a570478d96df67ef06f1461f1defcf18' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3799 processed earlier; will process 7177 files now Step #5: #1 pulse cov: 4439 ft: 4440 exec/s: 0 rss: 173Mb Step #5: ==111712== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556323afb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55632a136728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55632a11946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55632a11938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556323b01652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556323a6242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556323a5cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556323af3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556326b228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556326b228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556326b228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556326b228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556326b228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556326b228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556326b228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556326b228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556326b228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556326b228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556328d2745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556325a83578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556325a8e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556325839d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556325839d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55632583a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556325839944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556325839944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556325839944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55632a11b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55632a1247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55632a10c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55632a136fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8e5ecf9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556323a5b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0x43,0x46,0x46,0x20,0xa,0x3d,0x0,0x3b,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0xa,0x3d,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0x0, Step #5: ~=\012=\012=\012=\012=CFF \012=\000;\012=\012=\012=\012=\012=\012=\012=\012=\012\012==\012=\012=\012=\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-aaaf6da81378d22a138dbdd99cfd802e61b2c7de Step #5: Base64: fj0KPQo9Cj0KPUNGRiAKPQA7Cj0KPQo9Cj0KPQo9Cj0KPQoKPT0KPQo9Cj0A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3102 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 969828197 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619fcd8dd60, 0x5619fcf7671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619fcf76720,0x5619fee002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/aaaf6da81378d22a138dbdd99cfd802e61b2c7de' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3801 processed earlier; will process 7175 files now Step #5: ==111748== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5619f38d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619f9f0b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619f9eee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619f9eee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5619f38d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5619f383742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5619f3831c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5619f38c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619f68f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619f68f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619f68f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619f68f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619f68f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619f68f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619f68f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619f68f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619f68f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619f68f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619f8afc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619f5858578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619f58635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619f560ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619f560ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619f560f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619f560e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619f560e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619f560e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619f9ef094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619f9ef97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619f9ee1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619f9f0bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f04063f6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5619f383043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x35,0x36,0x2d,0x24,0x32,0x35,0x24,0x36,0x2d,0x32,0x35,0x36,0x2d,0x24,0x32,0x35,0x36,0x2d,0x24,0x32,0x35,0x33,0x2d,0x24,0x36,0x2d,0x24,0x32,0x35,0x36,0x2d,0x24,0x32,0x24,0x32,0x35,0x37,0x2d,0x24,0x32,0x35,0x36,0x2d, Step #5: $256-$25$6-256-$256-$253-$6-$256-$2$257-$256- Step #5: artifact_prefix='./'; Test unit written to ./oom-f01375d754b84757cc349544bfe8809337d63dd7 Step #5: Base64: JDI1Ni0kMjUkNi0yNTYtJDI1Ni0kMjUzLSQ2LSQyNTYtJDIkMjU3LSQyNTYt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3103 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 970340668 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557425e5ad60, 0x55742604371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557426043720,0x557427ecd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f01375d754b84757cc349544bfe8809337d63dd7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3802 processed earlier; will process 7174 files now Step #5: ==111784== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55741c99d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557422fd8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557422fbb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557422fbb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55741c9a3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55741c90442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55741c8fec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55741c995595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55741f9c48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55741f9c48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55741f9c48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55741f9c48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55741f9c48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55741f9c48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55741f9c48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55741f9c48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55741f9c48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55741f9c48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557421bc945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55741e925578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55741e9305a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55741e6dbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55741e6dbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55741e6dc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55741e6db944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55741e6db944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55741e6db944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557422fbd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557422fc67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557422fae529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557422fd8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f78b4513082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55741c8fd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x29,0x73,0x3a,0x20,0x21,0xd,0x2d,0x20,0x34,0xa,0x2d,0x20,0x6f,0x21,0xa,0x2d,0x20,0x6f,0x20,0x6f,0xa,0x2d,0x20,0x6f,0xa,0x2d,0x20,0x6f,0xa,0x2d,0x20,0x6f,0xa,0x2d,0x20,0x6f,0xa,0x2d,0x20,0x20,0x2d,0x3f, Step #5: \000\000\000)s: !\015- 4\012- o!\012- o o\012- o\012- o\012- o\012- o\012- -? Step #5: artifact_prefix='./'; Test unit written to ./oom-2498c0a6f50f0818b799a1fbde34f4240cb28a4f Step #5: Base64: AAAAKXM6ICENLSA0Ci0gbyEKLSBvIG8KLSBvCi0gbwotIG8KLSBvCi0gIC0/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3104 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 970864317 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5570bb8aad60, 0x5570bba9371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5570bba93720,0x5570bd91d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2498c0a6f50f0818b799a1fbde34f4240cb28a4f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3803 processed earlier; will process 7173 files now Step #5: #1 pulse cov: 3590 ft: 3591 exec/s: 0 rss: 175Mb Step #5: ==111820== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5570b23ed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5570b8a28728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5570b8a0b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5570b8a0b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5570b23f3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5570b235442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5570b234ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5570b23e5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570b54148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570b54148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570b54148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570b54148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570b54148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570b54148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570b54148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570b54148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570b54148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570b54148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5570b761945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5570b4375578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570b43805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5570b412bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5570b412bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5570b412c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5570b412b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5570b412b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5570b412b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5570b8a0d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5570b8a167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5570b89fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5570b8a28fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fafadfaa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5570b234d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x28,0x28,0x28,0x3c,0x28,0x2e,0x0,0x5e,0x4,0x2e,0x4,0x2b,0x24,0x24,0x5e,0x0,0x2e,0x1,0x7d,0x2b,0x7c,0x29,0x7b,0x32,0x7d,0x5,0x29,0x7b,0x32,0x7d,0x5,0x7c,0x29,0x7b,0x34,0x7d,0x29,0x7b,0x35,0x7d,0x29,0x7b,0x33,0x7d, Step #5: ((((<(.\000^\004.\004+$$^\000.\001}+|){2}\005){2}\005|){4}){5}){3} Step #5: artifact_prefix='./'; Test unit written to ./oom-5702f226719dd6431cd5c572e0a098c9d02c2fdd Step #5: Base64: KCgoKDwoLgBeBC4EKyQkXgAuAX0rfCl7Mn0FKXsyfQV8KXs0fSl7NX0pezN9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3105 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 971419075 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55798aa15d60, 0x55798abfe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55798abfe720,0x55798ca882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5702f226719dd6431cd5c572e0a098c9d02c2fdd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3805 processed earlier; will process 7171 files now Step #5: #1 pulse cov: 3674 ft: 3675 exec/s: 0 rss: 171Mb Step #5: ==111856== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5579815582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557987b93728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557987b7646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557987b7638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55798155e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5579814bf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5579814b9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557981550595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55798457f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55798457f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55798457f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55798457f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55798457f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55798457f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55798457f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55798457f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55798457f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55798457f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55798678445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579834e0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579834eb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557983296d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557983296d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557983297808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557983296944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557983296944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557983296944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557987b7894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557987b817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557987b69529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557987b93fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f526e513082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5579814b843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0x90,0x2f,0xd9,0x8c,0xd9,0x98,0x20,0xd9,0x90,0x2f,0xd9,0x8c,0xd9,0x98,0x20,0xd9,0x90,0xd9,0x90,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \331\220/\331\214\331\230 \331\220/\331\214\331\230 \331\220\331\220' Step #5: artifact_prefix='./'; Test unit written to ./oom-7fa7bb9ed2ad839704f083fb82b9a18e2d2842e4 Step #5: Base64: PHN2Zz48dGV4dD7ZkC/ZjNmYINmQL9mM2Zgg2ZDZkCc8L3RleHQ+PC9zdmc+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3106 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 971976314 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5610a95c4d60, 0x5610a97ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5610a97ad720,0x5610ab6372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7fa7bb9ed2ad839704f083fb82b9a18e2d2842e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3807 processed earlier; will process 7169 files now Step #5: ==111892== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5610a01072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5610a6742728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5610a672546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5610a672538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5610a010d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5610a006e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5610a0068c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5610a00ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5610a312e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5610a312e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5610a312e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5610a312e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5610a312e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5610a312e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5610a312e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5610a312e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5610a312e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5610a312e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5610a533345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5610a208f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5610a209a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5610a1e45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5610a1e45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5610a1e46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5610a1e45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5610a1e45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5610a1e45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5610a672794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5610a67307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5610a6718529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5610a6742fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f49f5be7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5610a006743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x54,0x68,0x69,0x73,0x20,0x66,0x69,0x6c,0x65,0x20,0x6d,0x75,0x48,0x69,0x72,0x61,0x67,0x69,0x6e,0x6f,0x20,0x4b,0x61,0x6b,0x75,0x67,0x6f,0x20,0x57,0x36,0x7a,0x74,0x68,0x20,0x42,0x69,0x6e,0x48,0x65,0x78,0x20,0xd0,0x34,0x2e, Step #5: (This file muHiragino Kakugo W6zth BinHex \3204. Step #5: artifact_prefix='./'; Test unit written to ./oom-90f7f0d948894eddd0b7c0c4c4ddbb03f70b754c Step #5: Base64: KFRoaXMgZmlsZSBtdUhpcmFnaW5vIEtha3VnbyBXNnp0aCBCaW5IZXgg0DQu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3107 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 972489832 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5633b4653d60, 0x5633b483c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5633b483c720,0x5633b66c62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/90f7f0d948894eddd0b7c0c4c4ddbb03f70b754c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3808 processed earlier; will process 7168 files now Step #5: #1 pulse cov: 3707 ft: 3708 exec/s: 0 rss: 174Mb Step #5: ==111928== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5633ab1962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5633b17d1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5633b17b446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5633b17b438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5633ab19c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633ab0fd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633ab0f7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5633ab18e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5633ae1bd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5633ae1bd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5633ae1bd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5633ae1bd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5633ae1bd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5633ae1bd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5633ae1bd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5633ae1bd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5633ae1bd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5633ae1bd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5633b03c245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633ad11e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633ad1295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5633aced4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5633aced4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5633aced5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5633aced4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5633aced4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5633aced4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5633b17b694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5633b17bf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5633b17a7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5633b17d1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f01a07c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633ab0f643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x60,0x60,0x6d,0x2f,0x2a,0x60,0x60,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3b,0x60,0x3a,0x60,0x3b,0x60,0x3b,0x60, Step #5: ```m/*```;`;`;`;`;`;`;`;`;`;`;`;`;`;`;`:`;`;` Step #5: artifact_prefix='./'; Test unit written to ./oom-c13dea03f5bd56cc6742d3fa4302466cab557346 Step #5: Base64: YGBgbS8qYGBgO2A7YDtgO2A7YDtgO2A7YDtgO2A7YDtgO2A7YDtgOmA7YDtg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3108 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 973500537 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ede1faad60, 0x55ede219371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ede2193720,0x55ede401d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c13dea03f5bd56cc6742d3fa4302466cab557346' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3810 processed earlier; will process 7166 files now Step #5: ==111964== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55edd8aed2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eddf128728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eddf10b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eddf10b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55edd8af3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55edd8a5442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55edd8a4ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55edd8ae5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eddbb148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eddbb148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eddbb148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eddbb148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eddbb148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eddbb148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eddbb148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eddbb148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eddbb148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eddbb148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55edddd1945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eddaa75578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eddaa805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55edda82bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55edda82bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55edda82c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55edda82b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55edda82b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55edda82b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eddf10d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eddf1167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eddf0fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eddf128fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f482e994082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55edd8a4d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x29,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0x58,0x3a,0xa,0x20,0x20,0x73,0x74,0x65,0x70,0x73,0x3a,0xa,0x20,0x20,0x2d,0x20,0x63,0x6f,0x6e,0x74,0x69,0x6e,0x75,0x65,0x2d,0xd8,0x99,0x2d,0x65,0x72,0x72,0x6f,0x72,0x3a, Step #5: \000\000\000)jobs:\012 X:\012 steps:\012 - continue-\330\231-error: Step #5: artifact_prefix='./'; Test unit written to ./oom-e95f683e5942699ac6a77f6e53b2f71010bda596 Step #5: Base64: AAAAKWpvYnM6CiBYOgogIHN0ZXBzOgogIC0gY29udGludWUt2JktZXJyb3I6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3109 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 974023078 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d11208ed60, 0x55d11227771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d112277720,0x55d1141012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e95f683e5942699ac6a77f6e53b2f71010bda596' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3811 processed earlier; will process 7165 files now Step #5: ==112000== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d108bd12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d10f20c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d10f1ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d10f1ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d108bd7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d108b3842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d108b32c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d108bc9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d10bbf88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d10bbf88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d10bbf88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d10bbf88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d10bbf88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d10bbf88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d10bbf88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d10bbf88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d10bbf88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d10bbf88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d10ddfd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d10ab59578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d10ab645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d10a90fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d10a90fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d10a910808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d10a90f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d10a90f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d10a90f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d10f1f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d10f1fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d10f1e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d10f20cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3bd86e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d108b3143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x24,0x75,0x0,0x0,0x0,0x0,0x0,0xe2,0x80,0x82,0x0,0x0,0x0,0x0,0x0,0x0,0xf3,0xa0,0x81,0x98,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xe1,0xa0,0x8e,0x0,0x0,0x44,0x11,0x27,0x0,0x44,0x11,0x24, Step #5: \000$u\000\000\000\000\000\342\200\202\000\000\000\000\000\000\363\240\201\230\000\000\000\000\000\000\000\000\000\000\000\000\341\240\216\000\000D\021'\000D\021$ Step #5: artifact_prefix='./'; Test unit written to ./oom-23b0774bf16442ac4d173ca42c706e757de51b7d Step #5: Base64: ACR1AAAAAADigIIAAAAAAADzoIGYAAAAAAAAAAAAAAAA4aCOAABEEScARBEk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3110 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 974541050 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562735ce8d60, 0x562735ed171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562735ed1720,0x562737d5b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/23b0774bf16442ac4d173ca42c706e757de51b7d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3812 processed earlier; will process 7164 files now Step #5: ==112036== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56272c82b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562732e66728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562732e4946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562732e4938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56272c831652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56272c79242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56272c78cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56272c823595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56272f8528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56272f8528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56272f8528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56272f8528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56272f8528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56272f8528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56272f8528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56272f8528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56272f8528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56272f8528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562731a5745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56272e7b3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56272e7be5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56272e569d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56272e569d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56272e56a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56272e569944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56272e569944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56272e569944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562732e4b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562732e547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562732e3c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562732e66fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7a05397082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56272c78b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3f,0x61,0x0,0x70,0x43,0x6f,0x6e,0x74,0x45,0x6e,0x74,0x2d,0x54,0x79,0x70,0x65,0x3a,0x67,0x3b,0x63,0x2a,0x21,0x3d,0x71,0x3b,0x2a,0x66,0x3d,0x63,0x3b,0x6f,0x2a,0x21,0x3d,0x71,0x3b,0x64,0x2a,0x62,0x3d,0x63,0x31,0x79,0x2a,0x21, Step #5: ?a\000pContEnt-Type:g;c*!=q;*f=c;o*!=q;d*b=c1y*! Step #5: artifact_prefix='./'; Test unit written to ./oom-d611e039795f942da7d0f24436630b5f8b1a0d91 Step #5: Base64: P2EAcENvbnRFbnQtVHlwZTpnO2MqIT1xOypmPWM7byohPXE7ZCpiPWMxeSoh Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3111 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 975061973 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5615ea6e5d60, 0x5615ea8ce71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5615ea8ce720,0x5615ec7582c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d611e039795f942da7d0f24436630b5f8b1a0d91' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3813 processed earlier; will process 7163 files now Step #5: #1 pulse cov: 3776 ft: 3777 exec/s: 0 rss: 171Mb Step #5: #2 pulse cov: 4038 ft: 4329 exec/s: 0 rss: 172Mb Step #5: ==112072== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615e12282d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5615e7863728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5615e784646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5615e784638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5615e122e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615e118f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615e1189c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5615e1220595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615e424f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615e424f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615e424f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615e424f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615e424f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615e424f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615e424f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615e424f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615e424f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615e424f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5615e645445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5615e31b0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615e31bb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615e2f66d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615e2f66d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615e2f67808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615e2f66944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615e2f66944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615e2f66944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5615e784894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5615e78517b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5615e7839529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5615e7863fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f09a2861082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615e118843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x2d,0xcc,0xad,0x2e,0x2a,0xcc,0xb8,0x2e,0xc4,0xb0,0x2e,0x6a,0xcc,0xb8,0x2e,0x2a,0xcc,0xae,0x2e,0x33,0xcc,0xa6,0x2e,0x2b,0xcc,0xb8,0x2e,0x2a,0xcc,0x8e,0x2e,0x30,0xcc,0xb8,0x2e,0x2b,0xcc,0xb8,0x2e,0x2a,0xcc,0xb8, Step #5: ws:-\314\255.*\314\270.\304\260.j\314\270.*\314\256.3\314\246.+\314\270.*\314\216.0\314\270.+\314\270.*\314\270 Step #5: artifact_prefix='./'; Test unit written to ./oom-427957d6ae6c7af3e97a841a43b498b47e164133 Step #5: Base64: d3M6LcytLirMuC7EsC5qzLguKsyuLjPMpi4rzLguKsyOLjDMuC4rzLguKsy4 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3112 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 975656195 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d99ca39d60, 0x55d99cc2271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d99cc22720,0x55d99eaac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/427957d6ae6c7af3e97a841a43b498b47e164133' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3816 processed earlier; will process 7160 files now Step #5: ==112108== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d99357c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d999bb7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d999b9a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d999b9a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d993582652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d9934e342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d9934ddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d993574595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d9965a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d9965a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d9965a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d9965a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d9965a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d9965a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d9965a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d9965a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d9965a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d9965a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d9987a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d995504578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d99550f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d9952bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d9952bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d9952bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d9952ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d9952ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d9952ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d999b9c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d999ba57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d999b8d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d999bb7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f52068ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d9934dc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x3c,0x33,0x3e,0x5c,0x6b,0x6b, Step #5: \\k<3>\\k<3>\\k\\k<3>\\k<3>\\k<3>\\k<3>\\k<3>\\k<3>\\kk Step #5: artifact_prefix='./'; Test unit written to ./oom-890bb4812bdf2d38d88e1970dbf0f28b73b14d82 Step #5: Base64: XGs8Mz5cazwzPlxrXGs8Mz5cazwzPlxrPDM+XGs8Mz5cazwzPlxrPDM+XGtr Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3113 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 976185468 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561c8e0a4d60, 0x561c8e28d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561c8e28d720,0x561c901172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/890bb4812bdf2d38d88e1970dbf0f28b73b14d82' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3817 processed earlier; will process 7159 files now Step #5: ==112144== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561c84be72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561c8b222728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561c8b20546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561c8b20538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561c84bed652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561c84b4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561c84b48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561c84bdf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561c87c0e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561c87c0e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561c87c0e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561c87c0e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561c87c0e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561c87c0e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561c87c0e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561c87c0e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561c87c0e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561c87c0e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561c89e1345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561c86b6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561c86b7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561c86925d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561c86925d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561c86926808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561c86925944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561c86925944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561c86925944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561c8b20794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561c8b2107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561c8b1f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561c8b222fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9bc44a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561c84b4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x29,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0x38,0x3a,0xa,0x20,0x20,0x73,0x74,0x65,0x70,0x73,0x3a,0xa,0x20,0x20,0x2d,0x20,0x77,0x6f,0x72,0x6b,0x69,0x6e,0x67,0x2d,0x64,0x69,0xcd,0x86,0x20,0x6f,0x32,0x74,0x36,0x3a, Step #5: \000\000\000)jobs:\012 8:\012 steps:\012 - working-di\315\206 o2t6: Step #5: artifact_prefix='./'; Test unit written to ./oom-62536ff287a91b6dec95b16753872b9bcb83c23c Step #5: Base64: AAAAKWpvYnM6CiA4OgogIHN0ZXBzOgogIC0gd29ya2luZy1kac2GIG8ydDY6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3114 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 976714504 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564e331a7d60, 0x564e3339071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564e33390720,0x564e3521a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/62536ff287a91b6dec95b16753872b9bcb83c23c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3818 processed earlier; will process 7158 files now Step #5: #1 pulse cov: 3456 ft: 3457 exec/s: 0 rss: 173Mb Step #5: ==112180== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564e29cea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564e30325728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564e3030846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564e3030838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564e29cf0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564e29c5142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564e29c4bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564e29ce2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564e2cd118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564e2cd118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564e2cd118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564e2cd118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564e2cd118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564e2cd118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564e2cd118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564e2cd118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564e2cd118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564e2cd118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564e2ef1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564e2bc72578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564e2bc7d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564e2ba28d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564e2ba28d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564e2ba29808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564e2ba28944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564e2ba28944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564e2ba28944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564e3030a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564e303137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564e302fb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564e30325fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7377824082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564e29c4a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x72,0x52,0x41,0x51,0x51,0x66,0x69,0x64,0x3d,0x42,0x42,0xa,0x3d,0x20,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x2a,0x24,0x0,0x0,0x0,0x20,0x0,0x0,0x60,0x60,0x2a,0x2a,0x5b,0x5b,0x5b,0x6f,0x40,0x43,0xa,0x5b,0x5b,0x24, Step #5: rRAQQfid=BB\012= **********$\000\000\000 \000\000``**[[[o@C\012[[$ Step #5: artifact_prefix='./'; Test unit written to ./oom-8c500a5fa08a7f6b42e03fcfc9ff20844e7005f8 Step #5: Base64: clJBUVFmaWQ9QkIKPSAqKioqKioqKioqJAAAACAAAGBgKipbW1tvQEMKW1sk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3115 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 977280650 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a8e5f56d60, 0x55a8e613f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a8e613f720,0x55a8e7fc92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8c500a5fa08a7f6b42e03fcfc9ff20844e7005f8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3820 processed earlier; will process 7156 files now Step #5: ==112216== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a8dca992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a8e30d4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a8e30b746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a8e30b738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a8dca9f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a8dca0042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a8dc9fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a8dca91595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a8dfac08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a8dfac08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a8dfac08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a8dfac08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a8dfac08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a8dfac08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a8dfac08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a8dfac08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a8dfac08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a8dfac08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a8e1cc545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a8dea21578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a8dea2c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a8de7d7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a8de7d7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a8de7d8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a8de7d7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a8de7d7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a8de7d7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a8e30b994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a8e30c27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a8e30aa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a8e30d4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa3da9b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a8dc9f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0x2f,0xa,0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0xf3,0xa0,0x81,0xba,0x60,0xa,0xa,0x2f,0xa,0x2f,0xa,0x60,0x60,0x20,0x20,0x20,0x60,0xa,0x9, Step #5: `\342\200\210-\000`\012\363\240\201\272/\012`\342\200\210-\000`\012\363\240\201\272\363\240\201\272`\012\012/\012/\012`` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-d11d812dcfbdde17df890b6341a6166bf8b9fc9c Step #5: Base64: YOKAiC0AYArzoIG6Lwpg4oCILQBgCvOggbrzoIG6YAoKLwovCmBgICAgYAoJ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3116 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 977938729 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557220a0fd60, 0x557220bf871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557220bf8720,0x557222a822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d11d812dcfbdde17df890b6341a6166bf8b9fc9c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3821 processed earlier; will process 7155 files now Step #5: #1 pulse cov: 3726 ft: 3727 exec/s: 0 rss: 171Mb Step #5: ==112252== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5572175522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55721db8d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55721db7046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55721db7038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557217558652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5572174b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5572174b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55721754a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55721a5798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55721a5798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55721a5798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55721a5798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55721a5798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55721a5798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55721a5798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55721a5798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55721a5798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55721a5798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55721c77e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5572194da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5572194e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557219290d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557219290d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557219291808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557219290944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557219290944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557219290944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55721db7294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55721db7b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55721db63529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55721db8dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f17d64c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5572174b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x49,0x53,0x4f,0x2d,0x38,0x38,0x35,0x39,0x2d,0x31,0x22,0x3f,0x3e,0x64,0x49,0x3d,0x22,0x67,0x53,0x4f,0x54,0x3e,0x3e,0x5b,0x53,0x56,0x3e,0x31,0x5d, Step #5: dI=\"gSOT>>[SV>1] Step #5: artifact_prefix='./'; Test unit written to ./oom-be33e7ec484fc5d77396c84237e528ad1521a8da Step #5: Base64: PD94bWwgZW5jb2Rpbmc9IklTTy04ODU5LTEiPz5kST0iZ1NPVD4+W1NWPjFd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3117 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 978513998 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a275ea9d60, 0x55a27609271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a276092720,0x55a277f1c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be33e7ec484fc5d77396c84237e528ad1521a8da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3823 processed earlier; will process 7153 files now Step #5: ==112288== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a26c9ec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a273027728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a27300a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a27300a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a26c9f2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a26c95342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a26c94dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a26c9e4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a26fa138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a26fa138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a26fa138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a26fa138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a26fa138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a26fa138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a26fa138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a26fa138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a26fa138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a26fa138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a271c1845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a26e974578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a26e97f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a26e72ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a26e72ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a26e72b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a26e72a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a26e72a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a26e72a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a27300c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2730157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a272ffd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a273027fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e60317082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a26c94c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x11,0xcc,0xb0,0x4e,0x6f,0x0,0x0,0xcc,0x9c,0x0,0x0,0x0,0x0,0xcc,0x9c,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xcc,0x9c,0x0,0xcc,0x9c,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xcc,0x9c,0x0,0xcc,0x9c,0x0,0xdb, Step #5: \000\000\021\314\260No\000\000\314\234\000\000\000\000\314\234\000\000\000\000\000\000\000\000\000\314\234\000\314\234\000\000\000\000\000\000\000\314\234\000\314\234\000\333 Step #5: artifact_prefix='./'; Test unit written to ./oom-291dd3baed467436619c04c8500954233592dfbb Step #5: Base64: AAARzLBObwAAzJwAAAAAzJwAAAAAAAAAAADMnADMnAAAAAAAAADMnADMnADb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3118 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 979036642 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b75629dd60, 0x55b75648671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b756486720,0x55b7583102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/291dd3baed467436619c04c8500954233592dfbb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3824 processed earlier; will process 7152 files now Step #5: ==112324== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b74cde02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b75341b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7533fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7533fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b74cde6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b74cd4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b74cd41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b74cdd8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b74fe078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b74fe078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b74fe078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b74fe078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b74fe078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b74fe078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b74fe078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b74fe078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b74fe078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b74fe078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b75200c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b74ed68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b74ed735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b74eb1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b74eb1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b74eb1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b74eb1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b74eb1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b74eb1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b75340094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7534097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7533f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b75341bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7268ff7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b74cd4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x76,0x21,0x39,0xa,0x0,0x7d,0x7d,0x7d,0x7d,0xd7,0xaf,0x69,0x66,0x7d,0xd7,0xaf,0x2d,0x0,0x7e,0x73,0x74,0x39,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0xd7,0xa3,0x1,0xd7,0xa3,0x2d,0x0, Step #5: #v!9\012\000}}}}\327\257if}\327\257-\000~st9>>>>>>>>>>>>>>>\327\243\001\327\243-\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-c797fc8baea908074aef08d2d151923ad19bbaf2 Step #5: Base64: I3YhOQoAfX19fdevaWZ9168tAH5zdDk+Pj4+Pj4+Pj4+Pj4+Pj7XowHXoy0A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3119 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 979576811 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5609944a2d60, 0x56099468b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56099468b720,0x5609965152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c797fc8baea908074aef08d2d151923ad19bbaf2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3825 processed earlier; will process 7151 files now Step #5: #1 pulse cov: 3459 ft: 3460 exec/s: 0 rss: 171Mb Step #5: ==112360== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56098afe52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560991620728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56099160346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56099160338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56098afeb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56098af4c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56098af46c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56098afdd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56098e00c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56098e00c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56098e00c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56098e00c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56098e00c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56098e00c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56098e00c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56098e00c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56098e00c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56098e00c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56099021145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56098cf6d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56098cf785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56098cd23d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56098cd23d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56098cd24808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56098cd23944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56098cd23944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56098cd23944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56099160594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56099160e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5609915f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560991620fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f49d632b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56098af4543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7,0x2e,0x31,0xd,0x24,0xa,0x2e,0x7b,0xd,0x1,0xa,0x2e,0x7b,0xd,0x2d,0xa,0x2e,0x7b,0xd,0x3,0xa,0x2e,0x7b,0xd,0x2d,0xa,0x2e,0x63,0xd,0x2a,0xa,0x2e,0x42,0xd,0x24,0xa,0x2e,0x73,0x9,0x69,0xde,0xad,0xbe,0xef,0xef, Step #5: \007.1\015$\012.{\015\001\012.{\015-\012.{\015\003\012.{\015-\012.c\015*\012.B\015$\012.s\011i\336\255\276\357\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-0e7372d4a2fd5c8253bcfeafcb4c451c8ce5e021 Step #5: Base64: By4xDSQKLnsNAQouew0tCi57DQMKLnsNLQouYw0qCi5CDSQKLnMJad6tvu/v Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3120 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 980153059 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560c4b209d60, 0x560c4b3f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560c4b3f2720,0x560c4d27c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0e7372d4a2fd5c8253bcfeafcb4c451c8ce5e021' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3827 processed earlier; will process 7149 files now Step #5: ==112396== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c41d4c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560c48387728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560c4836a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560c4836a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c41d52652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c41cb342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c41cadc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c41d44595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560c44d738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560c44d738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560c44d738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560c44d738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560c44d738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560c44d738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560c44d738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560c44d738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560c44d738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560c44d738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560c46f7845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560c43cd4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560c43cdf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560c43a8ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560c43a8ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560c43a8b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560c43a8a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560c43a8a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560c43a8a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560c4836c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560c483757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560c4835d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560c48387fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f63b24082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c41cac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe4,0x8d,0xaa,0xef,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x8c,0xaa,0xed,0x93,0xaa,0xed,0x8f,0xaa,0xed,0x89,0xaa,0xed,0x89,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa,0xed,0x8d,0xaa, Step #5: \344\215\252\357\215\252\355\215\252\355\215\252\355\214\252\355\223\252\355\217\252\355\211\252\355\211\252\355\215\252\355\215\252\355\215\252\355\215\252\355\215\252\355\215\252 Step #5: artifact_prefix='./'; Test unit written to ./oom-1d55827315b51cc7f659af4848c17f7ffa1e86cc Step #5: Base64: 5I2q742q7Y2q7Y2q7Yyq7ZOq7Y+q7Ymq7Ymq7Y2q7Y2q7Y2q7Y2q7Y2q7Y2q Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3121 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 980677456 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f9c1ec4d60, 0x55f9c20ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f9c20ad720,0x55f9c3f372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1d55827315b51cc7f659af4848c17f7ffa1e86cc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3828 processed earlier; will process 7148 files now Step #5: ==112432== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f9b8a072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f9bf042728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f9bf02546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f9bf02538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f9b8a0d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f9b896e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f9b8968c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f9b89ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9bba2e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9bba2e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9bba2e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9bba2e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9bba2e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9bba2e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9bba2e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9bba2e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9bba2e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9bba2e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f9bdc3345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f9ba98f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f9ba99a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f9ba745d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f9ba745d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f9ba746808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f9ba745944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f9ba745944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f9ba745944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f9bf02794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f9bf0307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f9bf018529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f9bf042fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce190d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f9b896743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x32,0x2e,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x73,0x20,0x37,0x20,0x30,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x32,0x7f,0x7f,0x6f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x24, Step #5: $\177]2.23/\020./s 7 0 7 0 2\020 2\177\177o\177\177\177\177\177\177\177\177\177\177\177\177\177o\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-5b9fef0a634d020dc49dbcdbaa993f53315a784d Step #5: Base64: JH9dMi4yMy8QLi9zIDcgMCA3IDAgMhAgMn9/b39/f39/f39/f39/f39vAABDJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3122 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 981194272 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f42b136d60, 0x55f42b31f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f42b31f720,0x55f42d1a92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5b9fef0a634d020dc49dbcdbaa993f53315a784d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3829 processed earlier; will process 7147 files now Step #5: ==112468== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f421c792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f4282b4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f42829746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f42829738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f421c7f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f421be042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f421bdac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f421c71595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f424ca08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f424ca08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f424ca08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f424ca08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f424ca08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f424ca08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f424ca08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f424ca08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f424ca08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f424ca08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f426ea545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f423c01578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f423c0c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f4239b7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f4239b7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f4239b8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f4239b7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f4239b7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f4239b7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f42829994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f4282a27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f42828a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f4282b4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5cb6354082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f421bd943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4a,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0xe9,0x85,0x9f,0x47,0x45,0xe1,0x85,0x9f,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x20,0x2d,0x2d,0x5,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x47,0x64,0xa,0x2d,0xa,0xf3,0xa0,0x81,0xb3,0x66, Step #5: J-----BE\351\205\237GE\341\205\237GIN -- --\005---------\012Gd\012-\012\363\240\201\263f Step #5: artifact_prefix='./'; Test unit written to ./oom-738a137f71c9b452586a50a6ad1ad31d5e3c7986 Step #5: Base64: Si0tLS0tQkXphZ9HReGFn0dJTiAtLSAtLQUtLS0tLS0tLS0KR2QKLQrzoIGzZg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3123 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 981715127 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f7bf698d60, 0x55f7bf88171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f7bf881720,0x55f7c170b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/738a137f71c9b452586a50a6ad1ad31d5e3c7986' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3830 processed earlier; will process 7146 files now Step #5: ==112504== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7b61db2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7bc816728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7bc7f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7bc7f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f7b61e1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7b614242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7b613cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f7b61d3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7b92028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7b92028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7b92028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7b92028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7b92028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7b92028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7b92028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7b92028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7b92028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7b92028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7bb40745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f7b8163578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7b816e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7b7f19d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7b7f19d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7b7f1a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7b7f19944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7b7f19944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7b7f19944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7bc7fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7bc8047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7bc7ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7bc816fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f776151a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7b613b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0, Step #5: \000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-4f479e533cc5ea705aa287a79fb1d84652738739 Step #5: Base64: AEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3124 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 982235895 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a6d15f3d60, 0x55a6d17dc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a6d17dc720,0x55a6d36662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f479e533cc5ea705aa287a79fb1d84652738739' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3831 processed earlier; will process 7145 files now Step #5: ==112540== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a6c81362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a6ce771728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a6ce75446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a6ce75438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a6c813c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a6c809d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a6c8097c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a6c812e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a6cb15d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a6cb15d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a6cb15d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a6cb15d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a6cb15d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a6cb15d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a6cb15d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a6cb15d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a6cb15d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a6cb15d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a6cd36245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a6ca0be578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a6ca0c95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a6c9e74d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a6c9e74d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a6c9e75808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a6c9e74944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a6c9e74944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a6c9e74944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a6ce75694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a6ce75f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a6ce747529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a6ce771fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f89c78e5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a6c809643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21,0x69,0x66,0x31,0x21,0x69,0x66,0x31,0x29,0x30,0x29,0x29,0x29,0xd7,0xa9,0x28,0x30,0x9,0x37,0x29,0x29,0x30,0x9,0x37,0x29,0x29,0x74,0x29,0x30,0x29,0x29,0x29,0xd7,0xa9,0x28,0x30,0x9,0x37,0x29,0x29,0x30,0x9,0x37,0x29,0x29,0x74, Step #5: !if1!if1)0)))\327\251(0\0117))0\0117))t)0)))\327\251(0\0117))0\0117))t Step #5: artifact_prefix='./'; Test unit written to ./oom-e70dd44a1431e840eccd3a0ef4d2d03e379dcd0a Step #5: Base64: IWlmMSFpZjEpMCkpKdepKDAJNykpMAk3KSl0KTApKSnXqSgwCTcpKTAJNykpdA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3125 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 982757144 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fcb1821d60, 0x55fcb1a0a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fcb1a0a720,0x55fcb38942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e70dd44a1431e840eccd3a0ef4d2d03e379dcd0a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3832 processed earlier; will process 7144 files now Step #5: #1 pulse cov: 3619 ft: 3620 exec/s: 0 rss: 174Mb Step #5: ==112576== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fca83642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fcae99f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fcae98246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fcae98238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fca836a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fca82cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fca82c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fca835c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fcab38b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fcab38b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fcab38b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fcab38b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fcab38b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fcab38b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fcab38b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fcab38b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fcab38b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fcab38b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fcad59045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fcaa2ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fcaa2f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fcaa0a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fcaa0a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fcaa0a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fcaa0a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fcaa0a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fcaa0a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fcae98494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fcae98d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fcae975529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fcae99ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f29c034e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fca82c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xae,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x0,0x4f,0x0,0x96,0xc8, Step #5: \326\256\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\000O\000\226\310 Step #5: artifact_prefix='./'; Test unit written to ./oom-d15c48420ff061f2f3deba31402f396eb7a1b6af Step #5: Base64: 1q4AAAAAAAAAAAAAAAAAAAAAACIiIiIiIiIiIiIiIiIiIiIiIiIiIiIATwCWyA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3126 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 983319916 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c17882ed60, 0x55c178a1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c178a17720,0x55c17a8a12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d15c48420ff061f2f3deba31402f396eb7a1b6af' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3834 processed earlier; will process 7142 files now Step #5: ==112612== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c16f3712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c1759ac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c17598f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c17598f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c16f377652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c16f2d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c16f2d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c16f369595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c1723988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c1723988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c1723988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c1723988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c1723988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c1723988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c1723988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c1723988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c1723988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c1723988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c17459d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c1712f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c1713045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c1710afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c1710afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c1710b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c1710af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c1710af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c1710af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c17599194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c17599a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c175982529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c1759acfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f319f436082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c16f2d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x3f,0x1a,0xa,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56,0x56, Step #5: -?\032\012VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV Step #5: artifact_prefix='./'; Test unit written to ./oom-1537c861bc34f15fa3283cf101f0fc15da901f9c Step #5: Base64: LT8aClZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3127 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 983844414 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556fbc867d60, 0x556fbca5071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556fbca50720,0x556fbe8da2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1537c861bc34f15fa3283cf101f0fc15da901f9c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3835 processed earlier; will process 7141 files now Step #5: ==112648== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556fb33aa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556fb99e5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556fb99c846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556fb99c838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556fb33b0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556fb331142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556fb330bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556fb33a2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556fb63d18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556fb63d18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556fb63d18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556fb63d18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556fb63d18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556fb63d18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556fb63d18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556fb63d18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556fb63d18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556fb63d18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556fb85d645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556fb5332578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556fb533d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556fb50e8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556fb50e8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556fb50e9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556fb50e8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556fb50e8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556fb50e8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556fb99ca94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556fb99d37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556fb99bb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556fb99e5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce15907082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556fb330a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x32,0x2e,0x32,0x33,0x35,0x10,0x2e,0x2f,0x73,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x32,0x10,0x2e,0x2f,0x2d,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x58,0x7e,0x7f,0x7f,0x7f,0x7f,0x6e,0x0,0x0,0x43,0x24, Step #5: $\177]2.235\020./s 7 0 2\020 2\020./-\177\177\177\177\177\177\177\177\177\177X~\177\177\177\177n\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-62ee1de0e9a6d02a9dbe5b5763a700298de1efa9 Step #5: Base64: JH9dMi4yMzUQLi9zIDcgMCAyECAyEC4vLX9/f39/f39/f39Yfn9/f39uAABDJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3128 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 984365617 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5555a4966d60, 0x5555a4b4f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5555a4b4f720,0x5555a69d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/62ee1de0e9a6d02a9dbe5b5763a700298de1efa9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3836 processed earlier; will process 7140 files now Step #5: ==112684== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55559b4a92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5555a1ae4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5555a1ac746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5555a1ac738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55559b4af652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55559b41042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55559b40ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55559b4a1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55559e4d08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55559e4d08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55559e4d08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55559e4d08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55559e4d08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55559e4d08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55559e4d08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55559e4d08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55559e4d08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55559e4d08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5555a06d545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55559d431578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55559d43c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55559d1e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55559d1e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55559d1e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55559d1e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55559d1e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55559d1e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5555a1ac994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5555a1ad27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5555a1aba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5555a1ae4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0bfb2ae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55559b40943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0xa,0x3a,0xb,0x3a,0xb,0x78,0x2e,0xa,0xe,0x6e,0x78,0xa,0x2e,0xa,0x22,0x74,0x78,0x6e,0x62,0x60,0x66,0x2e,0xd,0x60,0x66,0x78,0x2e,0xa,0xe,0x6e,0x78,0xa,0x2e,0xa,0x22,0x74,0x78,0x6e,0x62,0x60,0x66,0xa,0xd,0x60,0x66, Step #5: 2\012:\013:\013x.\012\016nx\012.\012\"txnb`f.\015`fx.\012\016nx\012.\012\"txnb`f\012\015`f Step #5: artifact_prefix='./'; Test unit written to ./oom-4bbfc1295b1cfd57bb13edbeb81295ab1407215c Step #5: Base64: Mgo6CzoLeC4KDm54Ci4KInR4bmJgZi4NYGZ4LgoObngKLgoidHhuYmBmCg1gZg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3129 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 985011031 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bac73cfd60, 0x55bac75b871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bac75b8720,0x55bac94422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4bbfc1295b1cfd57bb13edbeb81295ab1407215c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3837 processed earlier; will process 7139 files now Step #5: ==112720== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55babdf122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bac454d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bac453046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bac453038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55babdf18652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55babde7942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55babde73c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55babdf0a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bac0f398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bac0f398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bac0f398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bac0f398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bac0f398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bac0f398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bac0f398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bac0f398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bac0f398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bac0f398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bac313e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55babfe9a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55babfea55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55babfc50d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55babfc50d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55babfc51808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55babfc50944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55babfc50944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55babfc50944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bac453294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bac453b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bac4523529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bac454dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa134650082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55babde7243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x80,0x32,0x31,0x34,0x37,0x34,0x38,0x25,0x36,0x5b,0x35,0x30,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x3f,0x0,0x8,0x0,0x0,0x0,0x2d,0x32, Step #5: \333\200214748%6[50\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000?\000\010\000\000\000-2 Step #5: artifact_prefix='./'; Test unit written to ./oom-bd8f3dbd6210a216c5c5c94007eeb2e6dce0069e Step #5: Base64: 24AyMTQ3NDglNls1MAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAA/AAgAAAAtMg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3130 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 985537248 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557a2f9dfd60, 0x557a2fbc871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557a2fbc8720,0x557a31a522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bd8f3dbd6210a216c5c5c94007eeb2e6dce0069e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3838 processed earlier; will process 7138 files now Step #5: ==112756== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557a265222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557a2cb5d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557a2cb4046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557a2cb4038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557a26528652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557a2648942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557a26483c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557a2651a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557a295498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557a295498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557a295498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557a295498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557a295498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557a295498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557a295498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557a295498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557a295498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557a295498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557a2b74e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557a284aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557a284b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557a28260d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557a28260d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557a28261808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557a28260944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557a28260944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557a28260944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557a2cb4294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557a2cb4b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557a2cb33529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557a2cb5dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f922787f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557a2648243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x73,0x3a,0xe1,0xa0,0xb9,0xe2,0x80,0x8c,0xe1,0xa0,0xb9,0xe2,0x80,0x8c,0xe1,0x80,0xb9,0xe1,0xa0,0xb9,0xe2,0x80,0x8c,0xe1,0x80,0xb9,0xe1,0xa0,0xb9,0xe2,0x80,0x8c,0xe1,0xa0,0xb9,0xe2,0x80,0x8c,0xe1,0x80,0xbd,0xe1,0xa0,0xb9, Step #5: \016ws:\341\240\271\342\200\214\341\240\271\342\200\214\341\200\271\341\240\271\342\200\214\341\200\271\341\240\271\342\200\214\341\240\271\342\200\214\341\200\275\341\240\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-92d20f720c2a33820c0c227fdc32b9ecdd599270 Step #5: Base64: DndzOuGgueKAjOGgueKAjOGAueGgueKAjOGAueGgueKAjOGgueKAjOGAveGguQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3131 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 986071126 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5642179b4d60, 0x564217b9d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564217b9d720,0x564219a272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92d20f720c2a33820c0c227fdc32b9ecdd599270' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3839 processed earlier; will process 7137 files now Step #5: ==112792== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56420e4f72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564214b32728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564214b1546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564214b1538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56420e4fd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56420e45e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56420e458c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56420e4ef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56421151e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56421151e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56421151e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56421151e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56421151e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56421151e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56421151e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56421151e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56421151e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56421151e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56421372345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56421047f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56421048a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564210235d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564210235d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564210236808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564210235944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564210235944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564210235944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564214b1794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564214b207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564214b08529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564214b32fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f239cd32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56420e45743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27,0x27,0x5b,0x27, Step #5: ''[''[''[''[''[''[''[''[''[''[''[''[''[''[''[' Step #5: artifact_prefix='./'; Test unit written to ./oom-675b346cebada086f96e2b5186bc031b717d1bbd Step #5: Base64: JydbJydbJydbJydbJydbJydbJydbJydbJydbJydbJydbJydbJydbJydbJydbJw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3132 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 986589195 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561e1f76fd60, 0x561e1f95871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561e1f958720,0x561e217e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/675b346cebada086f96e2b5186bc031b717d1bbd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3840 processed earlier; will process 7136 files now Step #5: #1 pulse cov: 3981 ft: 3982 exec/s: 0 rss: 171Mb Step #5: ==112828== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e162b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561e1c8ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561e1c8d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561e1c8d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e162b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e1621942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e16213c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e162aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561e192d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561e192d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561e192d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561e192d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561e192d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561e192d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561e192d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561e192d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561e192d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561e192d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561e1b4de45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561e1823a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561e182455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561e17ff0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561e17ff0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561e17ff1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561e17ff0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561e17ff0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561e17ff0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561e1c8d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561e1c8db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561e1c8c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561e1c8edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff2ee71e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e1621243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2b,0xa,0x9,0x9,0x0,0x0,0x0,0x9,0xa,0x9,0x3d,0xa,0x3d,0x49,0x2b,0xa,0x9,0x9,0x0,0x0,0x0,0x9,0xa,0x9,0x3d,0xa,0x3d,0x49,0x0,0x3b,0x27,0x2d,0x2d,0x2b,0x7e,0xeb,0x7e,0x0,0x3b,0x27,0x2d,0x2d,0x2b,0x7e,0xeb,0x7e, Step #5: +\012\011\011\000\000\000\011\012\011=\012=I+\012\011\011\000\000\000\011\012\011=\012=I\000;'--+~\353~\000;'--+~\353~ Step #5: artifact_prefix='./'; Test unit written to ./oom-f2a62ba7880a47828abd050a9827198aeb8b8092 Step #5: Base64: KwoJCQAAAAkKCT0KPUkrCgkJAAAACQoJPQo9SQA7Jy0tK37rfgA7Jy0tK37rfg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3133 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 987149672 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b5979f3d60, 0x55b597bdc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b597bdc720,0x55b599a662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f2a62ba7880a47828abd050a9827198aeb8b8092' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3842 processed earlier; will process 7134 files now Step #5: #1 pulse cov: 3918 ft: 3919 exec/s: 0 rss: 172Mb Step #5: ==112864== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b58e5362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b594b71728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b594b5446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b594b5438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b58e53c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b58e49d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b58e497c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b58e52e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b59155d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b59155d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b59155d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b59155d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b59155d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b59155d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b59155d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b59155d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b59155d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b59155d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b59376245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b5904be578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b5904c95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b590274d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b590274d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b590275808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b590274944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b590274944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b590274944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b594b5694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b594b5f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b594b47529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b594b71fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb1abc4a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b58e49643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x32,0x2d,0x3d,0x3c,0x27,0x27,0x6f,0x2f,0x27,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x27,0x27,0x27,0xf3,0xa0,0x81,0xa5,0x32,0x2d,0x27,0x27,0x21,0x27,0x27,0x3d,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $22-=<''o/''''/''''''\363\240\201\2452-''!''=''''''''.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-11ef5f71d2a7062f0095011aad8eee69fac87130 Step #5: Base64: JDIyLT08JydvLycnJycvJycnJycn86CBpTItJychJyc9JycnJycnJycuJyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3134 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 987730484 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b93ea81d60, 0x55b93ec6a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b93ec6a720,0x55b940af42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11ef5f71d2a7062f0095011aad8eee69fac87130' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3844 processed earlier; will process 7132 files now Step #5: ==112900== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b9355c42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b93bbff728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b93bbe246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b93bbe238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b9355ca652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b93552b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b935525c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b9355bc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9385eb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9385eb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9385eb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9385eb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9385eb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9385eb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9385eb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9385eb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9385eb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9385eb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b93a7f045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b93754c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9375575a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b937302d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b937302d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b937303808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b937302944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b937302944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b937302944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b93bbe494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b93bbed7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b93bbd5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b93bbfffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5b6c4c6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b93552443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x21,0x68,0x74,0x74,0x70,0x73,0x3a,0x2f,0x2f,0x73,0x6c,0x73,0x41,0x2e,0x24,0x65,0x76,0x2f,0x78,0x72,0x6f,0x76,0x65,0x6e,0x6b,0x6e,0x63,0x65,0x2f,0x76,0x30,0x2e,0x30,0xef,0xf3,0xbf,0xbf,0xa0,0x81,0x30,0x22,0x22,0x41, Step #5: \000\000\000!https://slsA.$ev/xrovenknce/v0.0\357\363\277\277\240\2010\"\"A Step #5: artifact_prefix='./'; Test unit written to ./oom-5f68cc2dc026efa0b5941dfd616d900a7bcca84c Step #5: Base64: AAAAIWh0dHBzOi8vc2xzQS4kZXYveHJvdmVua25jZS92MC4w7/O/v6CBMCIiQQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3135 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 988262386 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e540382d60, 0x55e54056b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e54056b720,0x55e5423f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5f68cc2dc026efa0b5941dfd616d900a7bcca84c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3845 processed earlier; will process 7131 files now Step #5: #1 pulse cov: 3793 ft: 3794 exec/s: 0 rss: 173Mb Step #5: #2 pulse cov: 11559 ft: 12390 exec/s: 0 rss: 192Mb Step #5: ==112936== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e536ec52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e53d500728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e53d4e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e53d4e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e536ecb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e536e2c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e536e26c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e536ebd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e539eec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e539eec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e539eec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e539eec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e539eec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e539eec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e539eec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e539eec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e539eec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e539eec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e53c0f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e538e4d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e538e585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e538c03d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e538c03d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e538c04808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e538c03944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e538c03944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e538c03944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e53d4e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e53d4ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e53d4d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e53d500fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb68f7fc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e536e2543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x61,0x6e,0x4d,0x24,0x24,0x33,0x34,0x30,0x32,0x38,0x32,0x33,0x36,0x36,0x39,0x32,0x30,0x39,0x33,0x38,0x34,0x36,0x33,0x34,0x36,0x33,0x33,0x37,0x34,0x36,0x30,0x37,0x34,0x33,0x31,0x37,0x36,0x38,0x32,0x31,0x31,0x34,0x35,0x36,0x55, Step #5: DanM$$340282366920938463463374607431768211456U Step #5: artifact_prefix='./'; Test unit written to ./oom-67b67f051c78a3c5a22abf64ed0745a00f879020 Step #5: Base64: RGFuTSQkMzQwMjgyMzY2OTIwOTM4NDYzNDYzMzc0NjA3NDMxNzY4MjExNDU2VQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3136 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 988925948 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5652d4807d60, 0x5652d49f071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5652d49f0720,0x5652d687a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/67b67f051c78a3c5a22abf64ed0745a00f879020' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3849 processed earlier; will process 7127 files now Step #5: ==112972== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5652cb34a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5652d1985728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5652d196846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5652d196838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5652cb350652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5652cb2b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5652cb2abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5652cb342595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652ce3718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652ce3718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652ce3718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652ce3718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652ce3718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652ce3718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652ce3718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652ce3718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652ce3718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652ce3718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5652d057645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5652cd2d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652cd2dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5652cd088d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5652cd088d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5652cd089808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5652cd088944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5652cd088944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5652cd088944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5652d196a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652d19737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5652d195b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5652d1985fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fec943c6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5652cb2aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x29,0x3d,0x7e,0xd3,0xbf,0x32,0x3d,0x1,0x79,0x0,0x3d,0x29,0x7e,0x24,0x3d,0x3d,0x1,0x79,0x0,0x3d,0x29,0x7e,0x0,0x0,0x24,0x0,0x7e,0x0,0x0,0x0,0x24,0x0,0x7e,0x2d,0x3d,0x5,0x0,0x3a,0x3d,0x1,0x79,0x0,0x0,0x29,0x24, Step #5: ~)=~\323\2772=\001y\000=)~$==\001y\000=)~\000\000$\000~\000\000\000$\000~-=\005\000:=\001y\000\000)$ Step #5: artifact_prefix='./'; Test unit written to ./oom-b235196e693fe34feccefaf9bbc0ee5489defc93 Step #5: Base64: fik9ftO/Mj0BeQA9KX4kPT0BeQA9KX4AACQAfgAAACQAfi09BQA6PQF5AAApJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3137 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 989440422 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c837446d60, 0x55c83762f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c83762f720,0x55c8394b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b235196e693fe34feccefaf9bbc0ee5489defc93' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3850 processed earlier; will process 7126 files now Step #5: ==113008== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c82df892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c8345c4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c8345a746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c8345a738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c82df8f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c82def042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c82deeac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c82df81595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c830fb08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c830fb08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c830fb08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c830fb08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c830fb08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c830fb08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c830fb08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c830fb08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c830fb08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c830fb08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c8331b545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c82ff11578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c82ff1c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c82fcc7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c82fcc7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c82fcc8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c82fcc7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c82fcc7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c82fcc7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c8345a994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c8345b27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c83459a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c8345c4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f48e065a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c82dee943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x0,0x6e,0x0,0x43,0x43,0x0,0x0,0x0,0x0,0x0,0x0,0xe0,0xb8,0x84,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xf3,0xa0,0x81,0x8f,0x0,0x7a,0x0,0x43,0x31, Step #5: D\000n\000CC\000\000\000\000\000\000\340\270\204\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\363\240\201\217\000z\000C1 Step #5: artifact_prefix='./'; Test unit written to ./oom-cf27f17ff5f0afca08db8d435a44ee4d8ef7c666 Step #5: Base64: RABuAENDAAAAAAAA4LiEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOggY8AegBDMQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3138 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 989965760 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55706a78ed60, 0x55706a97771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55706a977720,0x55706c8012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cf27f17ff5f0afca08db8d435a44ee4d8ef7c666' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3851 processed earlier; will process 7125 files now Step #5: ==113044== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5570612d12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55706790c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5570678ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5570678ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5570612d7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55706123842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557061232c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5570612c9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570642f88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570642f88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570642f88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570642f88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570642f88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570642f88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570642f88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570642f88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570642f88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570642f88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5570664fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557063259578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5570632645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55706300fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55706300fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557063010808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55706300f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55706300f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55706300f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5570678f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5570678fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5570678e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55706790cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb9cafd6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55706123143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd3,0x81,0xe6,0x8d,0x8b,0x0,0x6b,0x1,0xd3,0x81,0xe6,0x8d,0x8b,0x0,0x6b,0x1,0x0,0xd3,0x81,0xe6,0x8d,0x8b,0x53,0x6b,0x0,0xe6,0x8d,0x8b,0x5b,0x7e,0x17,0x0,0xd3,0x81,0xe6,0x8d,0x8b,0x53,0x6b,0x0,0xe6,0x8d,0x8b,0x5b,0x7e,0x17, Step #5: \323\201\346\215\213\000k\001\323\201\346\215\213\000k\001\000\323\201\346\215\213Sk\000\346\215\213[~\027\000\323\201\346\215\213Sk\000\346\215\213[~\027 Step #5: artifact_prefix='./'; Test unit written to ./oom-268c1f63c91e5bf9eb504b5372e13fffc56d28db Step #5: Base64: 04HmjYsAawHTgeaNiwBrAQDTgeaNi1NrAOaNi1t+FwDTgeaNi1NrAOaNi1t+Fw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3139 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 990481253 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56266e720d60, 0x56266e90971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56266e909720,0x5626707932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/268c1f63c91e5bf9eb504b5372e13fffc56d28db' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3852 processed earlier; will process 7124 files now Step #5: ==113080== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5626652632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56266b89e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56266b88146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56266b88138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562665269652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5626651ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5626651c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56266525b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56266828a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56266828a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56266828a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56266828a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56266828a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56266828a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56266828a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56266828a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56266828a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56266828a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56266a48f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5626671eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5626671f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562666fa1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562666fa1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562666fa2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562666fa1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562666fa1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562666fa1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56266b88394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56266b88c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56266b874529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56266b89efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5e9bdec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5626651c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x46,0x46,0x46,0x30,0x30,0x30,0x30,0x2d,0x30,0x46,0x35,0x30,0x50,0x46,0x2d,0x30,0x46,0x32,0x46,0x30,0x32,0x43,0x2d,0x2d,0x31,0x2d,0x2d,0x30,0x30,0x31,0x34,0x36,0x33,0x35,0x2d,0x35,0x2d,0x2d,0x2d,0x30,0x31,0x34,0x36,0x32,0x2d, Step #5: FFFF0000-0F50PF-0F2F02C--1--0014635-5---01462- Step #5: artifact_prefix='./'; Test unit written to ./oom-833e787237acd60b5efa9ae5b5f4235ff98ebc16 Step #5: Base64: RkZGRjAwMDAtMEY1MFBGLTBGMkYwMkMtLTEtLTAwMTQ2MzUtNS0tLTAxNDYyLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3140 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 990997674 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b64ba9d60, 0x559b64d9271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b64d92720,0x559b66c1c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/833e787237acd60b5efa9ae5b5f4235ff98ebc16' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3853 processed earlier; will process 7123 files now Step #5: ==113116== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b5b6ec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b61d27728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b61d0a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b61d0a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b5b6f2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b5b65342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b5b64dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b5b6e4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b5e7138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b5e7138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b5e7138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b5e7138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b5e7138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b5e7138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b5e7138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b5e7138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b5e7138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b5e7138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b6091845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b5d674578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b5d67f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b5d42ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b5d42ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b5d42b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b5d42a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b5d42a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b5d42a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b61d0c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b61d157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b61cfd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b61d27fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fefde7a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b5b64c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xd0,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0,0x9e,0x8b,0x91,0xd,0x69,0x6e,0xd,0xf0, Step #5: \360\236\213\221\015in\015\320\221\015in\015\360\236\213\221\015in\015\360\236\213\221\015in\015\360\236\213\221\015in\015\360\236\213\221\015in\015\360 Step #5: artifact_prefix='./'; Test unit written to ./oom-a567e7a5f98be93555f5e2760fa757adf6a5c8b1 Step #5: Base64: 8J6LkQ1pbg3QkQ1pbg3wnouRDWluDfCei5ENaW4N8J6LkQ1pbg3wnouRDWluDfA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3141 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 991519526 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560c9f3fdd60, 0x560c9f5e671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560c9f5e6720,0x560ca14702c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a567e7a5f98be93555f5e2760fa757adf6a5c8b1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3854 processed earlier; will process 7122 files now Step #5: #1 pulse cov: 3726 ft: 3727 exec/s: 0 rss: 174Mb Step #5: ==113152== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560c95f402d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560c9c57b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560c9c55e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560c9c55e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560c95f46652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560c95ea742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560c95ea1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560c95f38595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560c98f678c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560c98f678c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560c98f678c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560c98f678c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560c98f678c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560c98f678c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560c98f678c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560c98f678c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560c98f678c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560c98f678c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560c9b16c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560c97ec8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560c97ed35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560c97c7ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560c97c7ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560c97c7f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560c97c7e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560c97c7e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560c97c7e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560c9c56094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560c9c5697b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560c9c551529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560c9c57bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4cf420082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560c95ea043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x88,0xa,0xcd,0x88,0xa,0xcd,0x88,0xa,0xcd,0x88,0xa,0xcd,0x80,0xa,0xcd,0x88,0xa,0xcd,0x88,0xa,0xcd,0x88,0xa,0xcd,0x80,0xa,0xcd,0x88,0xa,0xcd,0x88,0xa,0xcd,0x89,0xa,0xcd,0x89,0xa,0xcd,0x88,0xa,0xcc,0x88,0xa,0xcd,0x88, Step #5: \315\210\012\315\210\012\315\210\012\315\210\012\315\200\012\315\210\012\315\210\012\315\210\012\315\200\012\315\210\012\315\210\012\315\211\012\315\211\012\315\210\012\314\210\012\315\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-23e2c293ecc3adaba048bfbe818c309fde052c71 Step #5: Base64: zYgKzYgKzYgKzYgKzYAKzYgKzYgKzYgKzYAKzYgKzYgKzYkKzYkKzYgKzIgKzYg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3142 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 992090778 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b9307ed60, 0x560b9326771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b93267720,0x560b950f12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/23e2c293ecc3adaba048bfbe818c309fde052c71' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3856 processed earlier; will process 7120 files now Step #5: ==113188== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b89bc12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b901fc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b901df46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b901df38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b89bc7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b89b2842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b89b22c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b89bb9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b8cbe88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b8cbe88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b8cbe88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b8cbe88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b8cbe88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b8cbe88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b8cbe88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b8cbe88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b8cbe88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b8cbe88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b8eded45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b8bb49578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b8bb545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b8b8ffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b8b8ffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b8b900808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b8b8ff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b8b8ff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b8b8ff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b901e194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b901ea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b901d2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b901fcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd14997b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b89b2143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x6f,0x6f,0x6f,0x6f,0x68,0x65,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x7f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0xa4,0xb6,0x43,0x4f,0x4c,0x52,0x3,0x0,0x0,0x0, Step #5: oooooheoooooooooo\177ooooooooooooooooooo\244\266COLR\003\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-d12764c343070b0c5bd3f54dde590dc55d2c6cbd Step #5: Base64: b29vb29oZW9vb29vb29vb29/b29vb29vb29vb29vb29vb29vb6S2Q09MUgMAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3143 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 992608142 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5640b8e14d60, 0x5640b8ffd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5640b8ffd720,0x5640bae872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d12764c343070b0c5bd3f54dde590dc55d2c6cbd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3857 processed earlier; will process 7119 files now Step #5: ==113224== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5640af9572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5640b5f92728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5640b5f7546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5640b5f7538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5640af95d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5640af8be42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640af8b8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5640af94f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5640b297e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5640b297e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5640b297e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5640b297e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5640b297e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5640b297e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5640b297e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5640b297e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5640b297e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5640b297e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5640b4b8345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5640b18df578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5640b18ea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5640b1695d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5640b1695d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5640b1696808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5640b1695944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5640b1695944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5640b1695944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5640b5f7794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5640b5f807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5640b5f68529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5640b5f92fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff137029082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5640af8b743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0xd,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: \015- - - - - - - - - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-0ed6c7618730415b6ec01e66346cd07134e221a7 Step #5: Base64: IA0tIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3144 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 993173756 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c0682bd60, 0x557c06a1471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c06a14720,0x557c0889e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0ed6c7618730415b6ec01e66346cd07134e221a7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3858 processed earlier; will process 7118 files now Step #5: #1 pulse cov: 3792 ft: 3793 exec/s: 0 rss: 173Mb Step #5: ==113260== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557bfd36e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c039a9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c0398c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c0398c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557bfd374652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557bfd2d542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557bfd2cfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557bfd366595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c003958c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c003958c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c003958c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c003958c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c003958c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c003958c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c003958c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c003958c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c003958c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c003958c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c0259a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557bff2f6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557bff3015a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557bff0acd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557bff0acd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557bff0ad808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557bff0ac944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557bff0ac944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557bff0ac944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c0398e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c039977b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c0397f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c039a9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f073bd09082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557bfd2ce43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f,0xa,0xcd,0x8f, Step #5: \315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217\012\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-7d209f18f09258568758e46a6505ec4baf5a0b56 Step #5: Base64: zY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8KzY8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3145 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 993732537 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e5906a0d60, 0x55e59088971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e590889720,0x55e5927132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d209f18f09258568758e46a6505ec4baf5a0b56' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3860 processed earlier; will process 7116 files now Step #5: ==113296== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e5871e32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e58d81e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e58d80146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e58d80138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e5871e9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e58714a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e587144c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e5871db595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e58a20a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e58a20a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e58a20a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e58a20a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e58a20a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e58a20a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e58a20a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e58a20a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e58a20a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e58a20a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e58c40f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e58916b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e5891765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e588f21d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e588f21d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e588f22808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e588f21944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e588f21944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e588f21944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e58d80394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e58d80c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e58d7f4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e58d81efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3afb55082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e58714343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xe0,0xba,0xba,0xe0,0xba,0xb9,0xe0,0xba,0xba,0xe0,0xba,0xba,0xe0,0xba,0xb9,0xe0,0xba,0xba,0xe0,0xba,0xba,0xe0,0xba,0xb9,0xe0,0xba,0xba,0xe0,0xba,0xba,0xe0,0xba,0xba,0xe0,0xba,0xbb,0x3a,0xe0,0xba,0xba,0xe0,0xba,0xba,0xe0,0xba,0xba, Step #5: \"\340\272\272\340\272\271\340\272\272\340\272\272\340\272\271\340\272\272\340\272\272\340\272\271\340\272\272\340\272\272\340\272\272\340\272\273:\340\272\272\340\272\272\340\272\272 Step #5: artifact_prefix='./'; Test unit written to ./oom-efd57633659bc71c0d56771d9a20ca751957c33d Step #5: Base64: IuC6uuC6ueC6uuC6uuC6ueC6uuC6uuC6ueC6uuC6uuC6uuC6uzrgurrgurrguro= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3146 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 994253584 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f7e605d60, 0x557f7e7ee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f7e7ee720,0x557f806782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/efd57633659bc71c0d56771d9a20ca751957c33d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3861 processed earlier; will process 7115 files now Step #5: ==113332== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f751482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f7b783728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f7b76646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f7b76638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f7514e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f750af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f750a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f75140595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f7816f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f7816f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f7816f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f7816f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f7816f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f7816f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f7816f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f7816f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f7816f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f7816f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f7a37445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f770d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f770db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f76e86d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f76e86d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f76e87808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f76e86944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f76e86944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f76e86944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f7b76894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f7b7717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f7b759529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f7b783fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbbfabee082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f750a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x0,0x6b,0x0,0x60,0x2b,0x2b,0x4a,0x9,0x29,0x4a,0x9,0x29,0xa,0x5c,0x9,0x29,0xa,0x5c,0x9,0x60,0x40,0x60,0x40,0x29,0x5c,0x9,0x29,0xa,0x5c,0x9,0x60,0x40,0x60,0x40,0x29,0xa,0x1,0x0,0x1d,0x9,0x60,0xf3,0xa0,0x80,0xa1,0x29, Step #5: \012\000k\000`++J\011)J\011)\012\\\011)\012\\\011`@`@)\\\011)\012\\\011`@`@)\012\001\000\035\011`\363\240\200\241) Step #5: artifact_prefix='./'; Test unit written to ./oom-8d8040990ebe3685ba96a4674b224135817096a4 Step #5: Base64: CgBrAGArK0oJKUoJKQpcCSkKXAlgQGBAKVwJKQpcCWBAYEApCgEAHQlg86CAoSk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3147 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 994899068 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b8806fdd60, 0x55b8808e671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b8808e6720,0x55b8827702c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d8040990ebe3685ba96a4674b224135817096a4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3862 processed earlier; will process 7114 files now Step #5: #1 pulse cov: 3725 ft: 3726 exec/s: 0 rss: 174Mb Step #5: ==113368== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8772402d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b87d87b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b87d85e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b87d85e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b877246652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8771a742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8771a1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b877238595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b87a2678c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b87a2678c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b87a2678c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b87a2678c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b87a2678c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b87a2678c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b87a2678c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b87a2678c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b87a2678c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b87a2678c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b87c46c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8791c8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8791d35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b878f7ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b878f7ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b878f7f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b878f7e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b878f7e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b878f7e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b87d86094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b87d8697b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b87d851529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b87d87bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc587a2d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8771a043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x30,0x4,0x0,0x0,0x0,0x0,0x0,0x6e,0x4d,0x1,0x8,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x6e,0x4d,0x1,0x8,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: ID0\004\000\000\000\000\000nM\001\010\000\000\000\000\000\000\000\000\000\000\000nM\001\010\000\000\000\000\000\001\000\000\000\000\000\000\000\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-7eea1c81d0496d1b3955d53b2bce5bf5e6867056 Step #5: Base64: SUQwBAAAAAAAbk0BCAAAAAAAAAAAAAAAbk0BCAAAAAAAAQAAAAAAAAAAAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3148 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 995454457 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560fcfa21d60, 0x560fcfc0a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560fcfc0a720,0x560fd1a942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7eea1c81d0496d1b3955d53b2bce5bf5e6867056' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3864 processed earlier; will process 7112 files now Step #5: ==113404== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560fc65642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560fccb9f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560fccb8246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560fccb8238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560fc656a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560fc64cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560fc64c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560fc655c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560fc958b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560fc958b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560fc958b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560fc958b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560fc958b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560fc958b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560fc958b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560fc958b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560fc958b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560fc958b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560fcb79045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560fc84ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560fc84f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560fc82a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560fc82a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560fc82a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560fc82a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560fc82a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560fc82a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560fccb8494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560fccb8d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560fccb75529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560fccb9ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f142e945082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560fc64c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x88,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0xf3,0xa0,0x81,0xba,0x2f,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x7f,0x0,0x0,0x0,0x0,0xff,0x0,0x0,0xb,0x0,0x60,0xa,0xa,0x2f,0x60,0xa,0x60,0x20,0x60,0x20,0x60,0xa,0x9, Step #5: `\342\210\210-\000`\012\363\240\201\272\363\240\201\272/\001\000\000\000\000\000\000\177\000\000\000\000\377\000\000\013\000`\012\012/`\012` ` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-578bb5afb059e7cd8e37da96dd528d4425c95161 Step #5: Base64: YOKIiC0AYArzoIG686CBui8BAAAAAAAAfwAAAAD/AAALAGAKCi9gCmAgYCBgCgk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3149 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 996100881 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f7db651d60, 0x55f7db83a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f7db83a720,0x55f7dd6c42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/578bb5afb059e7cd8e37da96dd528d4425c95161' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3865 processed earlier; will process 7111 files now Step #5: ==113440== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f7d21942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7d87cf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7d87b246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7d87b238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f7d219a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7d20fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7d20f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f7d218c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7d51bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7d51bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7d51bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7d51bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7d51bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7d51bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7d51bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7d51bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7d51bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7d51bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f7d73c045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f7d411c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7d41275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7d3ed2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7d3ed2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7d3ed3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7d3ed2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7d3ed2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7d3ed2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7d87b494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7d87bd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7d87a5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7d87cffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fada7517082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7d20f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x16,0x3,0x4,0x0,0x2a,0x2,0x0,0x0,0x26,0x3,0x3,0x6d,0x0,0x0,0x0,0x0,0xe2,0x80,0xae,0x0,0x0,0x0,0x2a,0x2,0x0,0x0,0x26,0x3,0x3,0x6d,0x0,0x0,0x0,0x0,0xe2,0x80,0xae,0x0,0x0,0x0,0x0,0x20,0x1,0x0,0xff,0x12,0x0, Step #5: \026\003\004\000*\002\000\000&\003\003m\000\000\000\000\342\200\256\000\000\000*\002\000\000&\003\003m\000\000\000\000\342\200\256\000\000\000\000 \001\000\377\022\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-9ea2d7e2b00f08d04c0a283b31242682e5f74b29 Step #5: Base64: FgMEACoCAAAmAwNtAAAAAOKArgAAACoCAAAmAwNtAAAAAOKArgAAAAAgAQD/EgA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3150 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 996618341 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d43176bd60, 0x55d43195471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d431954720,0x55d4337de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9ea2d7e2b00f08d04c0a283b31242682e5f74b29' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3866 processed earlier; will process 7110 files now Step #5: ==113476== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4282ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d42e8e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d42e8cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d42e8cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4282b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d42821542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d42820fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4282a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d42b2d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d42b2d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d42b2d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d42b2d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d42b2d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d42b2d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d42b2d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d42b2d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d42b2d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d42b2d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d42d4da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d42a236578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d42a2415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d429fecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d429fecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d429fed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d429fec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d429fec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d429fec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d42e8ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d42e8d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d42e8bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d42e8e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb3669a4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d42820e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x76,0x21,0x39,0xa,0x6e,0x75,0x73,0x20,0x73,0x65,0x72,0x69,0x66,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x47,0x7d,0xd7,0x93,0x93,0xd7,0x7d,0x0,0x0, Step #5: #v!9\012nus serifGGGGGGGGGGGGGGGGGGGGGGGGG}\327\223\223\327}\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0f0b1f1f6e29f5ed0c9a6e24a5b756e05a3481a2 Step #5: Base64: I3YhOQpudXMgc2VyaWZHR0dHR0dHR0dHR0dHR0dHR0dHR0dHR0dHfdeTk9d9AAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3151 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 997136861 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56179b917d60, 0x56179bb0071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56179bb00720,0x56179d98a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f0b1f1f6e29f5ed0c9a6e24a5b756e05a3481a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3867 processed earlier; will process 7109 files now Step #5: ==113512== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56179245a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561798a95728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561798a7846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561798a7838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561792460652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5617923c142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5617923bbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561792452595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5617954818c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5617954818c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5617954818c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5617954818c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5617954818c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5617954818c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5617954818c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5617954818c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5617954818c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5617954818c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56179768645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5617943e2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5617943ed5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561794198d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561794198d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561794199808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561794198944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561794198944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561794198944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561798a7a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561798a837b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561798a6b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561798a95fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f367af3f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5617923ba43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0x82,0xe3,0x80,0x86,0xe3,0x80,0x82,0xe3,0x80,0x81,0xe3,0x80,0x82,0xe3,0x80,0x86,0xe3,0x80,0x82,0xe3,0x80,0x81,0xe3,0x80,0x82,0xe3,0x80,0x86,0xe3,0x80,0x82,0xe3,0x80,0x81,0xe3,0x80,0x83,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0xe, Step #5: \343\200\202\343\200\206\343\200\202\343\200\201\343\200\202\343\200\206\343\200\202\343\200\201\343\200\202\343\200\206\343\200\202\343\200\201\343\200\203\343\200\202\343\200\202\343\016 Step #5: artifact_prefix='./'; Test unit written to ./oom-c2f678183fb323f6b252d497c0bd0526b3dbc493 Step #5: Base64: 44CC44CG44CC44CB44CC44CG44CC44CB44CC44CG44CC44CB44CD44CC44CC4w4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3152 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 997666664 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55916db2fd60, 0x55916dd1871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55916dd18720,0x55916fba22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c2f678183fb323f6b252d497c0bd0526b3dbc493' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3868 processed earlier; will process 7108 files now Step #5: ==113548== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5591646722d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55916acad728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55916ac9046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55916ac9038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559164678652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5591645d942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5591645d3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55916466a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5591676998c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5591676998c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5591676998c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5591676998c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5591676998c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5591676998c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5591676998c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5591676998c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5591676998c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5591676998c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55916989e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5591665fa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5591666055a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5591663b0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5591663b0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5591663b1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5591663b0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5591663b0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5591663b0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55916ac9294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55916ac9b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55916ac83529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55916acadfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff383c76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5591645d243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0x2f,0x2a,0xa,0x60,0xe2,0x80,0x88,0xd0,0x0,0x60,0x11,0xf3,0xa0,0x81,0xba,0x21,0xf3,0xa0,0x81,0xba,0x60,0xa,0xa,0x2f,0x60,0xa,0x60,0x2f,0xb,0x20,0x20,0x20,0x60,0xa,0x9, Step #5: `\342\200\210-\000`\012\363\240\201\272/*\012`\342\200\210\320\000`\021\363\240\201\272!\363\240\201\272`\012\012/`\012`/\013 `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-4b57e49d129d660535cf588deb55dacb767b7c25 Step #5: Base64: YOKAiC0AYArzoIG6LyoKYOKAiNAAYBHzoIG6IfOggbpgCgovYApgLwsgICBgCgk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3153 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 998309734 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561ea7d63d60, 0x561ea7f4c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561ea7f4c720,0x561ea9dd62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4b57e49d129d660535cf588deb55dacb767b7c25' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3869 processed earlier; will process 7107 files now Step #5: ==113584== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e9e8a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561ea4ee1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561ea4ec446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561ea4ec438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e9e8ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e9e80d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e9e807c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e9e89e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561ea18cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561ea18cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561ea18cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561ea18cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561ea18cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561ea18cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561ea18cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561ea18cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561ea18cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561ea18cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561ea3ad245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561ea082e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561ea08395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561ea05e4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561ea05e4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561ea05e5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561ea05e4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561ea05e4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561ea05e4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561ea4ec694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561ea4ecf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561ea4eb7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561ea4ee1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e98257082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e9e80643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x7f,0x0,0x0,0x0,0x32,0x0,0x0,0x0,0x32,0x2e,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x32,0x0,0x0,0x0,0x0,0x0,0x7f,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x0,0x24,0x0,0x0,0x0, Step #5: $\177]\177\000\000\0002\000\000\0002.23/\020./( 7 =\177\000\000\0002\000\000\000\000\000\177\177\177\177o\000\000C\000$\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-24e541d3fa04103782871e57ade35b555230f218 Step #5: Base64: JH9dfwAAADIAAAAyLjIzLxAuLyggNyA9fwAAADIAAAAAAH9/f39vAABDACQAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3154 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 998832237 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556e72e0ad60, 0x556e72ff371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556e72ff3720,0x556e74e7d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/24e541d3fa04103782871e57ade35b555230f218' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3870 processed earlier; will process 7106 files now Step #5: ==113620== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556e6994d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556e6ff88728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556e6ff6b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556e6ff6b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556e69953652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556e698b442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556e698aec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556e69945595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556e6c9748c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556e6c9748c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556e6c9748c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556e6c9748c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556e6c9748c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556e6c9748c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556e6c9748c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556e6c9748c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556e6c9748c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556e6c9748c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556e6eb7945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556e6b8d5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556e6b8e05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556e6b68bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556e6b68bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556e6b68c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556e6b68b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556e6b68b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556e6b68b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556e6ff6d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556e6ff767b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556e6ff5e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556e6ff88fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f66f0c87082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556e698ad43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x3a,0xd,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d, Step #5: t:\015- - - - - - - - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-ee4166adb52f911d7ad5a7110479afabb0f11409 Step #5: Base64: dDoNLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAgLSAtIC0gLSAtIC0gLSAtIC0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3155 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 999390691 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c6efb19d60, 0x55c6efd0271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c6efd02720,0x55c6f1b8c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee4166adb52f911d7ad5a7110479afabb0f11409' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3871 processed earlier; will process 7105 files now Step #5: ==113656== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c6e665c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c6ecc97728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c6ecc7a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c6ecc7a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c6e6662652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c6e65c342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c6e65bdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c6e6654595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c6e96838c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c6e96838c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c6e96838c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c6e96838c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c6e96838c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c6e96838c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c6e96838c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c6e96838c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c6e96838c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c6e96838c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c6eb88845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c6e85e4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c6e85ef5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c6e839ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c6e839ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c6e839b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c6e839a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c6e839a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c6e839a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c6ecc7c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c6ecc857b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c6ecc6d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c6ecc97fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a5fc37082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c6e65bc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x2c,0x19,0x22,0xc4,0xb3,0xdf,0x93,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb2,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb2,0xdf,0xb3,0x62,0xdf,0xb3,0xdf,0xb3,0x26,0x4c,0x20,0x4d,0x20,0x4c,0x9d,0xb3,0xc4,0x78,0x78,0x28,0xdf, Step #5: HU,\031\"\304\263\337\223\337\263\337\263\337\263\337\262\337\263\337\263\337\263\337\263\337\262\337\263b\337\263\337\263&L M L\235\263\304xx(\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-1fde1a491a8bd4e7c738077db611e603ca33446b Step #5: Base64: SFUsGSLEs9+T37Pfs9+z37Lfs9+z37Pfs9+y37Ni37PfsyZMIE0gTJ2zxHh4KN8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3156 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 999905890 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564dc8dddd60, 0x564dc8fc671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564dc8fc6720,0x564dcae502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1fde1a491a8bd4e7c738077db611e603ca33446b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3872 processed earlier; will process 7104 files now Step #5: ==113692== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564dbf9202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564dc5f5b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564dc5f3e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564dc5f3e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564dbf926652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564dbf88742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564dbf881c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564dbf918595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564dc29478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564dc29478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564dc29478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564dc29478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564dc29478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564dc29478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564dc29478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564dc29478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564dc29478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564dc29478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564dc4b4c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564dc18a8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564dc18b35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564dc165ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564dc165ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564dc165f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564dc165e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564dc165e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564dc165e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564dc5f4094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564dc5f497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564dc5f31529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564dc5f5bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa33a4e1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564dbf88043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x67,0x6c,0x79,0x66,0x66,0x67,0x7f,0x66,0x67,0x7f,0x66,0x3b,0x67,0x3f,0x74,0x67,0x6c,0x79,0x67,0x7f,0x66,0x3b,0x67,0x66,0x3f,0x66,0x3b,0x67,0x3f,0x74,0x73,0x74,0x72,0x65,0x61,0x6d,0x67,0x6c,0x79,0x66,0x3f,0x67,0x3f,0x67,0x3f,0x6e, Step #5: tglyffg\177fg\177f;g?tglyg\177f;gf?f;g?tstreamglyf?g?g?n Step #5: artifact_prefix='./'; Test unit written to ./oom-b177db0b7b423aaca2aafd1178a798072f9d6b95 Step #5: Base64: dGdseWZmZ39mZ39mO2c/dGdseWd/ZjtnZj9mO2c/dHN0cmVhbWdseWY/Zz9nP24= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3157 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1000420013 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560bdc4d2d60, 0x560bdc6bb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560bdc6bb720,0x560bde5452c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b177db0b7b423aaca2aafd1178a798072f9d6b95' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3873 processed earlier; will process 7103 files now Step #5: ==113728== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560bd30152d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560bd9650728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560bd963346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560bd963338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560bd301b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560bd2f7c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560bd2f76c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560bd300d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560bd603c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560bd603c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560bd603c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560bd603c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560bd603c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560bd603c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560bd603c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560bd603c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560bd603c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560bd603c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560bd824145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560bd4f9d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560bd4fa85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560bd4d53d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560bd4d53d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560bd4d54808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560bd4d53944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560bd4d53944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560bd4d53944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560bd963594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560bd963e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560bd9626529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560bd9650fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f125545e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560bd2f7543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x24,0x2c,0x27,0x2c,0x24,0x24,0x24,0x24,0x3f,0x24,0x2b,0x2f,0x76,0x2f,0x24,0x2c,0x24,0x2c,0x24,0x24,0x24,0x24,0x3f,0x5c,0xf3,0xa0,0x80,0xa5,0x5c,0x5c,0x5c,0xf3,0xa0,0x81,0x99,0x65,0x6e,0x3,0x5c,0x5c,0x5c,0x5c,0x65,0x6e,0x3, Step #5: $$$,',$$$$?$+/v/$,$,$$$$?\\\363\240\200\245\\\\\\\363\240\201\231en\003\\\\\\\\en\003 Step #5: artifact_prefix='./'; Test unit written to ./oom-c693ba1210ea56e87ff7b7c5f89bebd3b1050b54 Step #5: Base64: JCQkLCcsJCQkJD8kKy92LyQsJCwkJCQkP1zzoIClXFxc86CBmWVuA1xcXFxlbgM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3158 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1000948342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55716d782d60, 0x55716d96b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55716d96b720,0x55716f7f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c693ba1210ea56e87ff7b7c5f89bebd3b1050b54' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3874 processed earlier; will process 7102 files now Step #5: ==113764== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571642c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55716a900728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55716a8e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55716a8e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571642cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55716422c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557164226c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5571642bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571672ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571672ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571672ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571672ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571672ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571672ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571672ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571672ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571672ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571672ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5571694f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55716624d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571662585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557166003d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557166003d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557166004808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557166003944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557166003944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557166003944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55716a8e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55716a8ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55716a8d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55716a900fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff569f30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55716422543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x4,0x7e,0x7e,0x7e,0x7e,0x7e,0x7e,0x42,0x3c,0xdb,0x9e,0x0,0x0,0x0,0x0,0x64,0x64,0x64,0x64,0x7e,0x7e,0x7e,0x7e,0x7e,0x7e,0x42,0x3c,0xdb,0x9e,0x7e,0x7e,0x7e,0x7e,0x7e,0x2b,0x7e,0x2b,0x7e,0x7e,0x7e,0x7e,0xff,0x7e,0xff,0x67,0x67, Step #5: \002\004~~~~~~B<\333\236\000\000\000\000dddd~~~~~~B<\333\236~~~~~+~+~~~~\377~\377gg Step #5: artifact_prefix='./'; Test unit written to ./oom-ec23a85160dbd4aeaff68140b9931e7870784da4 Step #5: Base64: AgR+fn5+fn5CPNueAAAAAGRkZGR+fn5+fn5CPNuefn5+fn4rfit+fn5+/37/Z2c= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3159 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1001470602 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5616f2d3cd60, 0x5616f2f2571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5616f2f25720,0x5616f4daf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ec23a85160dbd4aeaff68140b9931e7870784da4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3875 processed earlier; will process 7101 files now Step #5: #1 pulse cov: 3899 ft: 3900 exec/s: 0 rss: 172Mb Step #5: ==113800== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616e987f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5616efeba728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5616efe9d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5616efe9d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616e9885652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616e97e642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616e97e0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616e9877595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616ec8a68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616ec8a68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616ec8a68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616ec8a68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616ec8a68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616ec8a68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616ec8a68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616ec8a68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616ec8a68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616ec8a68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5616eeaab45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616eb807578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616eb8125a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616eb5bdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616eb5bdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616eb5be808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616eb5bd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616eb5bd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616eb5bd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5616efe9f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5616efea87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5616efe90529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5616efebafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82a3f30082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616e97df43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x27,0x28,0x0,0x60,0x54,0x58,0x59,0x45,0x15,0x0,0x27,0x17,0x54,0x0,0x9,0x0,0x0,0x0,0x0,0x0,0x0,0x59,0x45,0x33,0x4,0x3b,0x27,0x0,0x0,0x60,0x27,0x17,0x54,0x58,0x59,0x45,0x15,0x0,0x10,0x0,0x15,0x0,0x10, Step #5: ID3\004'(\000`TXYE\025\000'\027T\000\011\000\000\000\000\000\000YE3\004;'\000\000`'\027TXYE\025\000\020\000\025\000\020 Step #5: artifact_prefix='./'; Test unit written to ./oom-9650a8752c432ae1e73a7f008384767e9a559651 Step #5: Base64: SUQzBCcoAGBUWFlFFQAnF1QACQAAAAAAAFlFMwQ7JwAAYCcXVFhZRRUAEAAVABA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3160 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1002153545 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fc57572d60, 0x55fc5775b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fc5775b720,0x55fc595e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9650a8752c432ae1e73a7f008384767e9a559651' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3877 processed earlier; will process 7099 files now Step #5: ==113836== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fc4e0b52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fc546f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fc546d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fc546d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fc4e0bb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fc4e01c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fc4e016c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fc4e0ad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fc510dc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fc510dc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fc510dc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fc510dc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fc510dc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fc510dc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fc510dc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fc510dc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fc510dc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fc510dc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fc532e145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fc5003d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fc500485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fc4fdf3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fc4fdf3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fc4fdf4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fc4fdf3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fc4fdf3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fc4fdf3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fc546d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fc546de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fc546c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fc546f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe592d82082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fc4e01543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x65,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3d,0x22,0x63,0x68,0x61,0x72,0x22,0x0,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0x6f,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0xe0,0xb9,0x81,0xe0,0xb9,0x81, Step #5: Step #5: Step #5: #0 0x55ed448942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ed4aecf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ed4aeb246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ed4aeb238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ed4489a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ed447fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ed447f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ed4488c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ed478bb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ed478bb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ed478bb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ed478bb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ed478bb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ed478bb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ed478bb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ed478bb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ed478bb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ed478bb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ed49ac045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ed4681c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ed468275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ed465d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ed465d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ed465d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ed465d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ed465d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ed465d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ed4aeb494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ed4aebd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ed4aea5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ed4aecffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f210c1b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ed447f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x2c,0x19,0x22,0xc4,0xb3,0xdf,0x93,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb2,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb2,0xdf,0xb3,0x62,0xdf,0xb3,0xdf,0xb3,0xdf,0xb3,0xdf,0xb2,0xdf,0xb3,0x62,0x4c,0xc4,0x78,0x78,0x28,0xdf, Step #5: HU,\031\"\304\263\337\223\337\263\337\263\337\263\337\262\337\263\337\263\337\263\337\263\337\262\337\263b\337\263\337\263\337\263\337\262\337\263bL\304xx(\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-a9b63557dcde71c6ff255b8b5968f72ffa5e134a Step #5: Base64: SFUsGSLEs9+T37Pfs9+z37Lfs9+z37Pfs9+y37Ni37Pfs9+z37Lfs2JMxHh4KN8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3162 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1003202732 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b972b8d60, 0x559b974a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b974a1720,0x559b9932b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a9b63557dcde71c6ff255b8b5968f72ffa5e134a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3879 processed earlier; will process 7097 files now Step #5: ==113908== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b8ddfb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b94436728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b9441946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b9441938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b8de01652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b8dd6242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b8dd5cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b8ddf3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b90e228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b90e228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b90e228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b90e228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b90e228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b90e228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b90e228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b90e228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b90e228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b90e228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b9302745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b8fd83578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b8fd8e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b8fb39d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b8fb39d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b8fb3a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b8fb39944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b8fb39944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b8fb39944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b9441b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b944247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b9440c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b94436fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f201bade082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b8dd5b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xd9,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb1,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0xdb,0xb1,0xdb,0xb2,0xdb,0xb2,0xdb,0xb2,0x71,0xdb,0xb2,0xdb,0xb2, Step #5: \333\262\333\262\333\262\333\262\333\262\333\262\333\262\333\262\333\262\331\262\333\262\333\262\333\262\333\261\333\262\333\262\333\262\333\261\333\262\333\262\333\262q\333\262\333\262 Step #5: artifact_prefix='./'; Test unit written to ./oom-b7535c58d9877eadb2a23998d877a7be1cad1a24 Step #5: Base64: 27Lbstuy27Lbstuy27Lbstuy2bLbstuy27Lbsduy27Lbstux27Lbstuycduy27I= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3163 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1003729377 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556539459d60, 0x55653964271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556539642720,0x55653b4cc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b7535c58d9877eadb2a23998d877a7be1cad1a24' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3880 processed earlier; will process 7096 files now Step #5: ==113944== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55652ff9c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5565365d7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5565365ba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5565365ba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55652ffa2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55652ff0342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55652fefdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55652ff94595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556532fc38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556532fc38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556532fc38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556532fc38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556532fc38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556532fc38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556532fc38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556532fc38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556532fc38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556532fc38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5565351c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556531f24578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556531f2f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556531cdad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556531cdad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556531cdb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556531cda944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556531cda944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556531cda944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5565365bc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5565365c57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5565365ad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5565365d7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6be1e98082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55652fefc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x61,0x68,0x40,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0xa,0x0,0x0,0x0,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x60,0x2d,0x2e,0x2e,0xb0,0x2e,0x2e,0x2e,0x2e,0x2e,0x2d,0x64,0x40,0x64,0x40,0x31,0x2d, Step #5: ah@````````````\012\000\000\000````````````-..\260.....-d@d@1- Step #5: artifact_prefix='./'; Test unit written to ./oom-13367dd84c383aaf96382bce929ec34313d5805b Step #5: Base64: YWhAYGBgYGBgYGBgYGBgCgAAAGBgYGBgYGBgYGBgYC0uLrAuLi4uLi1kQGRAMS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3164 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1004369767 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b83fdb3d60, 0x55b83ff9c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b83ff9c720,0x55b841e262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/13367dd84c383aaf96382bce929ec34313d5805b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3881 processed earlier; will process 7095 files now Step #5: ==113980== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8368f62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b83cf31728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b83cf1446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b83cf1438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8368fc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b83685d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b836857c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8368ee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b83991d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b83991d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b83991d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b83991d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b83991d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b83991d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b83991d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b83991d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b83991d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b83991d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b83bb2245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b83887e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8388895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b838634d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b838634d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b838635808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b838634944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b838634944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b838634944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b83cf1694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b83cf1f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b83cf07529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b83cf31fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fefc5989082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b83685643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x66,0x3e,0x3c,0xe0,0xa4,0xb6,0x3e,0x3c,0xe0,0xa4,0xb6,0x3e,0x3c,0xe0,0xa4,0xb6,0x3e,0x3c,0x2f,0xe0,0xa4,0xb6,0x3e,0x3c,0x2f,0xe0,0xa4,0xb6,0x3e,0x3c,0xe0,0xa4,0xb6,0x3e,0x3c,0x2f,0xe0,0xa4,0xb6,0x3e,0x3c,0x2f,0xe0,0xa4,0xb6,0x3e, Step #5: <\340\244\266><\340\244\266><\340\244\266><\340\244\266> Step #5: artifact_prefix='./'; Test unit written to ./oom-0f9c9e5bd669eb566ddd1f3fafe8868ba4556ec8 Step #5: Base64: PGY+POCktj484KS2PjzgpLY+PC/gpLY+PC/gpLY+POCktj48L+Cktj48L+Cktj4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3165 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1004888583 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55967d288d60, 0x55967d47171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55967d471720,0x55967f2fb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f9c9e5bd669eb566ddd1f3fafe8868ba4556ec8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3882 processed earlier; will process 7094 files now Step #5: ==114016== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559673dcb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55967a406728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55967a3e946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55967a3e938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559673dd1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559673d3242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559673d2cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559673dc3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559676df28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559676df28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559676df28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559676df28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559676df28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559676df28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559676df28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559676df28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559676df28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559676df28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559678ff745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559675d53578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559675d5e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559675b09d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559675b09d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559675b0a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559675b09944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559675b09944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559675b09944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55967a3eb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55967a3f47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55967a3dc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55967a406fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0e1ff60082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559673d2b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x55,0x54,0xb,0x31,0x20,0x48,0x54,0x54,0x50,0x2f,0x31,0x2e,0x30,0xa,0x43,0x6f,0x6e,0x74,0x65,0x6e,0x54,0x2d,0x54,0x79,0x70,0x65,0x3a,0x6d,0x75,0x6c,0x74,0x69,0x70,0x61,0x72,0x74,0x2f,0x66,0x6f,0x72,0x6d,0x0,0x2f,0x61,0x62,0x63, Step #5: PUT\0131 HTTP/1.0\012ContenT-Type:multipart/form\000/abc Step #5: artifact_prefix='./'; Test unit written to ./oom-7c39088dce375f13e41c6eb4a86f1c9218c50ff8 Step #5: Base64: UFVUCzEgSFRUUC8xLjAKQ29udGVuVC1UeXBlOm11bHRpcGFydC9mb3JtAC9hYmM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3166 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1005414172 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562c61895d60, 0x562c61a7e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562c61a7e720,0x562c639082c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7c39088dce375f13e41c6eb4a86f1c9218c50ff8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3883 processed earlier; will process 7093 files now Step #5: ==114052== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562c583d82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562c5ea13728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562c5e9f646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562c5e9f638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562c583de652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562c5833f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562c58339c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562c583d0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562c5b3ff8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562c5b3ff8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562c5b3ff8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562c5b3ff8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562c5b3ff8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562c5b3ff8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562c5b3ff8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562c5b3ff8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562c5b3ff8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562c5b3ff8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562c5d60445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562c5a360578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562c5a36b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562c5a116d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562c5a116d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562c5a117808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562c5a116944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562c5a116944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562c5a116944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562c5e9f894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562c5ea017b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562c5e9e9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562c5ea13fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2431d37082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562c5833843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4a,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0xe1,0x85,0x9f,0x47,0x45,0xe1,0x85,0x9f,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x49,0x4e,0x20,0x1,0x0,0x0,0x20,0x2d,0x2d,0xad,0x2d,0x2d,0x2d,0x2d,0xa,0x47,0x64,0xa,0x2d,0xa, Step #5: J-----BE\341\205\237GE\341\205\237GIN -------IN \001\000\000 --\255----\012Gd\012-\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-f6bb1ac7502539aeebe8f51f43b3ae679caf0eed Step #5: Base64: Si0tLS0tQkXhhZ9HReGFn0dJTiAtLS0tLS0tSU4gAQAAIC0trS0tLS0KR2QKLQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3167 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1005932096 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d1394d4d60, 0x55d1396bd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d1396bd720,0x55d13b5472c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f6bb1ac7502539aeebe8f51f43b3ae679caf0eed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3884 processed earlier; will process 7092 files now Step #5: ==114088== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1300172d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d136652728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d13663546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d13663538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d13001d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d12ff7e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d12ff78c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d13000f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d13303e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d13303e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d13303e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d13303e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d13303e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d13303e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d13303e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d13303e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d13303e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d13303e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d13524345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d131f9f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d131faa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d131d55d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d131d55d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d131d56808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d131d55944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d131d55944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d131d55944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d13663794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d1366407b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d136628529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d136652fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f143aeac082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d12ff7743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x6f,0x6f,0x6f,0x6f,0x68,0x65,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0xef,0x7f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0x6f,0xa4,0xb6,0x43,0x4f,0x4c,0x52,0xc8,0x0,0x0,0x0, Step #5: oooooheooooooooo\357\177ooooooooooooooooooo\244\266COLR\310\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-22ca1f0e68c9a1246b1a9b1685cc6f004c787d7e Step #5: Base64: b29vb29oZW9vb29vb29vb+9/b29vb29vb29vb29vb29vb29vb6S2Q09MUsgAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3168 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1006446010 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bc4fbbbd60, 0x55bc4fda471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bc4fda4720,0x55bc51c2e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/22ca1f0e68c9a1246b1a9b1685cc6f004c787d7e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3885 processed earlier; will process 7091 files now Step #5: ==114124== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bc466fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bc4cd39728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bc4cd1c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bc4cd1c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bc46704652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bc4666542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bc4665fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bc466f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bc497258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bc497258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bc497258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bc497258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bc497258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bc497258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bc497258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bc497258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bc497258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bc497258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bc4b92a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bc48686578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bc486915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bc4843cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bc4843cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bc4843d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bc4843c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bc4843c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bc4843c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bc4cd1e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bc4cd277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bc4cd0f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bc4cd39fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb717318082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bc4665e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x7f,0x0,0x0,0x0,0x32,0x0,0x0,0x0,0x32,0x2e,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x32,0x0,0x0,0x0,0x0,0x0,0x7f,0x2f,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x24,0x0,0x0,0x0, Step #5: $\177]\177\000\000\0002\000\000\0002.23/\020./( 7 =\177\000\000\0002\000\000\000\000\000\177/\000\000\000\000\000\000\000$\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-405dfe83fb425dcc5562e993eee023d824b35a08 Step #5: Base64: JH9dfwAAADIAAAAyLjIzLxAuLyggNyA9fwAAADIAAAAAAH8vAAAAAAAAACQAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3169 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1006976176 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564c7967bd60, 0x564c7986471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564c79864720,0x564c7b6ee2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/405dfe83fb425dcc5562e993eee023d824b35a08' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3886 processed earlier; will process 7090 files now Step #5: #1 pulse cov: 4245 ft: 4246 exec/s: 0 rss: 175Mb Step #5: ==114160== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564c701be2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564c767f9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564c767dc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564c767dc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564c701c4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564c7012542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564c7011fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564c701b6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564c731e58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564c731e58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564c731e58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564c731e58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564c731e58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564c731e58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564c731e58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564c731e58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564c731e58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564c731e58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564c753ea45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564c72146578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564c721515a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564c71efcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564c71efcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564c71efd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564c71efc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564c71efc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564c71efc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564c767de94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564c767e77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564c767cf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564c767f9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f755f3a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564c7011e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7e,0x24,0x3d,0x7e,0x2d,0x3d,0x3d,0x25,0x3,0xd2,0x84,0xcb,0xb5,0x28,0xcb,0xb5,0x1,0x79,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x29,0x24,0xcb,0xb5, Step #5: ~$=~-==%\003\322\204\313\265(\313\265\001y\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000)$\313\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-51d2fb437d31e04e24d01772a323ff7164049aed Step #5: Base64: fiQ9fi09PSUD0oTLtSjLtQF5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACkky7U= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3170 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1007554502 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec4196dd60, 0x55ec41b5671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec41b56720,0x55ec439e02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/51d2fb437d31e04e24d01772a323ff7164049aed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3888 processed earlier; will process 7088 files now Step #5: ==114196== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec384b02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec3eaeb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec3eace46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec3eace38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec384b6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec3841742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec38411c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec384a8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec3b4d78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec3b4d78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec3b4d78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec3b4d78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec3b4d78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec3b4d78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec3b4d78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec3b4d78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec3b4d78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec3b4d78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec3d6dc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec3a438578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec3a4435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec3a1eed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec3a1eed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec3a1ef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec3a1ee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec3a1ee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec3a1ee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec3ead094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec3ead97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec3eac1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec3eaebfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3e9e632082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec3841043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x1a,0x0,0x3,0x10,0x1,0x0,0x0,0x0,0x0,0x2,0x0,0x0,0x0,0x5,0x0,0x0,0x50,0x2,0x0,0x0,0x0,0x5,0x0,0x0,0x50,0x2,0x0,0x0,0x40,0x6,0x0,0x0,0x0,0x3,0x0,0x0,0x40,0x6,0x0,0x0,0x0,0xa,0x0,0x3e,0x6, Step #5: \000\000\032\000\003\020\001\000\000\000\000\002\000\000\000\005\000\000P\002\000\000\000\005\000\000P\002\000\000@\006\000\000\000\003\000\000@\006\000\000\000\012\000>\006 Step #5: artifact_prefix='./'; Test unit written to ./oom-0bfffd5ebfab2fa0e99ad5dbca608e5325c42b48 Step #5: Base64: AAAaAAMQAQAAAAACAAAABQAAUAIAAAAFAABQAgAAQAYAAAADAABABgAAAAoAPgY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3171 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1008070122 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e384ed3d60, 0x55e3850bc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e3850bc720,0x55e386f462c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0bfffd5ebfab2fa0e99ad5dbca608e5325c42b48' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3889 processed earlier; will process 7087 files now Step #5: ==114232== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e37ba162d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e382051728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e38203446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e38203438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e37ba1c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e37b97d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e37b977c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e37ba0e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e37ea3d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e37ea3d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e37ea3d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e37ea3d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e37ea3d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e37ea3d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e37ea3d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e37ea3d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e37ea3d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e37ea3d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e380c4245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e37d99e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e37d9a95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e37d754d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e37d754d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e37d755808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e37d754944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e37d754944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e37d754944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e38203694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e38203f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e382027529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e382051fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0a28974082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e37b97643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0xa4, Step #5: \000\000\000\000\000\000\000\000#[(b\000]\000\000#[(b\000]\000\000#[(b\000]\000\000#[(b\000]\000\000#[(b\000]\244 Step #5: artifact_prefix='./'; Test unit written to ./oom-ee25b1d46f34ae5e554a344184df9254bd36b290 Step #5: Base64: AAAAAAAAAAAjWyhiAF0AACNbKGIAXQAAI1soYgBdAAAjWyhiAF0AACNbKGIAXaQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3172 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1008595902 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561c30b79d60, 0x561c30d6271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561c30d62720,0x561c32bec2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee25b1d46f34ae5e554a344184df9254bd36b290' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3890 processed earlier; will process 7086 files now Step #5: ==114268== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561c276bc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561c2dcf7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561c2dcda46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561c2dcda38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561c276c2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561c2762342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561c2761dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561c276b4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561c2a6e38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561c2a6e38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561c2a6e38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561c2a6e38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561c2a6e38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561c2a6e38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561c2a6e38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561c2a6e38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561c2a6e38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561c2a6e38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561c2c8e845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561c29644578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561c2964f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561c293fad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561c293fad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561c293fb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561c293fa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561c293fa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561c293fa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561c2dcdc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561c2dce57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561c2dccd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561c2dcf7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a6edde082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561c2761c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x40,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x23,0x5b,0x28,0x62,0x0,0x5d,0x0,0x0,0x0,0x0,0x0,0x5b,0x62,0x5d,0xa4, Step #5: \000\000\000\000\000\000\000@#[(b\000]\000\000#[(b\000]\000\000#[(b\000]\000\000#[(b\000]\000\000\000\000\000[b]\244 Step #5: artifact_prefix='./'; Test unit written to ./oom-30026f158274b709177181d05cbe7729bdaf2dcf Step #5: Base64: AAAAAAAAAEAjWyhiAF0AACNbKGIAXQAAI1soYgBdAAAjWyhiAF0AAAAAAFtiXaQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3173 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1009120298 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563be1541d60, 0x563be172a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563be172a720,0x563be35b42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/30026f158274b709177181d05cbe7729bdaf2dcf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3891 processed earlier; will process 7085 files now Step #5: ==114304== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563bd80842d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563bde6bf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563bde6a246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563bde6a238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563bd808a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563bd7feb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563bd7fe5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563bd807c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563bdb0ab8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563bdb0ab8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563bdb0ab8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563bdb0ab8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563bdb0ab8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563bdb0ab8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563bdb0ab8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563bdb0ab8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563bdb0ab8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563bdb0ab8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563bdd2b045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563bda00c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563bda0175a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563bd9dc2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563bd9dc2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563bd9dc3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563bd9dc2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563bd9dc2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563bd9dc2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563bde6a494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563bde6ad7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563bde695529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563bde6bffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb1b7486082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563bd7fe443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x58,0xc,0x44,0x45,0x46,0x41,0x55,0x4c,0x54,0x28,0x28,0x41,0x55,0x4c,0x54,0x28,0x28,0x54,0x28,0x43,0x4f,0x4c,0x55,0x4d,0x4e,0x53,0x28,0x27,0x7b,0x0,0x21,0x4e,0x7c,0x7b,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x2,0x27,0x29,0xa, Step #5: \012X\014DEFAULT((AULT((T(COLUMNS('{\000!N|{$$$$$$$$\002')\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-89a7d96488710aaeff453fbd09d9a794e1c2a26a Step #5: Base64: ClgMREVGQVVMVCgoQVVMVCgoVChDT0xVTU5TKCd7ACFOfHskJCQkJCQkJAInKQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3174 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1009642821 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560d534b7d60, 0x560d536a071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560d536a0720,0x560d5552a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/89a7d96488710aaeff453fbd09d9a794e1c2a26a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3892 processed earlier; will process 7084 files now Step #5: ==114340== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560d49ffa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560d50635728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560d5061846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560d5061838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560d4a000652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560d49f6142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560d49f5bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560d49ff2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560d4d0218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560d4d0218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560d4d0218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560d4d0218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560d4d0218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560d4d0218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560d4d0218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560d4d0218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560d4d0218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560d4d0218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560d4f22645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560d4bf82578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560d4bf8d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560d4bd38d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560d4bd38d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560d4bd39808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560d4bd38944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560d4bd38944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560d4bd38944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560d5061a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560d506237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560d5060b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560d50635fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc9ba2a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560d49f5a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8,0xe2,0x80,0xa8, Step #5: \342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250\342\200\250 Step #5: artifact_prefix='./'; Test unit written to ./oom-96c8378b4a42fc2d4ae1e25f414e9c4f58e6de36 Step #5: Base64: 4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo4oCo Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3175 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1010149569 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564876662d60, 0x56487684b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56487684b720,0x5648786d52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/96c8378b4a42fc2d4ae1e25f414e9c4f58e6de36' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3893 processed earlier; will process 7083 files now Step #5: ==114376== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56486d1a52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5648737e0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5648737c346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5648737c338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56486d1ab652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56486d10c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56486d106c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56486d19d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5648701cc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5648701cc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5648701cc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5648701cc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5648701cc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5648701cc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5648701cc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5648701cc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5648701cc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5648701cc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5648723d145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56486f12d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56486f1385a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56486eee3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56486eee3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56486eee4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56486eee3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56486eee3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56486eee3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5648737c594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5648737ce7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5648737b6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5648737e0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fea15dbd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56486d10543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0x5,0xb,0xb,0xb,0xb,0xb,0x5,0xb,0xb,0xb,0xa,0xb,0x5,0xb,0xb,0xb,0xb,0xb,0x5,0xb,0xb,0xb,0xb,0xb,0x5,0xb,0xb,0xb,0xb,0xb,0x5,0xb,0xb,0xb,0xb,0xb,0x5,0xb,0xb,0xb,0xb,0xb,0x5,0xb,0xb,0xb,0xb, Step #5: \013\005\013\013\013\013\013\005\013\013\013\012\013\005\013\013\013\013\013\005\013\013\013\013\013\005\013\013\013\013\013\005\013\013\013\013\013\005\013\013\013\013\013\005\013\013\013\013 Step #5: artifact_prefix='./'; Test unit written to ./oom-d245e4c64c30e9a39809c264d905d7e06f9217c7 Step #5: Base64: CwULCwsLCwULCwsKCwULCwsLCwULCwsLCwULCwsLCwULCwsLCwULCwsLCwULCwsL Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3176 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1010666972 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555ed0398d60, 0x555ed058171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555ed0581720,0x555ed240b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d245e4c64c30e9a39809c264d905d7e06f9217c7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3894 processed earlier; will process 7082 files now Step #5: ==114412== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555ec6edb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555ecd516728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555ecd4f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555ecd4f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555ec6ee1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555ec6e4242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555ec6e3cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555ec6ed3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555ec9f028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555ec9f028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555ec9f028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555ec9f028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555ec9f028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555ec9f028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555ec9f028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555ec9f028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555ec9f028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555ec9f028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555ecc10745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555ec8e63578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555ec8e6e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555ec8c19d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555ec8c19d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555ec8c1a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555ec8c19944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555ec8c19944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555ec8c19944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555ecd4fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555ecd5047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555ecd4ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555ecd516fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7b6a0cf082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555ec6e3b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x9a,0x9d,0xe1,0x9a,0x98,0xe1,0x9a,0x9d,0xe1,0x9a,0x98,0xe1,0x9a,0x9d,0xe1,0x9a,0x98,0xe1,0x9a,0x98,0xe1,0x9a,0x9c,0xe1,0x9a,0x9d,0xe1,0x9a,0x9c,0xe1,0x9a,0x9d,0xe1,0x9a,0x98,0xe1,0x9a,0x98,0xe1,0x9a,0x9c,0xe1,0x9a,0x9d,0xe1,0x9a,0x9c, Step #5: \341\232\235\341\232\230\341\232\235\341\232\230\341\232\235\341\232\230\341\232\230\341\232\234\341\232\235\341\232\234\341\232\235\341\232\230\341\232\230\341\232\234\341\232\235\341\232\234 Step #5: artifact_prefix='./'; Test unit written to ./oom-983a48518ff586a686d9bd1ecec00c267e425b11 Step #5: Base64: 4Zqd4ZqY4Zqd4ZqY4Zqd4ZqY4ZqY4Zqc4Zqd4Zqc4Zqd4ZqY4ZqY4Zqc4Zqd4Zqc Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3177 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1011191936 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b2c985bd60, 0x55b2c9a4471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b2c9a44720,0x55b2cb8ce2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/983a48518ff586a686d9bd1ecec00c267e425b11' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3895 processed earlier; will process 7081 files now Step #5: ==114448== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b2c039e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b2c69d9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b2c69bc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b2c69bc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b2c03a4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b2c030542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b2c02ffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b2c0396595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b2c33c58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b2c33c58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b2c33c58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b2c33c58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b2c33c58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b2c33c58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b2c33c58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b2c33c58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b2c33c58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b2c33c58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b2c55ca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b2c2326578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b2c23315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b2c20dcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b2c20dcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b2c20dd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b2c20dc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b2c20dc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b2c20dc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b2c69be94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b2c69c77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b2c69af529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b2c69d9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa02f171082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b2c02fe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x1,0x1,0x1,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40,0x40, Step #5: \001\001\001\001@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Step #5: artifact_prefix='./'; Test unit written to ./oom-d9f9286eb6293c8f3604c6e1b99429c7cc39c045 Step #5: Base64: AQEBAUBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3178 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1011741354 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a421550d60, 0x55a42173971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a421739720,0x55a4235c32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d9f9286eb6293c8f3604c6e1b99429c7cc39c045' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3896 processed earlier; will process 7080 files now Step #5: ==114484== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4180932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a41e6ce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a41e6b146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a41e6b138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a418099652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a417ffa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a417ff4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a41808b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a41b0ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a41b0ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a41b0ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a41b0ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a41b0ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a41b0ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a41b0ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a41b0ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a41b0ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a41b0ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a41d2bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a41a01b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a41a0265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a419dd1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a419dd1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a419dd2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a419dd1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a419dd1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a419dd1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a41e6b394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a41e6bc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a41e6a4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a41e6cefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08aea4d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a417ff343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1e,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a,0xa,0x2a,0x2a, Step #5: \036**\012**\012**\012**\012**\012**\012**\012**\012**\012**\012**\012**\012**\012**\012**\012** Step #5: artifact_prefix='./'; Test unit written to ./oom-ca1ab34fa1229c8bc54cc38ad61931444c4483bf Step #5: Base64: HioqCioqCioqCioqCioqCioqCioqCioqCioqCioqCioqCioqCioqCioqCioqCioq Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3179 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1012265296 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b558a9d60, 0x563b55a9271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b55a92720,0x563b5791c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ca1ab34fa1229c8bc54cc38ad61931444c4483bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3897 processed earlier; will process 7079 files now Step #5: #1 pulse cov: 11260 ft: 11261 exec/s: 0 rss: 192Mb Step #5: ==114520== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563b4c3ec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b52a27728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b52a0a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b52a0a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563b4c3f2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563b4c35342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563b4c34dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563b4c3e4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b4f4138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b4f4138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b4f4138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b4f4138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b4f4138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b4f4138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b4f4138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b4f4138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b4f4138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b4f4138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b5161845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b4e374578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b4e37f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b4e12ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b4e12ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b4e12b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b4e12a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b4e12a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b4e12a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b52a0c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b52a157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b529fd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b52a27fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f02b49ce082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563b4c34c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf2,0xb0,0x81,0x9f,0xe7,0xa4,0x80,0xef,0x9d,0x80,0xef,0xa4,0x9f,0xe7,0xa4,0x80,0xef,0xa4,0x9f,0xef,0xa4,0x8d,0xef,0x9e,0x81,0x98,0x21,0xa,0x2d,0xa,0x2d,0xa,0x3a,0xa,0xf3,0xa0,0x81,0x97,0x21,0xa,0xf3,0xa0,0x81,0x97,0x80,0xef,0xa4,0xbf, Step #5: \362\260\201\237\347\244\200\357\235\200\357\244\237\347\244\200\357\244\237\357\244\215\357\236\201\230!\012-\012-\012:\012\363\240\201\227!\012\363\240\201\227\200\357\244\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-35440dd74236ebfa2a74f69a7be1624204dae1f5 Step #5: Base64: 8rCBn+ekgO+dgO+kn+ekgO+kn++kje+egZghCi0KLQo6CvOggZchCvOggZeA76S/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3180 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1012869514 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aae4555d60, 0x55aae473e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aae473e720,0x55aae65c82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/35440dd74236ebfa2a74f69a7be1624204dae1f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3899 processed earlier; will process 7077 files now Step #5: #1 pulse cov: 3738 ft: 3739 exec/s: 0 rss: 171Mb Step #5: ==114556== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aadb0982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aae16d3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aae16b646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aae16b638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aadb09e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aadafff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aadaff9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aadb090595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aade0bf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aade0bf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aade0bf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aade0bf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aade0bf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aade0bf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aade0bf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aade0bf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aade0bf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aade0bf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aae02c445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aadd020578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aadd02b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aadcdd6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aadcdd6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aadcdd7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aadcdd6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aadcdd6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aadcdd6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aae16b894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aae16c17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aae16a9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aae16d3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c73e83082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aadaff843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x24,0x24,0xcb,0x91,0x23,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x23,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0xdd,0xdb,0xdb,0xcc,0x3,0x7e,0x47,0x46,0x44,0x7e,0x91,0x47, Step #5: ID$$\313\221#$$$$$$$#$$$$$$$$$$$$$$$$$$$$$\335\333\333\314\003~GFD~\221G Step #5: artifact_prefix='./'; Test unit written to ./oom-03b8f18491634387ebe48c508a412e1e075c3e73 Step #5: Base64: SUQkJMuRIyQkJCQkJCQjJCQkJCQkJCQkJCQkJCQkJCQkJCQk3dvbzAN+R0ZEfpFH Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3181 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1013436746 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562dafe3ed60, 0x562db002771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562db0027720,0x562db1eb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/03b8f18491634387ebe48c508a412e1e075c3e73' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3901 processed earlier; will process 7075 files now Step #5: ==114592== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562da69812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562dacfbc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562dacf9f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562dacf9f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562da6987652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562da68e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562da68e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562da6979595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562da99a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562da99a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562da99a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562da99a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562da99a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562da99a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562da99a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562da99a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562da99a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562da99a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562dabbad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562da8909578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562da89145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562da86bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562da86bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562da86c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562da86bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562da86bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562da86bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562dacfa194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562dacfaa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562dacf92529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562dacfbcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f557cc5d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562da68e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd,0x2d,0x2d,0xd, Step #5: --\015--\015--\015--\015--\015--\015--\015--\015--\015--\015--\015--\015--\015--\015--\015--\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-0aa0df1992c605ae16de1269eb26db246b53f287 Step #5: Base64: LS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0NLS0N Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3182 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1013961137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558000410d60, 0x5580005f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5580005f9720,0x5580024832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0aa0df1992c605ae16de1269eb26db246b53f287' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3902 processed earlier; will process 7074 files now Step #5: ==114628== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557ff6f532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557ffd58e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557ffd57146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557ffd57138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557ff6f59652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557ff6eba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557ff6eb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557ff6f4b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557ff9f7a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557ff9f7a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557ff9f7a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557ff9f7a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557ff9f7a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557ff9f7a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557ff9f7a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557ff9f7a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557ff9f7a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557ff9f7a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557ffc17f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557ff8edb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557ff8ee65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557ff8c91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557ff8c91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557ff8c92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557ff8c91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557ff8c91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557ff8c91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557ffd57394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557ffd57c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557ffd564529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557ffd58efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82cc5a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557ff6eb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa,0x3d,0xd,0xa, Step #5: =\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012=\015\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-0177e93d968ab83ec2938345d86000b2bd92a2ea Step #5: Base64: PQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0KPQ0K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3183 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1014473515 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557c8bf77d60, 0x557c8c16071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557c8c160720,0x557c8dfea2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0177e93d968ab83ec2938345d86000b2bd92a2ea' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3903 processed earlier; will process 7073 files now Step #5: ==114664== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557c82aba2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557c890f5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557c890d846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557c890d838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557c82ac0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557c82a2142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557c82a1bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557c82ab2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557c85ae18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557c85ae18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557c85ae18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557c85ae18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557c85ae18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557c85ae18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557c85ae18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557c85ae18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557c85ae18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557c85ae18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557c87ce645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557c84a42578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557c84a4d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557c847f8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557c847f8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557c847f9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557c847f8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557c847f8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557c847f8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557c890da94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557c890e37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557c890cb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557c890f5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f00224ce082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557c82a1a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x4c,0x36,0x35,0x5c,0x40,0x5c,0x31,0x5c,0x31,0x5c,0x8,0x5c,0x45,0x2f,0x2e,0x5c,0x5d,0x5b,0x3a,0x4e,0x7d,0x5b,0xf3,0x9f,0xbf,0xbf,0x7b,0xf3,0xa0,0x85,0x9e,0x3a,0x5d,0x5c,0x1c,0x5d,0x5c,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x0,0x2f, Step #5: AL65\\@\\1\\1\\\010\\E/.\\][:N}[\363\237\277\277{\363\240\205\236:]\\\034]\\\377\377\377\377\377\377\377\377\000/ Step #5: artifact_prefix='./'; Test unit written to ./oom-d238659b659322e7f96eb05fbe043b4622bff6e3 Step #5: Base64: QUw2NVxAXDFcMVwIXEUvLlxdWzpOfVvzn7+/e/OghZ46XVwcXVz//////////wAv Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3184 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1014992849 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea4871cd60, 0x55ea4890571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea48905720,0x55ea4a78f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d238659b659322e7f96eb05fbe043b4622bff6e3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3904 processed earlier; will process 7072 files now Step #5: ==114700== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea3f25f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea4589a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea4587d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea4587d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea3f265652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea3f1c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea3f1c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea3f257595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea422868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea422868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea422868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea422868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea422868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea422868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea422868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea422868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea422868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea422868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea4448b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea411e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea411f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea40f9dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea40f9dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea40f9e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea40f9d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea40f9d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea40f9d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea4587f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea458887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea45870529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea4589afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff10fb96082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea3f1bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xa8,0x8e,0xe0,0xac,0x8e,0xe0,0xa7,0x8e,0xe0,0xa7,0x8d,0xe0,0xac,0x8e,0xe0,0xa7,0x8e,0xe0,0xa7,0x8e,0xe0,0xa8,0x8e,0xe0,0xac,0x8e,0xe0,0xa7,0x8e,0xe0,0xa7,0x8d,0xe0,0xac,0x8e,0xe0,0xa7,0x8e,0xe0,0xa7,0x8e,0xe0,0xa8,0x8e,0xe0,0xa8,0x8e, Step #5: \340\250\216\340\254\216\340\247\216\340\247\215\340\254\216\340\247\216\340\247\216\340\250\216\340\254\216\340\247\216\340\247\215\340\254\216\340\247\216\340\247\216\340\250\216\340\250\216 Step #5: artifact_prefix='./'; Test unit written to ./oom-01e8d96ac356db8770ae3dbdcc4b5a4675ade8aa Step #5: Base64: 4KiO4KyO4KeO4KeN4KyO4KeO4KeO4KiO4KyO4KeO4KeN4KyO4KeO4KeO4KiO4KiO Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3185 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1015506316 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55930575bd60, 0x55930594471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559305944720,0x5593077ce2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/01e8d96ac356db8770ae3dbdcc4b5a4675ade8aa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3905 processed earlier; will process 7071 files now Step #5: ==114736== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5592fc29e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5593028d9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5593028bc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5593028bc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5592fc2a4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5592fc20542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5592fc1ffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5592fc296595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5592ff2c58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5592ff2c58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5592ff2c58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5592ff2c58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5592ff2c58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5592ff2c58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5592ff2c58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5592ff2c58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5592ff2c58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5592ff2c58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5593014ca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5592fe226578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5592fe2315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5592fdfdcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5592fdfdcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5592fdfdd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5592fdfdc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5592fdfdc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5592fdfdc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5593028be94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5593028c77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5593028af529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5593028d9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc75fa01082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5592fc1fe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x33,0x32,0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x37,0x37,0x5c,0x37,0x34,0x5c,0x37,0x37,0x5c,0x37,0x36,0x5c,0x37,0x36,0x5c,0x37,0x37,0x5c,0x35,0x33, Step #5: \\77\\77\\77\\77\\77\\77\\32\\77\\77\\77\\74\\77\\76\\76\\77\\53 Step #5: artifact_prefix='./'; Test unit written to ./oom-19e1c0b6d9111490f3565930728a0a60620e6f87 Step #5: Base64: XDc3XDc3XDc3XDc3XDc3XDc3XDMyXDc3XDc3XDc3XDc0XDc3XDc2XDc2XDc3XDUz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3186 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1016030894 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560cbb928d60, 0x560cbbb1171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560cbbb11720,0x560cbd99b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/19e1c0b6d9111490f3565930728a0a60620e6f87' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3906 processed earlier; will process 7070 files now Step #5: ==114772== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560cb246b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560cb8aa6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560cb8a8946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560cb8a8938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560cb2471652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560cb23d242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560cb23ccc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560cb2463595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560cb54928c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560cb54928c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560cb54928c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560cb54928c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560cb54928c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560cb54928c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560cb54928c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560cb54928c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560cb54928c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560cb54928c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560cb769745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560cb43f3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560cb43fe5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560cb41a9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560cb41a9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560cb41aa808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560cb41a9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560cb41a9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560cb41a9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560cb8a8b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560cb8a947b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560cb8a7c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560cb8aa6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fab893e9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560cb23cb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x32,0x5f,0x39,0x2a,0x2a,0x39,0x2a,0x2a,0x33,0x2e,0x30,0x38,0x33,0x30,0x37,0x34,0x34,0x5f,0x34,0x30,0x35,0x35,0x32,0x36,0x32,0x35,0x31,0x30,0x35,0x31,0x37,0x33,0x33,0x37,0x31,0x39,0x30,0x34,0x38,0x38,0x65,0x2d,0xff,0x0,0x0,0xf5,0x5f, Step #5: 02_9**9**3.0830744_4055262510517337190488e-\377\000\000\365_ Step #5: artifact_prefix='./'; Test unit written to ./oom-cdf418e850dbdf67e37e5ac859b61db5b6077002 Step #5: Base64: MDJfOSoqOSoqMy4wODMwNzQ0XzQwNTUyNjI1MTA1MTczMzcxOTA0ODhlLf8AAPVf Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3187 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1016552212 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563b5016fd60, 0x563b5035871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563b50358720,0x563b521e22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cdf418e850dbdf67e37e5ac859b61db5b6077002' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3907 processed earlier; will process 7069 files now Step #5: ==114808== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563b46cb22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563b4d2ed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563b4d2d046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563b4d2d038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563b46cb8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563b46c1942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563b46c13c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563b46caa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563b49cd98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563b49cd98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563b49cd98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563b49cd98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563b49cd98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563b49cd98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563b49cd98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563b49cd98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563b49cd98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563b49cd98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563b4bede45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563b48c3a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563b48c455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563b489f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563b489f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563b489f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563b489f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563b489f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563b489f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563b4d2d294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563b4d2db7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563b4d2c3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563b4d2edfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe5492d1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563b46c1243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0x2f,0xa,0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0xd2,0xd2,0x81,0xf3,0xd2,0xa0,0xba,0xa0,0xf5,0xa,0x2f,0xa,0x2f,0xa,0x60,0x60,0x20,0x20,0x20,0x60,0xa,0x9, Step #5: `\342\200\210-\000`\012\363\240\201\272/\012`\342\200\210-\000`\012\363\240\201\272\322\322\201\363\322\240\272\240\365\012/\012/\012`` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-1831cc86c2103a981a78d73ee77174d73523a7a4 Step #5: Base64: YOKAiC0AYArzoIG6Lwpg4oCILQBgCvOggbrS0oHz0qC6oPUKLwovCmBgICAgYAoJ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3188 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1017193713 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560cf602dd60, 0x560cf621671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560cf6216720,0x560cf80a02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1831cc86c2103a981a78d73ee77174d73523a7a4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3908 processed earlier; will process 7068 files now Step #5: #1 pulse cov: 3982 ft: 3983 exec/s: 0 rss: 175Mb Step #5: #2 pulse cov: 4092 ft: 4733 exec/s: 0 rss: 176Mb Step #5: ==114844== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560cecb702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560cf31ab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560cf318e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560cf318e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560cecb76652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560cecad742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560cecad1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560cecb68595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560cefb978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560cefb978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560cefb978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560cefb978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560cefb978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560cefb978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560cefb978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560cefb978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560cefb978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560cefb978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560cf1d9c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ceeaf8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ceeb035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560cee8aed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560cee8aed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560cee8af808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560cee8ae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560cee8ae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560cee8ae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560cf319094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560cf31997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560cf3181529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560cf31abfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f03919e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560cecad043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x32,0x0,0xa,0xd8,0x80,0x4,0x0,0x0,0xa,0x2d,0x20,0x0,0x0,0x4f,0x0,0x4f,0x59,0x3e,0x2d,0x31,0x2b,0x34,0x27,0x0,0x54,0x3a,0xd8,0x80,0x4,0x2e,0x2b,0x59,0x3e,0x2d,0x31,0x2b,0x34,0x27,0x0,0x54,0x3a,0xd8,0x80,0x4,0x2e,0x2b,0x0, Step #5: 22\000\012\330\200\004\000\000\012- \000\000O\000OY>-1+4'\000T:\330\200\004.+Y>-1+4'\000T:\330\200\004.+\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-cca48ba539350df8dc61afc1d1c2f6e111d5dd35 Step #5: Base64: MjIACtiABAAACi0gAABPAE9ZPi0xKzQnAFQ62IAELitZPi0xKzQnAFQ62IAELisA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3189 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1017806342 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561bc858ed60, 0x561bc877771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561bc8777720,0x561bca6012c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cca48ba539350df8dc61afc1d1c2f6e111d5dd35' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3911 processed earlier; will process 7065 files now Step #5: ==114880== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561bbf0d12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561bc570c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561bc56ef46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561bc56ef38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561bbf0d7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561bbf03842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561bbf032c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561bbf0c9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561bc20f88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561bc20f88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561bc20f88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561bc20f88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561bc20f88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561bc20f88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561bc20f88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561bc20f88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561bc20f88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561bc20f88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561bc42fd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561bc1059578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561bc10645a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561bc0e0fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561bc0e0fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561bc0e10808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561bc0e0f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561bc0e0f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561bc0e0f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561bc56f194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561bc56fa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561bc56e2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561bc570cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f53047ef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561bbf03143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x83,0x8c,0xe3,0x81,0x8d,0xe3,0x83,0x8d,0xe3,0x83,0x8c,0xe3,0x83,0x8c,0xe3,0x81,0x8d,0xe3,0x83,0x8d,0xe3,0x83,0x8d,0xe3,0x83,0x8c,0xe3,0x81,0x8d,0xe3,0x83,0x8d,0xe3,0x83,0x8c,0xe3,0x83,0x8c,0xe3,0x81,0x8d,0xe3,0x83,0x8d,0xe3,0x83,0x8d, Step #5: \343\203\214\343\201\215\343\203\215\343\203\214\343\203\214\343\201\215\343\203\215\343\203\215\343\203\214\343\201\215\343\203\215\343\203\214\343\203\214\343\201\215\343\203\215\343\203\215 Step #5: artifact_prefix='./'; Test unit written to ./oom-9317838abff953cb6dd243a01643b4dbf4cb7543 Step #5: Base64: 44OM44GN44ON44OM44OM44GN44ON44ON44OM44GN44ON44OM44OM44GN44ON44ON Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3190 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1018329219 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581ec472d60, 0x5581ec65b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581ec65b720,0x5581ee4e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9317838abff953cb6dd243a01643b4dbf4cb7543' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3912 processed earlier; will process 7064 files now Step #5: #1 pulse cov: 3972 ft: 3973 exec/s: 0 rss: 175Mb Step #5: #2 pulse cov: 4195 ft: 4681 exec/s: 0 rss: 176Mb Step #5: ==114916== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581e2fb52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581e95f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581e95d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581e95d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581e2fbb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581e2f1c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581e2f16c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581e2fad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581e5fdc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581e5fdc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581e5fdc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581e5fdc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581e5fdc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581e5fdc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581e5fdc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581e5fdc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581e5fdc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581e5fdc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581e81e145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581e4f3d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581e4f485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581e4cf3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581e4cf3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581e4cf4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581e4cf3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581e4cf3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581e4cf3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581e95d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581e95de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581e95c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581e95f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce82776082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581e2f1543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbf,0xae,0xe0,0xa7,0xaf,0xe0,0xaf,0xaf,0xe0,0xaf,0xa7,0xe0,0xaf,0xaf,0xe0,0xae,0xaf,0xe0,0xaf,0xaf,0xe0,0xaf,0xaf,0xe0,0xaf,0xa7,0xe0,0xaf,0xaf,0xe0,0xae,0xaf,0xe0,0xaf,0xaf,0xe0,0xae,0xaf,0xe0,0xaf,0xaf,0xe0,0xaf,0xaf,0xe0,0xa0,0xb3, Step #5: \340\277\256\340\247\257\340\257\257\340\257\247\340\257\257\340\256\257\340\257\257\340\257\257\340\257\247\340\257\257\340\256\257\340\257\257\340\256\257\340\257\257\340\257\257\340\240\263 Step #5: artifact_prefix='./'; Test unit written to ./oom-d811ab12d7e956af945dc8ab1324282685ae2e7b Step #5: Base64: 4L+u4Kev4K+v4K+n4K+v4K6v4K+v4K+v4K+n4K+v4K6v4K+v4K6v4K+v4K+v4KCz Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3191 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1018941939 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc3e5b5d60, 0x55dc3e79e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc3e79e720,0x55dc406282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d811ab12d7e956af945dc8ab1324282685ae2e7b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3915 processed earlier; will process 7061 files now Step #5: ==114952== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc350f82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc3b733728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc3b71646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc3b71638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc350fe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc3505f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc35059c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc350f0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc3811f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc3811f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc3811f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc3811f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc3811f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc3811f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc3811f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc3811f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc3811f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc3811f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc3a32445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc37080578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc3708b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc36e36d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc36e36d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc36e37808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc36e36944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc36e36944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc36e36944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc3b71894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc3b7217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc3b709529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc3b733fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f56b59d9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc3505843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x6f,0x6e,0x74,0x65,0x6e,0x74,0x2d,0x54,0x72,0x61,0x6e,0x73,0x66,0x65,0x72,0x2d,0x45,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3a,0x62,0x61,0x73,0x65,0x36,0x34,0xa,0xa,0x43,0x6f,0x6d,0x75,0xa,0x65,0x65,0x38,0x4b,0xa,0x43,0x6f,0x72,0x6e, Step #5: Content-Transfer-Encoding:base64\012\012Comu\012ee8K\012Corn Step #5: artifact_prefix='./'; Test unit written to ./oom-87ee20ddb21218b8bcfa19deac55f048c4681142 Step #5: Base64: Q29udGVudC1UcmFuc2Zlci1FbmNvZGluZzpiYXNlNjQKCkNvbXUKZWU4SwpDb3Ju Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3192 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1019458155 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560493bb2d60, 0x560493d9b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560493d9b720,0x560495c252c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87ee20ddb21218b8bcfa19deac55f048c4681142' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3916 processed earlier; will process 7060 files now Step #5: #1 pulse cov: 3556 ft: 3557 exec/s: 0 rss: 171Mb Step #5: ==114988== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56048a6f52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560490d30728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560490d1346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560490d1338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56048a6fb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56048a65c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56048a656c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56048a6ed595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56048d71c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56048d71c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56048d71c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56048d71c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56048d71c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56048d71c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56048d71c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56048d71c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56048d71c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56048d71c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56048f92145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56048c67d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56048c6885a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56048c433d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56048c433d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56048c434808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56048c433944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56048c433944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56048c433944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560490d1594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560490d1e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560490d06529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560490d30fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb25a69082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56048a65543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0x32,0x0,0xa,0xd8,0x80,0x4,0x0,0x0,0xa,0x2d,0x20,0x0,0x0,0x4f,0x0,0x4f,0x59,0x3e,0x2d,0x31,0x2b,0x34,0x28,0x0,0x54,0x3a,0xd8,0x80,0x4,0x2e,0x2b,0x59,0x3e,0x2d,0x31,0x2b,0x34,0x27,0x0,0x54,0x3a,0xd8,0x80,0x4,0x2e,0xd8,0x80, Step #5: 22\000\012\330\200\004\000\000\012- \000\000O\000OY>-1+4(\000T:\330\200\004.+Y>-1+4'\000T:\330\200\004.\330\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-d5be093be8670493377a0e4c8c04aa47e0e10f5c Step #5: Base64: MjIACtiABAAACi0gAABPAE9ZPi0xKzQoAFQ62IAELitZPi0xKzQnAFQ62IAELtiA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3193 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1020033093 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5582fde66d60, 0x5582fe04f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5582fe04f720,0x5582ffed92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d5be093be8670493377a0e4c8c04aa47e0e10f5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3918 processed earlier; will process 7058 files now Step #5: #1 pulse cov: 3502 ft: 3503 exec/s: 0 rss: 172Mb Step #5: ==115024== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5582f49a92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5582fafe4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5582fafc746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5582fafc738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5582f49af652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5582f491042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5582f490ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5582f49a1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5582f79d08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5582f79d08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5582f79d08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5582f79d08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5582f79d08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5582f79d08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5582f79d08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5582f79d08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5582f79d08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5582f79d08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5582f9bd545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5582f6931578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5582f693c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5582f66e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5582f66e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5582f66e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5582f66e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5582f66e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5582f66e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5582fafc994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5582fafd27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5582fafba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5582fafe4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f843b8f7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5582f490943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x8,0x0,0x7,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x8,0x0,0x7,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x2e,0x0,0x2e,0x2b,0x42,0xdb,0xbe,0x7c,0xdb,0xbe,0x2b,0x2b,0x2b, Step #5: - \010\000\007\000\000\000\000\000\000\000\000\000\000\000\000\000\010\000\007\000\000\000\000\000\000\000\000\000\000\000\000\000\000.\000.+B\333\276|\333\276+++ Step #5: artifact_prefix='./'; Test unit written to ./oom-45d6b93a9c013294c2e594c56cecb624399d9279 Step #5: Base64: LSAIAAcAAAAAAAAAAAAAAAAACAAHAAAAAAAAAAAAAAAAAAAuAC4rQtu+fNu+Kysr Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3194 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1020598891 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b76f066d60, 0x55b76f24f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b76f24f720,0x55b7710d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/45d6b93a9c013294c2e594c56cecb624399d9279' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3920 processed earlier; will process 7056 files now Step #5: ==115060== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b765ba92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b76c1e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b76c1c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b76c1c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b765baf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b765b1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b765b0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b765ba1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b768bd08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b768bd08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b768bd08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b768bd08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b768bd08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b768bd08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b768bd08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b768bd08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b768bd08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b768bd08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b76add545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b767b31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b767b3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7678e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7678e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7678e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7678e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7678e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7678e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b76c1c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b76c1d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b76c1ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b76c1e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8bf113082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b765b0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0x93,0xa0,0xef,0x93,0x97,0xef,0x93,0xa0,0xef,0x93,0xa0,0xef,0x93,0x97,0xef,0x93,0xa0,0xef,0x93,0x97,0xef,0x93,0xa0,0xef,0x93,0xa0,0xef,0x93,0x97,0xef,0x93,0xa0,0xef,0x93,0x97,0xef,0x93,0xa0,0xef,0x93,0x97,0xef,0x93,0xa0,0xef,0x93,0x97, Step #5: \357\223\240\357\223\227\357\223\240\357\223\240\357\223\227\357\223\240\357\223\227\357\223\240\357\223\240\357\223\227\357\223\240\357\223\227\357\223\240\357\223\227\357\223\240\357\223\227 Step #5: artifact_prefix='./'; Test unit written to ./oom-7e7df5c484a17f349823d45e0306cfb6abfde392 Step #5: Base64: 75Og75OX75Og75Og75OX75Og75OX75Og75Og75OX75Og75OX75Og75OX75Og75OX Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3195 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1021112834 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dab8409d60, 0x55dab85f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dab85f2720,0x55daba47c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7e7df5c484a17f349823d45e0306cfb6abfde392' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3921 processed earlier; will process 7055 files now Step #5: ==115096== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55daaef4c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dab5587728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dab556a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dab556a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55daaef52652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55daaeeb342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55daaeeadc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55daaef44595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dab1f738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dab1f738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dab1f738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dab1f738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dab1f738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dab1f738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dab1f738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dab1f738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dab1f738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dab1f738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dab417845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dab0ed4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dab0edf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dab0c8ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dab0c8ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dab0c8b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dab0c8a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dab0c8a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dab0c8a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dab556c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dab55757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dab555d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dab5587fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f044f848082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55daaeeac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x43,0x6f,0x6e,0x74,0x65,0x6e,0x74,0x2d,0x54,0x79,0x70,0x65,0x3a,0x6d,0x75,0x6c,0x74,0x69,0x50,0x61,0x72,0x74,0x2f,0x73,0x69,0x67,0x6e,0x65,0x64,0x3b,0x62,0x6f,0x75,0x6e,0x64,0x61,0x72,0x79,0x3d,0x22,0x22,0xa,0xa,0x2d,0x2d,0xa,0xd,0xd, Step #5: Content-Type:multiPart/signed;boundary=\"\"\012\012--\012\015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-921a2656086d06b98eb66e8e90506e25b7ee7ec9 Step #5: Base64: Q29udGVudC1UeXBlOm11bHRpUGFydC9zaWduZWQ7Ym91bmRhcnk9IiIKCi0tCg0N Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3196 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1021634898 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560fe03a0d60, 0x560fe058971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560fe0589720,0x560fe24132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/921a2656086d06b98eb66e8e90506e25b7ee7ec9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3922 processed earlier; will process 7054 files now Step #5: ==115132== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560fd6ee32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560fdd51e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560fdd50146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560fdd50138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560fd6ee9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560fd6e4a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560fd6e44c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560fd6edb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560fd9f0a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560fd9f0a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560fd9f0a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560fd9f0a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560fd9f0a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560fd9f0a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560fd9f0a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560fd9f0a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560fd9f0a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560fd9f0a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560fdc10f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560fd8e6b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560fd8e765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560fd8c21d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560fd8c21d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560fd8c22808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560fd8c21944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560fd8c21944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560fd8c21944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560fdd50394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560fdd50c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560fdd4f4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560fdd51efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fac0ba9f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560fd6e4343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xee,0x9b,0x8f,0xe1,0x9b,0x8f,0xe1,0x8b,0x8f,0xee,0x9b,0x8f,0xe1,0x9b,0x8f,0xe1,0x8b,0x8f,0xee,0x9b,0x8f,0xe1,0x93,0x8f,0xe1,0x8b,0x8f,0xe1,0xb4,0x9b,0xe1,0x9b,0x8f,0xe1,0x8b,0x8f,0xee,0x9b,0x8f,0xe1,0x93,0x8f,0xe1,0x8b,0x8f,0xe1,0xb4,0x9b, Step #5: \356\233\217\341\233\217\341\213\217\356\233\217\341\233\217\341\213\217\356\233\217\341\223\217\341\213\217\341\264\233\341\233\217\341\213\217\356\233\217\341\223\217\341\213\217\341\264\233 Step #5: artifact_prefix='./'; Test unit written to ./oom-eded9e7fd2c19b65605ca33bc270579fa3bc11cf Step #5: Base64: 7puP4ZuP4YuP7puP4ZuP4YuP7puP4ZOP4YuP4bSb4ZuP4YuP7puP4ZOP4YuP4bSb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3197 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1022154271 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557f5bb16d60, 0x557f5bcff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557f5bcff720,0x557f5db892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eded9e7fd2c19b65605ca33bc270579fa3bc11cf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3923 processed earlier; will process 7053 files now Step #5: ==115168== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557f526592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557f58c94728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557f58c7746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557f58c7738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557f5265f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557f525c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557f525bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557f52651595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557f556808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557f556808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557f556808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557f556808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557f556808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557f556808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557f556808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557f556808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557f556808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557f556808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557f5788545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557f545e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557f545ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557f54397d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557f54397d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557f54398808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557f54397944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557f54397944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557f54397944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557f58c7994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557f58c827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557f58c6a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557f58c94fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f27d6b0c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557f525b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xeb,0xb6,0xb8,0xe1,0x86,0xab,0xeb,0xb6,0xb8,0xe1,0x86,0xab,0xeb,0xb6,0xb8,0xe1,0x86,0xab,0xeb,0xb6,0xb8,0xe1,0x86,0xab,0xeb,0xb6,0xb8,0xe1,0x86,0xab,0xeb,0xb6,0xb8,0xe1,0x86,0xab,0xeb,0xb6,0xb8,0xe1,0x86,0xa9,0xeb,0xb6,0xb8,0xe1,0x86,0xab, Step #5: \353\266\270\341\206\253\353\266\270\341\206\253\353\266\270\341\206\253\353\266\270\341\206\253\353\266\270\341\206\253\353\266\270\341\206\253\353\266\270\341\206\251\353\266\270\341\206\253 Step #5: artifact_prefix='./'; Test unit written to ./oom-6ba4a29ee10879a37704b6b77bb583b757783b23 Step #5: Base64: 67a44Yar67a44Yar67a44Yar67a44Yar67a44Yar67a44Yar67a44Yap67a44Yar Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3198 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1022675298 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562cf0bccd60, 0x562cf0db571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562cf0db5720,0x562cf2c3f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ba4a29ee10879a37704b6b77bb583b757783b23' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3924 processed earlier; will process 7052 files now Step #5: ==115204== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ce770f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562cedd4a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562cedd2d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562cedd2d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ce7715652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ce767642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ce7670c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ce7707595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562cea7368c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562cea7368c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562cea7368c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562cea7368c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562cea7368c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562cea7368c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562cea7368c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562cea7368c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562cea7368c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562cea7368c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562cec93b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ce9697578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ce96a25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ce944dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ce944dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ce944e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ce944d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ce944d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ce944d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562cedd2f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562cedd387b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562cedd20529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562cedd4afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f274aedc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ce766f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1f,0x52,0x27,0x27,0x27,0x3a,0x0,0xa,0xa,0xa,0xa,0xe2,0x81,0x97,0xe2,0x90,0xa7,0xe2,0x81,0x97,0xe2,0x90,0xa7,0xe2,0x81,0x97,0xe2,0x90,0xae,0xe2,0x81,0x97,0xe2,0x90,0xa7,0xe2,0x89,0xae,0x27,0x27,0x27,0xe2,0x81,0x97,0x4b,0xe2,0x90,0xa7, Step #5: \037R''':\000\012\012\012\012\342\201\227\342\220\247\342\201\227\342\220\247\342\201\227\342\220\256\342\201\227\342\220\247\342\211\256'''\342\201\227K\342\220\247 Step #5: artifact_prefix='./'; Test unit written to ./oom-e5ce234c0c262434b8fe7052d37b82bd78b13573 Step #5: Base64: H1InJyc6AAoKCgrigZfikKfigZfikKfigZfikK7igZfikKfiia4nJyfigZdL4pCn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3199 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1023198411 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55783c93bd60, 0x55783cb2471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55783cb24720,0x55783e9ae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e5ce234c0c262434b8fe7052d37b82bd78b13573' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3925 processed earlier; will process 7051 files now Step #5: ==115240== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55783347e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557839ab9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557839a9c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557839a9c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557833484652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5578333e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5578333dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557833476595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5578364a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5578364a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5578364a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5578364a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5578364a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5578364a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5578364a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5578364a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5578364a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5578364a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5578386aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557835406578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5578354115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5578351bcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5578351bcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5578351bd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5578351bc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5578351bc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5578351bc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557839a9e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557839aa77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557839a8f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557839ab9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ea0aa3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5578333de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x22,0x24,0x24,0x20,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x37, Step #5: ID$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$\"$$ \377\377\377\377\377\377\3777 Step #5: artifact_prefix='./'; Test unit written to ./oom-f655c27f4ab2cb2a38c67503a45021f31874de78 Step #5: Base64: SUQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkIiQkIP////////83 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3200 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1023721658 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c932789d60, 0x55c93297271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c932972720,0x55c9347fc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f655c27f4ab2cb2a38c67503a45021f31874de78' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3926 processed earlier; will process 7050 files now Step #5: ==115276== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c9292cc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c92f907728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c92f8ea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c92f8ea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c9292d2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c92923342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c92922dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c9292c4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c92c2f38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c92c2f38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c92c2f38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c92c2f38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c92c2f38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c92c2f38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c92c2f38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c92c2f38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c92c2f38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c92c2f38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c92e4f845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c92b254578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c92b25f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c92b00ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c92b00ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c92b00b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c92b00a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c92b00a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c92b00a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c92f8ec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c92f8f57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c92f8dd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c92f907fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4350da9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c92922c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9,0xe2,0x80,0xa9, Step #5: \342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251\342\200\251 Step #5: artifact_prefix='./'; Test unit written to ./oom-96847397c98b4f8499e86f4e2926394fe7d849ac Step #5: Base64: 4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp4oCp Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3201 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1024220723 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563dc8f25d60, 0x563dc910e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563dc910e720,0x563dcaf982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/96847397c98b4f8499e86f4e2926394fe7d849ac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3927 processed earlier; will process 7049 files now Step #5: ==115312== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563dbfa682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563dc60a3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563dc608646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563dc608638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563dbfa6e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563dbf9cf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563dbf9c9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563dbfa60595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563dc2a8f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563dc2a8f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563dc2a8f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563dc2a8f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563dc2a8f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563dc2a8f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563dc2a8f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563dc2a8f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563dc2a8f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563dc2a8f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563dc4c9445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563dc19f0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563dc19fb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563dc17a6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563dc17a6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563dc17a7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563dc17a6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563dc17a6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563dc17a6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563dc608894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563dc60917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563dc6079529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563dc60a3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdd1c52e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563dbf9c843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0xd,0xd,0x4e,0xd,0xd,0x24,0xd,0xd,0x6e,0xd,0xd,0x24,0xd,0xd,0x4e,0xd,0xd,0x24,0xd,0xd,0x6e,0xd,0xd,0x28,0xd,0xd,0x4e,0xd,0xd,0x24,0xd,0xd,0x6e,0xd,0xd,0x24,0xd,0xd,0x6e,0xd,0xd,0x24,0xd,0xd,0x6e,0xd,0xd, Step #5: (\015\015N\015\015$\015\015n\015\015$\015\015N\015\015$\015\015n\015\015(\015\015N\015\015$\015\015n\015\015$\015\015n\015\015$\015\015n\015\015 Step #5: artifact_prefix='./'; Test unit written to ./oom-b81bcaf92ed5694d26b7dc2400e1cf54fac3ec98 Step #5: Base64: KA0NTg0NJA0Nbg0NJA0NTg0NJA0Nbg0NKA0NTg0NJA0Nbg0NJA0Nbg0NJA0Nbg0N Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3202 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1024736199 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ff8f313d60, 0x55ff8f4fc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ff8f4fc720,0x55ff913862c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b81bcaf92ed5694d26b7dc2400e1cf54fac3ec98' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3928 processed earlier; will process 7048 files now Step #5: ==115348== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ff85e562d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ff8c491728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ff8c47446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ff8c47438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ff85e5c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ff85dbd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ff85db7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ff85e4e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ff88e7d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ff88e7d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ff88e7d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ff88e7d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ff88e7d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ff88e7d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ff88e7d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ff88e7d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ff88e7d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ff88e7d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ff8b08245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ff87dde578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ff87de95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ff87b94d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ff87b94d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ff87b95808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ff87b94944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ff87b94944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ff87b94944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ff8c47694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ff8c47f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ff8c467529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ff8c491fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efdbb99b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ff85db643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e,0x3c,0x74,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-28c1bd809447973c2b4bbe63e74807951163d326 Step #5: Base64: PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+PHQ+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3203 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1025235775 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5589d4498d60, 0x5589d468171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5589d4681720,0x5589d650b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/28c1bd809447973c2b4bbe63e74807951163d326' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3929 processed earlier; will process 7047 files now Step #5: ==115384== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5589cafdb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5589d1616728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5589d15f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5589d15f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5589cafe1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5589caf4242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5589caf3cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5589cafd3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5589ce0028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5589ce0028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5589ce0028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5589ce0028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5589ce0028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5589ce0028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5589ce0028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5589ce0028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5589ce0028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5589ce0028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5589d020745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5589ccf63578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5589ccf6e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5589ccd19d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5589ccd19d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5589ccd1a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5589ccd19944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5589ccd19944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5589ccd19944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5589d15fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5589d16047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5589d15ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5589d1616fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f70cb2a8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5589caf3b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x58,0x23,0x33,0x33,0x5c,0x53,0x5c,0x5d,0x5c,0x55,0x5c,0x55,0x5c,0x3d,0x5c,0x53,0x28,0x3f,0x69,0x29,0x5b,0x4b,0x26,0x26,0x7b,0x5d,0x43,0x64,0x2b,0x65,0x52,0x2b,0x32,0x32,0x36,0x5b,0x33,0x5b,0x5e,0x5c,0x70,0x38,0x78,0x31,0x43,0x29,0x27, Step #5: MX#33\\S\\]\\U\\U\\=\\S(?i)[K&&{]Cd+eR+226[3[^\\p8x1C)' Step #5: artifact_prefix='./'; Test unit written to ./oom-b33d75cb2198ad76d8e0f9711912d6a041f0ef48 Step #5: Base64: TVgjMzNcU1xdXFVcVVw9XFMoP2kpW0smJntdQ2QrZVIrMjI2WzNbXlxwOHgxQykn Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3204 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1025860247 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56534ca50d60, 0x56534cc3971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56534cc39720,0x56534eac32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b33d75cb2198ad76d8e0f9711912d6a041f0ef48' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3930 processed earlier; will process 7046 files now Step #5: #1 pulse cov: 3762 ft: 3763 exec/s: 0 rss: 175Mb Step #5: ==115420== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653435932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565349bce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x565349bb146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x565349bb138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565343599652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5653434fa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5653434f4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56534358b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653465ba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653465ba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653465ba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653465ba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653465ba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653465ba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653465ba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653465ba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653465ba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653465ba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5653487bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56534551b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653455265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5653452d1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5653452d1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5653452d2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5653452d1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5653452d1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5653452d1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x565349bb394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x565349bbc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565349ba4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565349bcefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1baaf8c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5653434f343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0x3a,0x8,0xa,0x6,0x5b,0x3a,0x3a,0xdd,0xba,0x5d,0xa,0xa,0x3a,0x8,0xa,0x6,0x5b,0x3a,0x3a,0xdd,0xba,0x5d,0xa,0xa,0x3a,0x8,0xa,0x6,0x5b,0x3a,0x3a,0xdd,0xba,0x5d,0xa,0xa,0x3a,0x8,0xa,0x6,0x5b,0x3a,0x3a,0xdd,0xba,0x5d, Step #5: \012\012:\010\012\006[::\335\272]\012\012:\010\012\006[::\335\272]\012\012:\010\012\006[::\335\272]\012\012:\010\012\006[::\335\272] Step #5: artifact_prefix='./'; Test unit written to ./oom-11d4d87c34b18aee885bc3fa7d656421e453513c Step #5: Base64: Cgo6CAoGWzo63bpdCgo6CAoGWzo63bpdCgo6CAoGWzo63bpdCgo6CAoGWzo63bpd Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3205 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1026536646 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bd60572d60, 0x55bd6075b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bd6075b720,0x55bd625e52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11d4d87c34b18aee885bc3fa7d656421e453513c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3932 processed earlier; will process 7044 files now Step #5: ==115456== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bd570b52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bd5d6f0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bd5d6d346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bd5d6d338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bd570bb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bd5701c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bd57016c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bd570ad595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bd5a0dc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bd5a0dc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bd5a0dc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bd5a0dc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bd5a0dc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bd5a0dc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bd5a0dc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bd5a0dc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bd5a0dc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bd5a0dc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bd5c2e145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bd5903d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bd590485a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bd58df3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bd58df3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bd58df4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bd58df3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bd58df3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bd58df3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bd5d6d594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bd5d6de7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bd5d6c6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bd5d6f0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee89d6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bd5701543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa,0x5c,0xa,0xa, Step #5: \\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012\\\012\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-7068faa2b0970ee0f7f178d0c0e1418e374efa26 Step #5: Base64: XAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoKXAoK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3206 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1027066398 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fd789e7d60, 0x55fd78bd071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fd78bd0720,0x55fd7aa5a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7068faa2b0970ee0f7f178d0c0e1418e374efa26' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3933 processed earlier; will process 7043 files now Step #5: #1 pulse cov: 10986 ft: 10987 exec/s: 0 rss: 190Mb Step #5: ==115492== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fd6f52a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fd75b65728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fd75b4846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fd75b4838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fd6f530652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fd6f49142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fd6f48bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fd6f522595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fd725518c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fd725518c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fd725518c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fd725518c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fd725518c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fd725518c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fd725518c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fd725518c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fd725518c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fd725518c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fd7475645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fd714b2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fd714bd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fd71268d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fd71268d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fd71269808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fd71268944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fd71268944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fd71268944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fd75b4a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fd75b537b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fd75b3b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fd75b65fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe1d98c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fd6f48a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd3,0x81,0xe6,0x8d,0x8b,0x0,0x6b,0x1,0xd3,0x81,0xe6,0x8d,0x8b,0x53,0x0,0x6b,0x1,0x0,0xd3,0x81,0xe6,0x8d,0x8b,0x53,0x6b,0x0,0xe6,0x8d,0x8b,0x5b,0x7e,0x17,0x0,0xd3,0x81,0xe6,0x8d,0x8b,0x53,0x6b,0x2f,0x0,0xe6,0x8d,0x8b,0x5b,0x7e,0x17, Step #5: \323\201\346\215\213\000k\001\323\201\346\215\213S\000k\001\000\323\201\346\215\213Sk\000\346\215\213[~\027\000\323\201\346\215\213Sk/\000\346\215\213[~\027 Step #5: artifact_prefix='./'; Test unit written to ./oom-26f3c8b3a15710020e81769feab5d2f2dd4cdf84 Step #5: Base64: 04HmjYsAawHTgeaNi1MAawEA04HmjYtTawDmjYtbfhcA04HmjYtTay8A5o2LW34X Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3207 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1027675710 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b01feaed60, 0x55b02009771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b020097720,0x55b021f212c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/26f3c8b3a15710020e81769feab5d2f2dd4cdf84' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3935 processed earlier; will process 7041 files now Step #5: #1 pulse cov: 3923 ft: 3924 exec/s: 0 rss: 175Mb Step #5: ==115528== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b0169f12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b01d02c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b01d00f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b01d00f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b0169f7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b01695842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b016952c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b0169e9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b019a188c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b019a188c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b019a188c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b019a188c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b019a188c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b019a188c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b019a188c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b019a188c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b019a188c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b019a188c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b01bc1d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b018979578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b0189845a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b01872fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b01872fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b018730808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b01872f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b01872f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b01872f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b01d01194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b01d01a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b01d002529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b01d02cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f91741a1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b01695143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x44,0x33,0x4,0x27,0x0,0x0,0x61,0x27,0x17,0x54,0x59,0x33,0x45,0x4,0x27,0x0,0x0,0x60,0x27,0x0,0x0,0x61,0x27,0x17,0x54,0x59,0x33,0x45,0x4,0x27,0x0,0x0,0x60,0x27,0x17,0x54,0x59,0x15,0x10,0x0,0x45,0x15,0x0,0x10, Step #5: ID3\004D3\004'\000\000a'\027TY3E\004'\000\000`'\000\000a'\027TY3E\004'\000\000`'\027TY\025\020\000E\025\000\020 Step #5: artifact_prefix='./'; Test unit written to ./oom-920fa985b71f9cdb8769d8ffe8ec71b723e9a082 Step #5: Base64: SUQzBEQzBCcAAGEnF1RZM0UEJwAAYCcAAGEnF1RZM0UEJwAAYCcXVFkVEABFFQAQ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3208 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1028369256 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55971d2f8d60, 0x55971d4e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55971d4e1720,0x55971f36b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/920fa985b71f9cdb8769d8ffe8ec71b723e9a082' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3937 processed earlier; will process 7039 files now Step #5: ==115564== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559713e3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55971a476728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55971a45946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55971a45938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559713e41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559713da242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559713d9cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559713e33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559716e628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559716e628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559716e628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559716e628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559716e628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559716e628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559716e628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559716e628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559716e628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559716e628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55971906745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559715dc3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559715dce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559715b79d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559715b79d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559715b7a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559715b79944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559715b79944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559715b79944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55971a45b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55971a4647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55971a44c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55971a476fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcffa6ff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559713d9b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0x20,0x73,0x5b,0x3c,0x21,0x45,0x4e,0x54,0x49,0x54,0x59,0x20,0x25,0x20,0x78,0xa,0x53,0x59,0x53,0x54,0x45,0x4d,0xa,0x27,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f,0x2e,0x27,0x3e,0x25,0x78,0x3b,0x25,0x44, Step #5: %x;%D Step #5: artifact_prefix='./'; Test unit written to ./oom-896a113eaed5f7186ecf90d58403ec43bf7ec379 Step #5: Base64: PCFET0NUWVBFIHNbPCFFTlRJVFkgJSB4ClNZU1RFTQonaHR0cDovLy4nPiV4OyVE Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3209 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1028886709 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560ce4bb8d60, 0x560ce4da171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560ce4da1720,0x560ce6c2b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/896a113eaed5f7186ecf90d58403ec43bf7ec379' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3938 processed earlier; will process 7038 files now Step #5: #1 pulse cov: 3976 ft: 3977 exec/s: 0 rss: 172Mb Step #5: ==115600== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560cdb6fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ce1d36728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ce1d1946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ce1d1938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560cdb701652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560cdb66242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560cdb65cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560cdb6f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560cde7228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560cde7228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560cde7228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560cde7228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560cde7228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560cde7228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560cde7228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560cde7228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560cde7228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560cde7228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ce092745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560cdd683578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560cdd68e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560cdd439d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560cdd439d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560cdd43a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560cdd439944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560cdd439944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560cdd439944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ce1d1b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ce1d247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ce1d0c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ce1d36fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3dcf65b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560cdb65b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x45,0x3e,0x3c,0x45,0x3e,0x3c,0x45,0x3e,0x3c,0x45,0x3e,0x3c,0x45,0x3e,0x3c,0x45,0x3e,0x3c,0x2f,0x45,0x3c,0x2f,0x45,0x3c,0x2f,0x45,0x3c,0x2f,0x45,0x3c,0x45,0x3e,0x3c,0x45,0x3e,0x3c,0x2f,0x45,0x3c,0x2f,0x45,0x3c,0x2f,0x45,0x3c,0x2f,0x45, Step #5: Step #5: Step #5: #0 0x56094601b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56094c656728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56094c63946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56094c63938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560946021652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560945f8242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560945f7cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560946013595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5609490428c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5609490428c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5609490428c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5609490428c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5609490428c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5609490428c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5609490428c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5609490428c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5609490428c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5609490428c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56094b24745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560947fa3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560947fae5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560947d59d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560947d59d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560947d5a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560947d59944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560947d59944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560947d59944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56094c63b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56094c6447b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56094c62c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56094c656fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbeb5c9d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560945f7b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9,0x30,0x2e,0x9, Step #5: 0.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\0110.\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-ddab00c12d6b9e480b1e50351e1b8bf5ff712fa3 Step #5: Base64: MC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4JMC4J Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3211 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1030004793 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55671c36cd60, 0x55671c55571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55671c555720,0x55671e3df2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ddab00c12d6b9e480b1e50351e1b8bf5ff712fa3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3941 processed earlier; will process 7035 files now Step #5: ==115672== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556712eaf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5567194ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5567194cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5567194cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556712eb5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556712e1642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556712e10c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556712ea7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556715ed68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556715ed68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556715ed68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556715ed68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556715ed68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556715ed68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556715ed68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556715ed68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556715ed68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556715ed68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5567180db45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556714e37578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556714e425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556714bedd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556714bedd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556714bee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556714bed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556714bed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556714bed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5567194cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5567194d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5567194c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5567194eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd50615082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556712e0f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0x81,0x85,0xef,0xa6,0x89,0xef,0x81,0x85,0xef,0xa6,0x81,0xef,0x81,0x85,0xef,0xa6,0x81,0xef,0x81,0x85,0xef,0xa6,0x81,0xef,0x81,0x85,0xef,0xa6,0x89,0xef,0x81,0x85,0xef,0xa6,0x81,0xef,0x81,0x85,0xef,0xa6,0x81,0xef,0x81,0x85,0xef,0xa6,0x81, Step #5: \357\201\205\357\246\211\357\201\205\357\246\201\357\201\205\357\246\201\357\201\205\357\246\201\357\201\205\357\246\211\357\201\205\357\246\201\357\201\205\357\246\201\357\201\205\357\246\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-8925966e3b3dcbac7ca95963ef978c85d895512d Step #5: Base64: 74GF76aJ74GF76aB74GF76aB74GF76aB74GF76aJ74GF76aB74GF76aB74GF76aB Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3212 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1030519386 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563c56c39d60, 0x563c56e2271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563c56e22720,0x563c58cac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8925966e3b3dcbac7ca95963ef978c85d895512d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3942 processed earlier; will process 7034 files now Step #5: ==115708== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563c4d77c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563c53db7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563c53d9a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563c53d9a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563c4d782652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563c4d6e342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563c4d6ddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563c4d774595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563c507a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563c507a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563c507a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563c507a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563c507a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563c507a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563c507a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563c507a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563c507a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563c507a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563c529a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563c4f704578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563c4f70f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563c4f4bad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563c4f4bad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563c4f4bb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563c4f4ba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563c4f4ba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563c4f4ba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563c53d9c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563c53da57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563c53d8d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563c53db7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faf935c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563c4d6dc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbe,0x94,0xef,0xbe,0x94,0xef,0xbe,0x94,0xef,0xbc,0x94,0xef,0xae,0x94,0xef,0xbe,0x94,0xef,0xbe,0x94,0xef,0xbe,0x94,0xef,0xbe,0x94,0xef,0xbe,0x94,0x29,0xbc,0x94,0xe7,0xbe,0x94,0xec,0x9c,0xb8,0xef,0xbe,0x94,0xef,0xbe,0x94,0xef,0xbe,0x0, Step #5: \357\276\224\357\276\224\357\276\224\357\274\224\357\256\224\357\276\224\357\276\224\357\276\224\357\276\224\357\276\224)\274\224\347\276\224\354\234\270\357\276\224\357\276\224\357\276\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-a14474632090ec9b43d445e3838d70738d887ce9 Step #5: Base64: 776U776U776U77yU766U776U776U776U776U776UKbyU576U7Jy4776U776U774A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3213 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1031049470 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56056750cd60, 0x5605676f571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5605676f5720,0x56056957f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a14474632090ec9b43d445e3838d70738d887ce9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3943 processed earlier; will process 7033 files now Step #5: ==115744== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56055e04f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56056468a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56056466d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56056466d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56055e055652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56055dfb642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56055dfb0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56055e047595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5605610768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5605610768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5605610768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5605610768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5605610768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5605610768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5605610768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5605610768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5605610768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5605610768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56056327b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56055ffd7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56055ffe25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56055fd8dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56055fd8dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56055fd8e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56055fd8d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56055fd8d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56055fd8d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56056466f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5605646787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560564660529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56056468afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f042d2f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56055dfaf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0x84,0x91,0xe1,0x85,0xaa,0xe1,0x84,0x91,0xe1,0x85,0xb0,0xe1,0x84,0x91,0xe1,0x85,0xb0,0xe1,0x84,0x91,0xe1,0x85,0xa2,0xe1,0x84,0x91,0xe1,0x85,0xb0,0xe1,0x84,0x91,0xe1,0x85,0xaa,0xe1,0x84,0x91,0xe1,0x85,0xb0,0xe1,0x84,0x81,0xe1,0x85,0xaa,0x79, Step #5: \341\204\221\341\205\252\341\204\221\341\205\260\341\204\221\341\205\260\341\204\221\341\205\242\341\204\221\341\205\260\341\204\221\341\205\252\341\204\221\341\205\260\341\204\201\341\205\252y Step #5: artifact_prefix='./'; Test unit written to ./oom-8ba95c642b27aaf20a73d5de2f06668e33e54cdc Step #5: Base64: 4YSR4YWq4YSR4YWw4YSR4YWw4YSR4YWi4YSR4YWw4YSR4YWq4YSR4YWw4YSB4YWqeQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3214 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1031567437 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a59421d60, 0x564a5960a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a5960a720,0x564a5b4942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ba95c642b27aaf20a73d5de2f06668e33e54cdc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3944 processed earlier; will process 7032 files now Step #5: ==115780== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a4ff642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a5659f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a5658246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a5658238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a4ff6a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a4fecb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a4fec5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a4ff5c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a52f8b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a52f8b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a52f8b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a52f8b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a52f8b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a52f8b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a52f8b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a52f8b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a52f8b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a52f8b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a5519045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a51eec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a51ef75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a51ca2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a51ca2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a51ca3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a51ca2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a51ca2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a51ca2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a5658494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a5658d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a56575529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a5659ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7cbb963082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a4fec443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x70,0x68,0x70,0xa,0xa,0x5b,0x2c,0x20,0x22,0x61,0x22,0x20,0x3d,0x3e,0x20,0x24,0x62,0x5d,0x20,0x3d,0x20,0x5b,0x31,0x2c,0x20,0x22,0x3d,0x22,0x20,0x3d,0x3e,0x20,0x24,0x62,0x5d,0x20,0x3d,0x20,0x5b,0x31,0x20,0x61,0x3e,0x3b,0x3f,0x3e,0x3b, Step #5: $b] = [1, \"=\" => $b] = [1 a>;?>; Step #5: artifact_prefix='./'; Test unit written to ./oom-7ec6fff5b07c8f744b2a379b4973f055da8a0532 Step #5: Base64: PD9waHAKClssICJhIiA9PiAkYl0gPSBbMSwgIj0iID0+ICRiXSA9IFsxIGE+Oz8+Ow== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3215 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1032092628 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56536df66d60, 0x56536e14f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56536e14f720,0x56536ffd92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7ec6fff5b07c8f744b2a379b4973f055da8a0532' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3945 processed earlier; will process 7031 files now Step #5: ==115816== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x565364aa92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56536b0e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56536b0c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56536b0c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x565364aaf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x565364a1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x565364a0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x565364aa1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x565367ad08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x565367ad08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x565367ad08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x565367ad08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x565367ad08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x565367ad08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x565367ad08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x565367ad08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x565367ad08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x565367ad08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x565369cd545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x565366a31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x565366a3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5653667e7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5653667e7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5653667e8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5653667e7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5653667e7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5653667e7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56536b0c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56536b0d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56536b0ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56536b0e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f60e248f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x565364a0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x0,0x1f,0x18,0x18,0x2d,0x5b,0xd3,0xa3,0x2d,0x2d,0x50,0xa,0x32,0x44,0xa,0x2d,0xa,0x15,0x0,0x0,0x0,0x42,0x49,0xa,0x32,0xa,0x2d,0xa,0x82,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x64,0xa,0x64,0xa,0x3f, Step #5: s-----BE\000\037\030\030-[\323\243--P\0122D\012-\012\025\000\000\000BI\0122\012-\012\202\000\000\000\000\000\000\000d\012d\012? Step #5: artifact_prefix='./'; Test unit written to ./oom-df3224ea00baf0502ec8ec064e0b0641d9569d3d Step #5: Base64: cy0tLS0tQkUAHxgYLVvToy0tUAoyRAotChUAAABCSQoyCi0KggAAAAAAAABkCmQKPw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3216 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1032618761 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5571dd4e2d60, 0x5571dd6cb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5571dd6cb720,0x5571df5552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/df3224ea00baf0502ec8ec064e0b0641d9569d3d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3946 processed earlier; will process 7030 files now Step #5: ==115852== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571d40252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5571da660728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5571da64346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5571da64338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571d402b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5571d3f8c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5571d3f86c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5571d401d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571d704c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571d704c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571d704c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571d704c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571d704c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571d704c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571d704c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571d704c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571d704c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571d704c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5571d925145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5571d5fad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571d5fb85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571d5d63d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571d5d63d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571d5d64808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571d5d63944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571d5d63944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571d5d63944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5571da64594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571da64e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5571da636529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5571da660fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8c94790082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5571d3f8543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x81,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xe2,0x80,0x84,0xe2,0x80,0x80,0xa, Step #5: \342\201\204\342\200\200\342\200\204\342\200\200\342\200\204\342\200\200\342\200\204\342\200\200\342\200\204\342\200\200\342\200\204\342\200\200\342\200\204\342\200\200\342\200\204\342\200\200\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-87872bccf24067751b0e2b79b16bed749e7c4598 Step #5: Base64: 4oGE4oCA4oCE4oCA4oCE4oCA4oCE4oCA4oCE4oCA4oCE4oCA4oCE4oCA4oCE4oCACg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3217 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1033148674 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560695e3ed60, 0x56069602771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560696027720,0x560697eb12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/87872bccf24067751b0e2b79b16bed749e7c4598' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3947 processed earlier; will process 7029 files now Step #5: ==115888== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56068c9812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560692fbc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560692f9f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560692f9f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56068c987652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56068c8e842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56068c8e2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56068c979595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56068f9a88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56068f9a88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56068f9a88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56068f9a88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56068f9a88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56068f9a88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56068f9a88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56068f9a88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56068f9a88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56068f9a88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560691bad45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56068e909578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56068e9145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56068e6bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56068e6bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56068e6c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56068e6bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56068e6bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56068e6bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560692fa194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560692faa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560692f92529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560692fbcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe09e5df082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56068c8e143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x70,0x68,0x70,0xa,0xa,0x23,0x5b,0x41,0x74,0x74,0x72,0x69,0x62,0x75,0x74,0x65,0x5d,0xa,0x23,0x5b,0x41,0x74,0x74,0x72,0x69,0x62,0x75,0x74,0x65,0x5d,0xa,0x63,0x6c,0x61,0x73,0x73,0x20,0x41,0x31,0x20,0x7b,0x20,0x7d,0xa,0xa,0x3f,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-c53c70a6960a5927157840625d0fb57948edf37c Step #5: Base64: PD9waHAKCiNbQXR0cmlidXRlXQojW0F0dHJpYnV0ZV0KY2xhc3MgQTEgeyB9Cgo/Pg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3218 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1033673630 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5608c260fd60, 0x5608c27f871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5608c27f8720,0x5608c46822c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c53c70a6960a5927157840625d0fb57948edf37c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3948 processed earlier; will process 7028 files now Step #5: ==115924== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5608b91522d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5608bf78d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5608bf77046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5608bf77038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5608b9158652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5608b90b942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5608b90b3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5608b914a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5608bc1798c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5608bc1798c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5608bc1798c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5608bc1798c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5608bc1798c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5608bc1798c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5608bc1798c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5608bc1798c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5608bc1798c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5608bc1798c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5608be37e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5608bb0da578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5608bb0e55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5608bae90d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5608bae90d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5608bae91808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5608bae90944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5608bae90944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5608bae90944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5608bf77294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5608bf77b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5608bf763529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5608bf78dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f74c7545082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5608b90b243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x78,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0x2f,0x2f,0xa,0xa,0x2f,0x2f, Step #5: //\012//\012//\012//\012x//\012//\012//\012//\012//\012//\012//\012//\012//\012//\012//\012\012// Step #5: artifact_prefix='./'; Test unit written to ./oom-f9b8c76838c01550e676ce2c0d4a7a0978b8c0c4 Step #5: Base64: Ly8KLy8KLy8KLy8KeC8vCi8vCi8vCi8vCi8vCi8vCi8vCi8vCi8vCi8vCi8vCgovLw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3219 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1034212216 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562226d4cd60, 0x562226f3571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562226f35720,0x562228dbf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f9b8c76838c01550e676ce2c0d4a7a0978b8c0c4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3949 processed earlier; will process 7027 files now Step #5: ==115960== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56221d88f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562223eca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562223ead46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562223ead38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56221d895652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56221d7f642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56221d7f0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56221d887595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5622208b68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5622208b68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5622208b68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5622208b68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5622208b68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5622208b68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5622208b68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5622208b68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5622208b68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5622208b68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562222abb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56221f817578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56221f8225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56221f5cdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56221f5cdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56221f5ce808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56221f5cd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56221f5cd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56221f5cd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562223eaf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562223eb87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562223ea0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562223ecafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0b7a3b9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56221d7ef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x32,0x37,0x36,0x37,0x2d,0x3d,0x3c,0x30,0x27,0x27,0x2f,0x25,0x20,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x78,0x70,0x27,0x4e,0x27,0x32,0x2d,0x7,0x20,0x73,0x65,0x72,0x69,0x66,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $32767-=<0''/% ''/'''exp'N'2-\007 serif''/'''e'.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-048763a86c173d940a3249720dfb2cad54c080f3 Step #5: Base64: JDMyNzY3LT08MCcnLyUgJycvJycnZXhwJ04nMi0HIHNlcmlmJycvJycnZScuJyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3220 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1034747838 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a717425d60, 0x55a71760e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a71760e720,0x55a7194982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/048763a86c173d940a3249720dfb2cad54c080f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3950 processed earlier; will process 7026 files now Step #5: ==115996== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a70df682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a7145a3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a71458646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a71458638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a70df6e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a70decf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a70dec9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a70df60595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a710f8f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a710f8f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a710f8f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a710f8f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a710f8f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a710f8f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a710f8f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a710f8f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a710f8f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a710f8f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a71319445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a70fef0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a70fefb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a70fca6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a70fca6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a70fca7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a70fca6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a70fca6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a70fca6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a71458894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a7145917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a714579529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a7145a3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4884b31082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a70dec843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x2e,0x22,0xc8,0xa2,0xca,0xb5,0xd0,0xa4,0xcf,0xb5,0xc8,0xa4,0xc8,0xb0,0xc8,0xa3,0xc8,0xb2,0xc8,0xa3,0xc8,0xa2,0xc8,0xa3,0xc8,0xa3,0xc8,0xa3,0xc8,0xb0,0xc8,0xa3,0xc8,0xb0,0xc8,0xa3,0x2f,0xc8,0xa3,0x41,0xc8,0xb1,0xcf,0x0,0x23,0xc7,0xa2, Step #5: HU.\"\310\242\312\265\320\244\317\265\310\244\310\260\310\243\310\262\310\243\310\242\310\243\310\243\310\243\310\260\310\243\310\260\310\243/\310\243A\310\261\317\000#\307\242 Step #5: artifact_prefix='./'; Test unit written to ./oom-820ee74ef6447607fb144744ffcddb88e2049da6 Step #5: Base64: SFUuIsiiyrXQpM+1yKTIsMijyLLIo8iiyKPIo8ijyLDIo8iwyKMvyKNByLHPACPHog== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3221 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1035270148 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55664d61dd60, 0x55664d80671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55664d806720,0x55664f6902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/820ee74ef6447607fb144744ffcddb88e2049da6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3951 processed earlier; will process 7025 files now Step #5: #1 pulse cov: 3851 ft: 3852 exec/s: 0 rss: 173Mb Step #5: ==116032== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5566441602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55664a79b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55664a77e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55664a77e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556644166652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5566440c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5566440c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556644158595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5566471878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5566471878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5566471878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5566471878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5566471878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5566471878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5566471878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5566471878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5566471878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5566471878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55664938c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5566460e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5566460f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556645e9ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556645e9ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556645e9f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556645e9e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556645e9e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556645e9e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55664a78094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55664a7897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55664a771529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55664a79bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe6c4d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5566440c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xef,0xbb,0xbf, Step #5: \"\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277\357\273\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-4274d75db2b56ce4d5a000f378d76004bcd84ce1 Step #5: Base64: Iu+7v++7v++7v++7v++7v++7v++7v++7v++7v++7v++7v++7v++7v++7v++7v++7vw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3222 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1035841989 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d46a9a9d60, 0x55d46ab9271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d46ab92720,0x55d46ca1c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4274d75db2b56ce4d5a000f378d76004bcd84ce1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3953 processed earlier; will process 7023 files now Step #5: ==116068== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d4614ec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d467b27728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d467b0a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d467b0a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d4614f2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d46145342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d46144dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d4614e4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d4645138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d4645138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d4645138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d4645138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d4645138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d4645138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d4645138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d4645138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d4645138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d4645138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d46671845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d463474578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d46347f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d46322ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d46322ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d46322b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d46322a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d46322a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d46322a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d467b0c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d467b157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d467afd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d467b27fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc25effe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d46144c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe2,0x81,0xb0,0xe2,0x84,0x9b,0xe2,0x81,0xb0,0xe2,0x81,0xa8,0xe2,0x81,0xa8,0xe2,0xa3,0xa8,0xe2,0x81,0xa8,0xe2,0x84,0xa3,0xe2,0x81,0xa8,0xe2,0x83,0xa8,0xe2,0x81,0xa8,0xe2,0x84,0xa3,0xe2,0x81,0xa8,0xe2,0x84,0xa8,0xe2,0x84,0xa3,0xe2,0x81,0xa8,0x9a, Step #5: \342\201\260\342\204\233\342\201\260\342\201\250\342\201\250\342\243\250\342\201\250\342\204\243\342\201\250\342\203\250\342\201\250\342\204\243\342\201\250\342\204\250\342\204\243\342\201\250\232 Step #5: artifact_prefix='./'; Test unit written to ./oom-d3d734676dcaa916e76fb3edff1cbdd0884a43d2 Step #5: Base64: 4oGw4oSb4oGw4oGo4oGo4qOo4oGo4oSj4oGo4oOo4oGo4oSj4oGo4oSo4oSj4oGomg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3223 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1036372979 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558d8f432d60, 0x558d8f61b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558d8f61b720,0x558d914a52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d3d734676dcaa916e76fb3edff1cbdd0884a43d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3954 processed earlier; will process 7022 files now Step #5: #1 pulse cov: 4257 ft: 4258 exec/s: 0 rss: 173Mb Step #5: ==116104== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558d85f752d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558d8c5b0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558d8c59346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558d8c59338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558d85f7b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558d85edc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558d85ed6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558d85f6d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558d88f9c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558d88f9c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558d88f9c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558d88f9c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558d88f9c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558d88f9c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558d88f9c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558d88f9c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558d88f9c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558d88f9c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558d8b1a145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558d87efd578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558d87f085a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558d87cb3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558d87cb3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558d87cb4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558d87cb3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558d87cb3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558d87cb3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558d8c59594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558d8c59e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558d8c586529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558d8c5b0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb97ee8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558d85ed543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x34,0xf3,0xa0,0x80,0xa0,0x33,0x32,0x37,0x36,0x38,0xf3,0xa0,0x81,0xa7,0xe2,0x80,0xaf,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0x32,0x39,0x35,0xef,0xbc,0x8f,0x33,0x30,0x32,0xd7,0x8c,0x0,0x0,0xc2,0xb7,0x0,0x0,0x0,0x0,0x0,0x1,0xa9,0x9,0x74, Step #5: (4\363\240\200\24032768\363\240\201\247\342\200\2574294967295\357\274\217302\327\214\000\000\302\267\000\000\000\000\000\001\251\011t Step #5: artifact_prefix='./'; Test unit written to ./oom-2f77ad2302a52b209b777156ba780c5ff5c9bf68 Step #5: Base64: KDTzoICgMzI3NjjzoIGn4oCvNDI5NDk2NzI5Ne+8jzMwMteMAADCtwAAAAAAAakJdA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3224 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1036939782 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565315d76d60, 0x565315f5f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x565315f5f720,0x565317de92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2f77ad2302a52b209b777156ba780c5ff5c9bf68' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3956 processed earlier; will process 7020 files now Step #5: ==116140== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56530c8b92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565312ef4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x565312ed746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x565312ed738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56530c8bf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56530c82042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56530c81ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56530c8b1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56530f8e08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56530f8e08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56530f8e08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56530f8e08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56530f8e08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56530f8e08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56530f8e08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56530f8e08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56530f8e08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56530f8e08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x565311ae545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56530e841578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56530e84c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56530e5f7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56530e5f7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56530e5f8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56530e5f7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56530e5f7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56530e5f7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x565312ed994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x565312ee27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x565312eca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565312ef4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd487ad8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56530c81943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3,0x61,0x61,0x66,0x3a,0x20,0xd3,0xa1,0xdd,0x86,0xd2,0x8d,0x8a,0xd3,0xa0,0x8d,0x86,0xd2,0x8d,0x8a,0x5d,0x61,0x66,0x3a,0x20,0xd3,0xa1,0xdd,0x86,0xd2,0x8d,0x8a,0x5d,0x61,0x66,0x3a,0x20,0x86,0xd1,0x8d,0x8a,0xb6,0x8b,0x3a,0x20,0xd4,0x89,0x1c,0x25, Step #5: \003aaf: \323\241\335\206\322\215\212\323\240\215\206\322\215\212]af: \323\241\335\206\322\215\212]af: \206\321\215\212\266\213: \324\211\034% Step #5: artifact_prefix='./'; Test unit written to ./oom-efc00b2009c5d556437a0b02723a36464754827b Step #5: Base64: A2FhZjog06HdhtKNitOgjYbSjYpdYWY6INOh3YbSjYpdYWY6IIbRjYq2izog1IkcJQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3225 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1037489577 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cadfd8cd60, 0x55cadff7571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cadff75720,0x55cae1dff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/efc00b2009c5d556437a0b02723a36464754827b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3957 processed earlier; will process 7019 files now Step #5: ==116176== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cad68cf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cadcf0a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cadceed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cadceed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cad68d5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cad683642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cad6830c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cad68c7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cad98f68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cad98f68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cad98f68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cad98f68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cad98f68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cad98f68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cad98f68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cad98f68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cad98f68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cad98f68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cadbafb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cad8857578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cad88625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cad860dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cad860dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cad860e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cad860d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cad860d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cad860d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cadceef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cadcef87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cadcee0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cadcf0afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff4343f4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cad682f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x32,0x37,0x36,0x37,0x2d,0x3d,0x3c,0x30,0x27,0x27,0x2f,0x25,0x27,0x27,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x78,0x70,0x27,0x4e,0x27,0x33,0x2d,0x7,0x27,0x2f,0x25,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $32767-=<0''/%'''''/'''exp'N'3-\007'/%'''/'''e'.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-ae257da8a2dca3b210776d011d4ec6dba4ed4fe5 Step #5: Base64: JDMyNzY3LT08MCcnLyUnJycnJy8nJydleHAnTiczLQcnLyUnJycvJycnZScuJyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3226 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1038037875 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x565297ef8d60, 0x5652980e171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5652980e1720,0x565299f6b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ae257da8a2dca3b210776d011d4ec6dba4ed4fe5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3958 processed earlier; will process 7018 files now Step #5: ==116212== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56528ea3b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x565295076728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56529505946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56529505938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56528ea41652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56528e9a242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56528e99cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56528ea33595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x565291a628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x565291a628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x565291a628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x565291a628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x565291a628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x565291a628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x565291a628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x565291a628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x565291a628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x565291a628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x565293c6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5652909c3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652909ce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x565290779d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x565290779d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56529077a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x565290779944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x565290779944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x565290779944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56529505b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652950647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56529504c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x565295076fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25e0bbd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56528e99b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x36,0x35,0x34,0x30,0x38,0x2,0x0,0x4,0x1,0x0,0x0,0x0,0x43,0x4f,0x4d,0x16,0x0,0x4,0x1,0x0,0xf3,0xa0,0x80,0xbe,0x0,0x0,0x43,0x4f,0x4d,0x16,0x0,0xe2,0x81,0xa6,0x4,0x1,0x0,0x0,0x0,0x43,0x4f,0x4d,0x0,0x0,0x4,0x1,0x0, Step #5: ID65408\002\000\004\001\000\000\000COM\026\000\004\001\000\363\240\200\276\000\000COM\026\000\342\201\246\004\001\000\000\000COM\000\000\004\001\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-bbc0c8bd3aeda1eafbb73d43251a027b44dd1d3a Step #5: Base64: SUQ2NTQwOAIABAEAAABDT00WAAQBAPOggL4AAENPTRYA4oGmBAEAAABDT00AAAQBAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3227 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1038582629 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f30a26bd60, 0x55f30a45471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f30a454720,0x55f30c2de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bbc0c8bd3aeda1eafbb73d43251a027b44dd1d3a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3959 processed earlier; will process 7017 files now Step #5: ==116248== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f300dae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f3073e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f3073cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f3073cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f300db4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f300d1542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f300d0fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f300da6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f303dd58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f303dd58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f303dd58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f303dd58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f303dd58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f303dd58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f303dd58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f303dd58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f303dd58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f303dd58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f305fda45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f302d36578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f302d415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f302aecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f302aecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f302aed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f302aec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f302aec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f302aec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f3073ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f3073d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f3073bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f3073e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc6b857c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f300d0e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x0,0x2,0x6e,0x69,0x0,0x0,0x0,0x65,0x69,0x0,0x0,0x0,0x65,0x0,0x1,0x0,0x0,0x0,0x3,0x24,0x22,0xe2,0x80,0xab,0x26,0x22,0x22,0x22,0x22,0x1,0x24,0x0,0x2,0x1,0x60,0x5b,0x30,0x36,0x33,0x2e,0x2e,0x3d,0x5d,0xf8,0xcf,0x32,0x72,0x2d, Step #5: `\000\002ni\000\000\000ei\000\000\000e\000\001\000\000\000\003$\"\342\200\253&\"\"\"\"\001$\000\002\001`[063..=]\370\3172r- Step #5: artifact_prefix='./'; Test unit written to ./oom-d03f79d4aaa6ab88960aa238d857388775575996 Step #5: Base64: YAACbmkAAABlaQAAAGUAAQAAAAMkIuKAqyYiIiIiASQAAgFgWzA2My4uPV34zzJyLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3228 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1039240430 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560bac563d60, 0x560bac74c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560bac74c720,0x560bae5d62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d03f79d4aaa6ab88960aa238d857388775575996' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3960 processed earlier; will process 7016 files now Step #5: ==116284== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ba30a62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ba96e1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ba96c446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ba96c438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ba30ac652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ba300d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ba3007c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ba309e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ba60cd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ba60cd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ba60cd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ba60cd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ba60cd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ba60cd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ba60cd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ba60cd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ba60cd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ba60cd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ba82d245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ba502e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ba50395a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ba4de4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ba4de4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ba4de5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ba4de4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ba4de4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ba4de4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ba96c694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ba96cf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ba96b7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ba96e1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc44989c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ba300643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x24,0x24,0x69,0x6e,0x24,0x24,0x1e,0x24,0x6c,0x3,0x3,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x6d,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x26,0xcc,0x3,0x7e,0x47,0x46,0x44,0x7e,0x91,0x47, Step #5: $$$in$$\036$l\003\003................m$$$$$$$$$$&\314\003~GFD~\221G Step #5: artifact_prefix='./'; Test unit written to ./oom-fbe45570ce35e9b31d2260e882d020f71a51ba2e Step #5: Base64: JCQkaW4kJB4kbAMDLi4uLi4uLi4uLi4uLi4uLm0kJCQkJCQkJCQkJswDfkdGRH6RRw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3229 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1039776897 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d1bdbbfd60, 0x55d1bdda871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d1bdda8720,0x55d1bfc322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fbe45570ce35e9b31d2260e882d020f71a51ba2e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3961 processed earlier; will process 7015 files now Step #5: ==116320== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d1b47022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d1bad3d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d1bad2046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d1bad2038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d1b4708652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d1b466942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d1b4663c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d1b46fa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1b77298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1b77298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1b77298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1b77298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1b77298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1b77298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1b77298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1b77298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1b77298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1b77298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d1b992e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d1b668a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1b66955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d1b6440d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d1b6440d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d1b6441808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d1b6440944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d1b6440944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d1b6440944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d1bad2294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d1bad2b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d1bad13529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d1bad3dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7ecaf14082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d1b466243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x7d,0x6c,0x6f,0x6f,0x70,0x7b,0x3b,0x60,0x2d,0x36,0xef,0xac,0xac,0xef,0xac,0xac,0x60,0x2b,0x27,0x1f,0x27,0x3e,0x60,0x30,0x60,0x3b,0x5b,0x5d,0x3b,0x31,0x7d,0xc8,0xc9,0x0,0x30,0x5f,0xff,0xe5,0x31,0x5c,0x2d,0x33,0x36,0x2,0x0,0x0,0x0,0x5c, Step #5: {}loop{;`-6\357\254\254\357\254\254`+'\037'>`0`;[];1}\310\311\0000_\377\3451\\-36\002\000\000\000\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-c22a926b31dc6e16477d576f75a3ff579a7a2f49 Step #5: Base64: e31sb29weztgLTbvrKzvrKxgKycfJz5gMGA7W107MX3IyQAwX//lMVwtMzYCAAAAXA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3230 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1040419560 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c0b45a2d60, 0x55c0b478b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c0b478b720,0x55c0b66152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c22a926b31dc6e16477d576f75a3ff579a7a2f49' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3962 processed earlier; will process 7014 files now Step #5: ==116356== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c0ab0e52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c0b1720728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c0b170346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c0b170338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c0ab0eb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c0ab04c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c0ab046c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c0ab0dd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c0ae10c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c0ae10c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c0ae10c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c0ae10c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c0ae10c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c0ae10c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c0ae10c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c0ae10c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c0ae10c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c0ae10c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c0b031145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c0ad06d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c0ad0785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c0ace23d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c0ace23d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c0ace24808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c0ace23944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c0ace23944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c0ace23944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c0b170594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c0b170e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c0b16f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c0b1720fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a857c5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c0ab04543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x74,0x49,0x72,0x65,0x61,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x44,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2b,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x6d,0x0,0x44,0x31,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2e,0x2,0x26, Step #5: stIrea..........D............+......m\000D1.......\002& Step #5: artifact_prefix='./'; Test unit written to ./oom-1797d38e70cba5275ba890cdfdd3c8dfb9c8d426 Step #5: Base64: c3RJcmVhLi4uLi4uLi4uLkQuLi4uLi4uLi4uLi4rLi4uLi4ubQBEMS4uLi4uLi4CJg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3231 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1040944742 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5633f10f3d60, 0x5633f12dc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5633f12dc720,0x5633f31662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1797d38e70cba5275ba890cdfdd3c8dfb9c8d426' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3963 processed earlier; will process 7013 files now Step #5: ==116392== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5633e7c362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5633ee271728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5633ee25446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5633ee25438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5633e7c3c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633e7b9d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633e7b97c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5633e7c2e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5633eac5d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5633eac5d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5633eac5d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5633eac5d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5633eac5d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5633eac5d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5633eac5d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5633eac5d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5633eac5d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5633eac5d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5633ece6245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633e9bbe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633e9bc95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5633e9974d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5633e9974d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5633e9975808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5633e9974944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5633e9974944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5633e9974944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5633ee25694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5633ee25f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5633ee247529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5633ee271fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f946b8d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633e7b9643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x32,0x37,0x36,0x37,0x2d,0x3d,0x3c,0x30,0x27,0x27,0x2f,0x25,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x78,0x70,0x27,0x4e,0x27,0x32,0x2d,0x7,0x3d,0x27,0x27,0x2f,0x25,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $32767-=<0''/%'''/'''exp'N'2-\007=''/%'''/'''e'.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-089f1b5d7403831b9f1a80addf00c1bd7284fdcf Step #5: Base64: JDMyNzY3LT08MCcnLyUnJycvJycnZXhwJ04nMi0HPScnLyUnJycvJycnZScuJyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3232 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1041477700 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fae79f3d60, 0x55fae7bdc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fae7bdc720,0x55fae9a662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/089f1b5d7403831b9f1a80addf00c1bd7284fdcf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3964 processed earlier; will process 7012 files now Step #5: #1 pulse cov: 4113 ft: 4114 exec/s: 0 rss: 175Mb Step #5: ==116428== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fade5362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fae4b71728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fae4b5446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fae4b5438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fade53c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fade49d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fade497c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fade52e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fae155d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fae155d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fae155d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fae155d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fae155d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fae155d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fae155d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fae155d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fae155d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fae155d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fae376245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fae04be578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fae04c95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fae0274d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fae0274d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fae0275808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fae0274944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fae0274944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fae0274944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fae4b5694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fae4b5f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fae4b47529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fae4b71fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f10571f0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fade49643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x69,0x69,0x69,0x69,0x31,0x4e,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x6b,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x69,0x1,0x0,0x69,0x69,0x69,0x69,0x69,0x1,0x0,0x20, Step #5: iiiii1Niiiiiiiiiiiiiiiiiiiiiiikiiiiiiii\001\000iiiii\001\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f616e181de594c732383033b7abed33d0e8999d3 Step #5: Base64: aWlpaWkxTmlpaWlpaWlpaWlpaWlpaWlpaWlpaWlpa2lpaWlpaWlpAQBpaWlpaQEAIA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3233 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1042050167 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55da5148fd60, 0x55da5167871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55da51678720,0x55da535022c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f616e181de594c732383033b7abed33d0e8999d3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3966 processed earlier; will process 7010 files now Step #5: ==116464== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55da47fd22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55da4e60d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55da4e5f046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55da4e5f038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55da47fd8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55da47f3942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55da47f33c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55da47fca595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55da4aff98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55da4aff98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55da4aff98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55da4aff98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55da4aff98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55da4aff98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55da4aff98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55da4aff98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55da4aff98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55da4aff98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55da4d1fe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55da49f5a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55da49f655a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55da49d10d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55da49d10d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55da49d11808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55da49d10944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55da49d10944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55da49d10944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55da4e5f294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55da4e5fb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55da4e5e3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55da4e60dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6d98787082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55da47f3243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0x95,0xd9,0x8b,0xda,0x98,0xd9,0x95,0xdd,0x95,0xd9,0x8b,0xd9,0x98,0x20,0xd9,0x8f,0xd9,0x95,0xd9,0x8b,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e,0x27,0x3c,0x2f, Step #5: \331\225\331\213\332\230\331\225\335\225\331\213\331\230 \331\217\331\225\331\213'' Step #5: Step #5: #0 0x5645aa3ab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5645b09e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5645b09c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5645b09c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5645aa3b1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5645aa31242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5645aa30cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5645aa3a3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5645ad3d28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5645ad3d28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5645ad3d28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5645ad3d28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5645ad3d28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5645ad3d28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5645ad3d28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5645ad3d28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5645ad3d28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5645ad3d28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5645af5d745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5645ac333578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5645ac33e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5645ac0e9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5645ac0e9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5645ac0ea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5645ac0e9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5645ac0e9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5645ac0e9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5645b09cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5645b09d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5645b09bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5645b09e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc201b52082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5645aa30b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x2d,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0x41,0x3a,0xca,0x8c,0xca,0x8d,0xcd,0x9a,0xca,0xa3,0xcd,0x9a,0xd5,0x95,0xcd,0x9a,0x9,0x65,0xdb,0x8c,0xca,0x90,0xdb,0x8c,0xca,0x9d,0xcb,0x9a,0xca,0x95,0xcd,0x9e,0xce,0x95,0xcd,0x9a,0x3a,0x20, Step #5: \000\000\000-jobs:\012 A:\312\214\312\215\315\232\312\243\315\232\325\225\315\232\011e\333\214\312\220\333\214\312\235\313\232\312\225\315\236\316\225\315\232: Step #5: artifact_prefix='./'; Test unit written to ./oom-894d73baa0dce0f59a2733112e8f41949e8d607c Step #5: Base64: AAAALWpvYnM6CiBBOsqMyo3NmsqjzZrVlc2aCWXbjMqQ24zKncuaypXNns6VzZo6IA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3235 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1043158385 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ef659d7d60, 0x55ef65bc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ef65bc0720,0x55ef67a4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/894d73baa0dce0f59a2733112e8f41949e8d607c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3969 processed earlier; will process 7007 files now Step #5: ==116536== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ef5c51a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ef62b55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ef62b3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ef62b3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ef5c520652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ef5c48142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ef5c47bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ef5c512595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ef5f5418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ef5f5418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ef5f5418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ef5f5418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ef5f5418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ef5f5418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ef5f5418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ef5f5418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ef5f5418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ef5f5418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ef6174645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ef5e4a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ef5e4ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ef5e258d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ef5e258d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ef5e259808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ef5e258944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ef5e258944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ef5e258944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ef62b3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ef62b437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ef62b2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ef62b55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6af5bb7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ef5c47a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0xbd,0xe0,0xbd,0x9d,0xe0,0xbd,0xb5,0xe0,0xbd,0xbd,0xe0,0xbd,0x9d,0xe0,0xbd,0xb5,0xe0,0xbd,0xbc,0x3d, Step #5: \340\275\275\340\275\275\340\275\275\340\275\275\340\275\275\340\275\275\340\275\275\340\275\275\340\275\275\340\275\275\340\275\235\340\275\265\340\275\275\340\275\235\340\275\265\340\275\274= Step #5: artifact_prefix='./'; Test unit written to ./oom-602455c9fe57bdaa782cd9f3be358c3cf9478a07 Step #5: Base64: 4L294L294L294L294L294L294L294L294L294L294L2d4L214L294L2d4L214L28PQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3236 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1043680790 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563965a3fd60, 0x563965c2871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563965c28720,0x563967ab22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/602455c9fe57bdaa782cd9f3be358c3cf9478a07' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3970 processed earlier; will process 7006 files now Step #5: ==116572== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56395c5822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563962bbd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563962ba046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563962ba038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56395c588652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56395c4e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56395c4e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56395c57a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56395f5a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56395f5a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56395f5a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56395f5a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56395f5a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56395f5a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56395f5a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56395f5a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56395f5a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56395f5a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5639617ae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56395e50a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56395e5155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56395e2c0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56395e2c0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56395e2c1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56395e2c0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56395e2c0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56395e2c0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563962ba294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563962bab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563962b93529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563962bbdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba9cb54082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56395c4e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x32,0x37,0x36,0x37,0x2d,0x3d,0x3c,0x30,0x27,0x27,0x2f,0x25,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x78,0x70,0x27,0x4e,0x27,0x32,0x2d,0x7,0x20,0x73,0x65,0x72,0x69,0x66,0x27,0x27,0x2f,0x27,0x2f,0x27,0x65,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $32767-=<0''/%'''/'''exp'N'2-\007 serif''/'/'e'.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-5641cae842387b98f552c0e6bdbe93a73cbce908 Step #5: Base64: JDMyNzY3LT08MCcnLyUnJycvJycnZXhwJ04nMi0HIHNlcmlmJycvJy8nZScuJyQnLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3237 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1044220709 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dee73acd60, 0x55dee759571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dee7595720,0x55dee941f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5641cae842387b98f552c0e6bdbe93a73cbce908' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3971 processed earlier; will process 7005 files now Step #5: #1 pulse cov: 3812 ft: 3813 exec/s: 0 rss: 172Mb Step #5: ==116608== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55deddeef2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dee452a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dee450d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dee450d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55deddef5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dedde5642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dedde50c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55deddee7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dee0f168c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dee0f168c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dee0f168c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dee0f168c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dee0f168c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dee0f168c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dee0f168c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dee0f168c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dee0f168c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dee0f168c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dee311b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dedfe77578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dedfe825a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dedfc2dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dedfc2dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dedfc2e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dedfc2d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dedfc2d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dedfc2d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dee450f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dee45187b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dee4500529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dee452afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2494c93082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dedde4f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x2d,0x2d,0x2d,0x42,0x45,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x47,0x49,0x4e,0x20,0x2d,0xa,0x64,0x64,0x60,0x64,0x60,0x64,0x64,0x64,0x64,0x66,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x2d,0x2d,0x2d,0x2d, Step #5: x-----B---BE\001\000\000\000\000\000\000\000GIN -\012dd`d`ddddfdddddddddd---- Step #5: artifact_prefix='./'; Test unit written to ./oom-2b41a75a0b0bfd97779616a9160ebff4a2e92057 Step #5: Base64: eC0tLS0tQi0tLUJFAQAAAAAAAABHSU4gLQpkZGBkYGRkZGRmZGRkZGRkZGRkZC0tLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3238 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1044934315 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dfa7bb0d60, 0x55dfa7d9971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dfa7d99720,0x55dfa9c232c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2b41a75a0b0bfd97779616a9160ebff4a2e92057' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3973 processed earlier; will process 7003 files now Step #5: ==116644== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55df9e6f32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dfa4d2e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dfa4d1146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dfa4d1138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55df9e6f9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55df9e65a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55df9e654c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55df9e6eb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dfa171a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dfa171a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dfa171a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dfa171a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dfa171a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dfa171a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dfa171a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dfa171a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dfa171a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dfa171a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dfa391f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dfa067b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dfa06865a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dfa0431d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dfa0431d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dfa0432808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dfa0431944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dfa0431944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dfa0431944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dfa4d1394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dfa4d1c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dfa4d04529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dfa4d2efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fad7cfd6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55df9e65343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x7b,0x7d,0x2b,0xa,0x23,0x7b,0x7d,0x2b,0xa,0x23,0x7b,0x7d,0x2b,0xa,0x23,0x7b,0x7d,0x2b,0xa,0x23,0x7b,0x7d,0x2b,0xa,0xa,0x23,0x7b,0x7d,0x2b,0xa,0x23,0x7b,0x7d,0x2b,0xa,0x23,0x7b,0x7d,0xd4,0xf5,0x7d,0xc4,0x0,0x0,0x0,0x21,0xff,0xff,0x31, Step #5: #{}+\012#{}+\012#{}+\012#{}+\012#{}+\012\012#{}+\012#{}+\012#{}\324\365}\304\000\000\000!\377\3771 Step #5: artifact_prefix='./'; Test unit written to ./oom-4f1d81312d6708e6e60cadf0695b79b89fc49f81 Step #5: Base64: I3t9Kwoje30rCiN7fSsKI3t9Kwoje30rCgoje30rCiN7fSsKI3t91PV9xAAAACH//zE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3239 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1045462440 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5633f8246d60, 0x5633f842f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5633f842f720,0x5633fa2b92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f1d81312d6708e6e60cadf0695b79b89fc49f81' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3974 processed earlier; will process 7002 files now Step #5: #1 pulse cov: 9276 ft: 9277 exec/s: 0 rss: 191Mb Step #5: ==116680== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5633eed892d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5633f53c4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5633f53a746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5633f53a738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5633eed8f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633eecf042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633eeceac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5633eed81595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5633f1db08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5633f1db08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5633f1db08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5633f1db08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5633f1db08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5633f1db08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5633f1db08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5633f1db08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5633f1db08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5633f1db08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5633f3fb545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633f0d11578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633f0d1c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5633f0ac7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5633f0ac7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5633f0ac8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5633f0ac7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5633f0ac7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5633f0ac7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5633f53a994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5633f53b27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5633f539a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5633f53c4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbe83754082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633eece943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x5d,0xa,0x24,0x3d,0xa,0x6c,0x3d,0xa,0x8,0x3d,0xa,0x43,0x3d,0xa,0x6c,0x3d,0xa,0x6c,0x3d,0xa,0x7,0x3d,0xa,0x24,0x3d,0xa,0x6c,0x3d,0xa,0x8,0x3d,0xa,0x43,0x3d,0xa,0x62,0x3d,0xa,0x43,0x3d,0xa,0x62,0x3d,0xa,0x43,0x3d,0xa,0x43,0x3d, Step #5: []\012$=\012l=\012\010=\012C=\012l=\012l=\012\007=\012$=\012l=\012\010=\012C=\012b=\012C=\012b=\012C=\012C= Step #5: artifact_prefix='./'; Test unit written to ./oom-508b6e46da37be296b85dea7142ee8aa7a0d719e Step #5: Base64: W10KJD0KbD0KCD0KQz0KbD0KbD0KBz0KJD0KbD0KCD0KQz0KYj0KQz0KYj0KQz0KQz0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3240 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1046061461 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e373140d60, 0x55e37332971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e373329720,0x55e3751b32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/508b6e46da37be296b85dea7142ee8aa7a0d719e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3976 processed earlier; will process 7000 files now Step #5: #1 pulse cov: 3937 ft: 3938 exec/s: 0 rss: 172Mb Step #5: ==116716== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e369c832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e3702be728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e3702a146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e3702a138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e369c89652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e369bea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e369be4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e369c7b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e36ccaa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e36ccaa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e36ccaa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e36ccaa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e36ccaa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e36ccaa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e36ccaa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e36ccaa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e36ccaa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e36ccaa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e36eeaf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e36bc0b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e36bc165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e36b9c1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e36b9c1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e36b9c2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e36b9c1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e36b9c1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e36b9c1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e3702a394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e3702ac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e370294529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e3702befa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ed9c8b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e369be343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x54,0x45,0x53,0x54,0x76,0x31,0x20,0x64,0x3a,0x33,0x30,0x35,0x39,0x38,0x34,0x35,0x38,0x31,0x32,0x2e,0x33,0x35,0x39,0x30,0x30,0x36,0x36,0x33,0x32,0x36,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30, Step #5: FUZZTESTv1 d:3059845812.35900663260000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./oom-896cf0f3f6cad7c1097b5cac02764126978364ab Step #5: Base64: RlVaWlRFU1R2MSBkOjMwNTk4NDU4MTIuMzU5MDA2NjMyNjAwMDAwMDAwMDAwMDAwMDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3241 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1046634140 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5634a99a5d60, 0x5634a9b8e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5634a9b8e720,0x5634aba182c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/896cf0f3f6cad7c1097b5cac02764126978364ab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3978 processed earlier; will process 6998 files now Step #5: ==116752== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634a04e82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5634a6b23728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5634a6b0646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5634a6b0638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5634a04ee652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5634a044f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5634a0449c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5634a04e0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634a350f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634a350f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634a350f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634a350f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634a350f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634a350f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634a350f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634a350f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634a350f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634a350f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5634a571445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5634a2470578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634a247b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5634a2226d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5634a2226d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5634a2227808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5634a2226944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5634a2226944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5634a2226944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5634a6b0894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5634a6b117b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5634a6af9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5634a6b23fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f97987b3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5634a044843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x6f,0x63,0x69,0x56,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x31,0x2e,0x30,0x2e,0x30,0x22,0x2c,0x22,0x70,0x72,0x6f,0x63,0x65,0x73,0x73,0x22,0x3a,0x7b,0x22,0x6f,0x6f,0x6d,0x53,0x63,0x6f,0x72,0x65,0x41,0xdb,0xb7,0x22,0x3a,0x31,0x7d,0x7d, Step #5: {\"ociVersion\":\"1.0.0\",\"process\":{\"oomScoreA\333\267\":1}} Step #5: artifact_prefix='./'; Test unit written to ./oom-6b0316fa591e43d502b89afce0de5904db0551fb Step #5: Base64: eyJvY2lWZXJzaW9uIjoiMS4wLjAiLCJwcm9jZXNzIjp7Im9vbVNjb3JlQdu3IjoxfX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3242 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1047152416 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5653c5554d60, 0x5653c573d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5653c573d720,0x5653c75c72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6b0316fa591e43d502b89afce0de5904db0551fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3979 processed earlier; will process 6997 files now Step #5: #1 pulse cov: 3904 ft: 3905 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 4672 ft: 4978 exec/s: 0 rss: 174Mb Step #5: ==116788== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653bc0972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5653c26d2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5653c26b546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5653c26b538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5653bc09d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5653bbffe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5653bbff8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5653bc08f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653bf0be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653bf0be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653bf0be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653bf0be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653bf0be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653bf0be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653bf0be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653bf0be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653bf0be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653bf0be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5653c12c345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5653be01f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653be02a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5653bddd5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5653bddd5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5653bddd6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5653bddd5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5653bddd5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5653bddd5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5653c26b794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5653c26c07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5653c26a8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5653c26d2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffae5e76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5653bbff743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x73,0x0,0x0,0x0,0x2c,0x53,0x65,0x74,0x2d,0x43,0x6f,0x6f,0x6b,0x49,0x65,0x3a,0x68,0x3d,0x3b,0x65,0x58,0x70,0x69,0x72,0x65,0x73,0x3d,0x46,0x65,0x42,0x31,0x2b,0x30,0x38,0x36,0x36,0x25,0x37,0x36,0x4,0x9e,0x0,0xf5,0xfe,0x0,0x4,0x7c,0x79,0x79, Step #5: \000s\000\000\000,Set-CookIe:h=;eXpires=FeB1+0866%76\004\236\000\365\376\000\004|yy Step #5: artifact_prefix='./'; Test unit written to ./oom-80025d93342dc82e9fde3b47d9701e795f6672da Step #5: Base64: AHMAAAAsU2V0LUNvb2tJZTpoPTtlWHBpcmVzPUZlQjErMDg2NiU3NgSeAPX+AAR8eXk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3243 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1047754041 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55945e27ad60, 0x55945e46371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55945e463720,0x5594602ed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80025d93342dc82e9fde3b47d9701e795f6672da' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3982 processed earlier; will process 6994 files now Step #5: #1 pulse cov: 3528 ft: 3529 exec/s: 0 rss: 172Mb Step #5: ==116824== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559454dbd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55945b3f8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55945b3db46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55945b3db38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559454dc3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559454d2442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559454d1ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559454db5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559457de48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559457de48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559457de48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559457de48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559457de48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559457de48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559457de48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559457de48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559457de48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559457de48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559459fe945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559456d45578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559456d505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559456afbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559456afbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559456afc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559456afb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559456afb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559456afb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55945b3dd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55945b3e67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55945b3ce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55945b3f8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0193e9c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559454d1d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xd2,0xbf,0x46,0x46,0x20,0x0,0x40,0xa,0xd8,0x80,0x1,0xf,0x4,0x0,0x0,0xa,0x2d,0x20,0x0,0x0,0x4f,0x59,0x3e,0x30,0x23,0x76,0x21,0x39,0x76,0x0,0xe2,0x81,0x9f,0x3e,0xd7,0xa3,0x1,0xd7,0x2b,0x34,0x27,0x0,0x3a,0xd8,0x80,0x4,0xbb,0x2b,0x0, Step #5: \000\322\277FF \000@\012\330\200\001\017\004\000\000\012- \000\000OY>0#v!9v\000\342\201\237>\327\243\001\327+4'\000:\330\200\004\273+\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-8a954d076ecdbce62ba8a2b833aca716aad586f7 Step #5: Base64: ANK/RkYgAEAK2IABDwQAAAotIAAAT1k+MCN2ITl2AOKBnz7XowHXKzQnADrYgAS7KwA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3244 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1048333238 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cc5f1e3d60, 0x55cc5f3cc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cc5f3cc720,0x55cc612562c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8a954d076ecdbce62ba8a2b833aca716aad586f7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3984 processed earlier; will process 6992 files now Step #5: ==116860== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cc55d262d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cc5c361728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cc5c34446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cc5c34438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cc55d2c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cc55c8d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cc55c87c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cc55d1e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cc58d4d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cc58d4d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cc58d4d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cc58d4d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cc58d4d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cc58d4d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cc58d4d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cc58d4d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cc58d4d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cc58d4d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cc5af5245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cc57cae578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cc57cb95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cc57a64d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cc57a64d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cc57a65808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cc57a64944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cc57a64944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cc57a64944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cc5c34694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cc5c34f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cc5c337529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cc5c361fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1e9a231082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cc55c8643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x21,0x7b,0x66,0x6c,0x65,0x78,0x3a,0x7b,0x4d,0x3a,0x35,0x2c,0x4d,0x3a,0x35,0x2c,0x4d,0x61,0x3a,0x31,0x2c,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x3a,0x31,0x2c,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x4d,0x32,0x3a,0x30,0x7d, Step #5: #!{flex:{M:5,M:5,Ma:1,MMMMMMMMMMM:1,MMMMMMMMMM2:0} Step #5: artifact_prefix='./'; Test unit written to ./oom-74b8423b71f18ddb6b62bca6ad72c66901b6d5b9 Step #5: Base64: IyF7ZmxleDp7TTo1LE06NSxNYToxLE1NTU1NTU1NTU1NOjEsTU1NTU1NTU1NTTI6MH0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3245 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1048834885 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557350b74d60, 0x557350d5d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557350d5d720,0x557352be72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/74b8423b71f18ddb6b62bca6ad72c66901b6d5b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3985 processed earlier; will process 6991 files now Step #5: ==116896== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5573476b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55734dcf2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55734dcd546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55734dcd538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5573476bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55734761e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557347618c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5573476af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55734a6de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55734a6de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55734a6de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55734a6de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55734a6de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55734a6de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55734a6de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55734a6de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55734a6de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55734a6de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55734c8e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55734963f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55734964a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5573493f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5573493f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5573493f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5573493f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5573493f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5573493f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55734dcd794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55734dce07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55734dcc8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55734dcf2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f559c439082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55734761743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x2f,0x29,0x0,0x0,0x2f,0x0,0xf,0x31,0xf,0x31,0x11,0xf,0x31,0x3,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x11,0x2d,0x0,0x11,0x3f,0xf,0x31,0x11,0x2d,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x3a,0x2d,0x3a,0x24,0x5b, Step #5: $\000\000/)\000\000/\000\0171\0171\021\0171\003\000\000\000\000\000\000\000\021-\000\021?\0171\021-\000\000\000/\000\0171\021\0171\021-:-:$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-7d592bc0d4fb0418f6f9e8b5e1e8434429066bff Step #5: Base64: JAAALykAAC8ADzEPMREPMQMAAAAAAAAAES0AET8PMREtAAAALwAPMREPMREtOi06JFs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3246 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1049361775 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5639a0cb7d60, 0x5639a0ea071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5639a0ea0720,0x5639a2d2a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d592bc0d4fb0418f6f9e8b5e1e8434429066bff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3986 processed earlier; will process 6990 files now Step #5: ==116932== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5639977fa2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56399de35728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56399de1846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56399de1838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563997800652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56399776142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56399775bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5639977f2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56399a8218c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56399a8218c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56399a8218c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56399a8218c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56399a8218c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56399a8218c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56399a8218c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56399a8218c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56399a8218c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56399a8218c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56399ca2645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563999782578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56399978d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563999538d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563999538d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563999539808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563999538944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563999538944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563999538944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56399de1a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56399de237b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56399de0b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56399de35fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbfb0565082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56399775a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0xd,0x45,0x5b,0x3c,0x21,0x41,0x54,0x54,0x4c,0x49,0x53,0x54,0x20,0x43,0xa,0x4f,0x20,0x49,0x44,0x9,0x22,0x78,0x33,0x32,0x37,0x36,0x38,0x54,0x4f,0x4b,0x45,0x4e,0x2b,0x2d,0x30,0x21,0x3e,0x3b,0x22,0x9,0x22, Step #5: ;\"\011\" Step #5: artifact_prefix='./'; Test unit written to ./oom-1d5eb88b871414541cc90dcb8c95a3be6fa6bd30 Step #5: Base64: PCFET0NUWVBFDUVbPCFBVFRMSVNUIEMKTyBJRAkieDMyNzY4VE9LRU4rLTAhPjsiCSI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3247 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1049888329 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561d1adbfd60, 0x561d1afa871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561d1afa8720,0x561d1ce322c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1d5eb88b871414541cc90dcb8c95a3be6fa6bd30' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3987 processed earlier; will process 6989 files now Step #5: ==116968== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561d119022d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561d17f3d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561d17f2046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561d17f2038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561d11908652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561d1186942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561d11863c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561d118fa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561d149298c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561d149298c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561d149298c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561d149298c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561d149298c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561d149298c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561d149298c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561d149298c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561d149298c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561d149298c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561d16b2e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561d1388a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561d138955a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561d13640d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561d13640d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561d13641808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561d13640944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561d13640944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561d13640944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561d17f2294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561d17f2b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561d17f13529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561d17f3dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe3a82ed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561d1186243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x22,0x61,0x22,0x61,0x22,0x64,0x22,0x61,0x22,0x61,0x22,0x64,0x22,0x3e,0x22,0x3e,0x22,0x63,0x22,0x61,0x22,0x61,0x22,0x66,0x22,0x3e,0x22,0x2e,0x22,0x3e,0x22,0x61,0x22,0x64,0x22,0xcd,0x8f,0x22,0x61,0x22,0x66,0x22,0x3e,0x3e,0x3e,0x3e,0x3e,0x22,0xfd, Step #5: \"\"a\"a\"d\"a\"a\"d\">\">\"c\"a\"a\"f\">\".\">\"a\"d\"\315\217\"a\"f\">>>>>\"\375 Step #5: artifact_prefix='./'; Test unit written to ./oom-ac8c9bb6d50c836311248214191990f66e590e86 Step #5: Base64: IiJhImEiZCJhImEiZCI+Ij4iYyJhImEiZiI+Ii4iPiJhImQizY8iYSJmIj4+Pj4+Iv0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3248 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1050401860 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e98a6fbd60, 0x55e98a8e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e98a8e4720,0x55e98c76e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ac8c9bb6d50c836311248214191990f66e590e86' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3988 processed earlier; will process 6988 files now Step #5: #1 pulse cov: 11678 ft: 11679 exec/s: 0 rss: 193Mb Step #5: #2 pulse cov: 12368 ft: 13213 exec/s: 0 rss: 195Mb Step #5: ==117004== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e98123e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e987879728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e98785c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e98785c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e981244652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e9811a542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e98119fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e981236595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9842658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9842658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9842658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9842658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9842658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9842658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9842658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9842658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9842658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9842658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e98646a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e9831c6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e9831d15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e982f7cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e982f7cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e982f7d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e982f7c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e982f7c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e982f7c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e98785e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e9878677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e98784f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e987879fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efce8a80082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e98119e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x32,0x37,0x36,0x37,0x2d,0x3d,0x3c,0x30,0x27,0x27,0x2f,0x25,0x20,0x21,0x27,0x27,0x2f,0x27,0x27,0x27,0x65,0x78,0x70,0x27,0x4e,0x27,0x32,0x2d,0x7,0x20,0x73,0x65,0x72,0x69,0x66,0x27,0x27,0x2f,0x27,0x37,0x27,0x65,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $32767-=<0''/% !''/'''exp'N'2-\007 serif''/'7'e'.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-0608601abdca733e2b15500555ef74c502c99ad1 Step #5: Base64: JDMyNzY3LT08MCcnLyUgIScnLycnJ2V4cCdOJzItByBzZXJpZicnLyc3J2UnLickJy0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3249 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1051094477 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55952abf9d60, 0x55952ade271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55952ade2720,0x55952cc6c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0608601abdca733e2b15500555ef74c502c99ad1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3992 processed earlier; will process 6984 files now Step #5: ==117040== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55952173c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559527d77728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559527d5a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559527d5a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559521742652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5595216a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55952169dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559521734595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5595247638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5595247638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5595247638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5595247638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5595247638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5595247638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5595247638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5595247638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5595247638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5595247638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55952696845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5595236c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5595236cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55952347ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55952347ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55952347b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55952347a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55952347a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55952347a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559527d5c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559527d657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559527d4d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559527d77fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f995db3b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55952169c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x17,0x17,0x17,0x17,0x17,0x17,0x44,0x65,0x6e,0xe2,0x81,0x9f,0x28,0xe2,0x80,0xac,0x0,0xe1,0xa0,0x8e,0x3c,0x20,0x7f,0x7f,0xe2,0x80,0x8d,0x0,0x0,0x28,0xe2,0x81,0xae,0x0,0x64,0x64,0x64,0xb5,0xf3,0xa0,0x81,0x87,0x64,0x64, Step #5: \341\240\216= \177\027\027\027\027\027\027Den\342\201\237(\342\200\254\000\341\240\216< \177\177\342\200\215\000\000(\342\201\256\000ddd\265\363\240\201\207dd Step #5: artifact_prefix='./'; Test unit written to ./oom-9e28927529dc5c3e0724582992294ca7665c2762 Step #5: Base64: 4aCOPSB/FxcXFxcXRGVu4oGfKOKArADhoI48IH9/4oCNAAAo4oGuAGRkZLXzoIGHZGQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3250 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1051620181 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555eb15e6d60, 0x555eb17cf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555eb17cf720,0x555eb36592c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9e28927529dc5c3e0724582992294ca7665c2762' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3993 processed earlier; will process 6983 files now Step #5: ==117076== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555ea81292d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555eae764728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555eae74746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555eae74738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555ea812f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555ea809042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555ea808ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555ea8121595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555eab1508c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555eab1508c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555eab1508c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555eab1508c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555eab1508c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555eab1508c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555eab1508c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555eab1508c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555eab1508c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555eab1508c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555ead35545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555eaa0b1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555eaa0bc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555ea9e67d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555ea9e67d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555ea9e68808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555ea9e67944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555ea9e67944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555ea9e67944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555eae74994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555eae7527b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555eae73a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555eae764fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f48f7607082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555ea808943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf,0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0xa,0x6e,0x5b,0x3c,0x21,0x41,0x54,0x54,0x4c,0x49,0x53,0x54,0x9,0x75,0xa,0x4f,0xa,0x28,0xcd,0x83,0x7c,0xcd,0x80,0x7c,0xcd,0x83,0x7c,0xcd,0x83,0x7c,0xcd,0x83,0x7c,0xcd,0x83,0x7c,0xcd,0x83, Step #5: \357\273\277 Step #5: Step #5: #0 0x5607100922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5607166cd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5607166b046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5607166b038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560710098652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56070fff942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56070fff3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56071008a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5607130b98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5607130b98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5607130b98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5607130b98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5607130b98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5607130b98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5607130b98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5607130b98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5607130b98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5607130b98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5607152be45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56071201a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5607120255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560711dd0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560711dd0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560711dd1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560711dd0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560711dd0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560711dd0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5607166b294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5607166bb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5607166a3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5607166cdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6a860a9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56070fff243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x27,0x27,0x5c,0xa,0x27,0x5c,0xa,0x27,0x27,0x5c,0xa,0x27,0x27,0x5c,0xd,0x27,0x27,0x5c,0xa,0x27,0x27,0x5c,0xa,0x27,0x27,0x27,0xa,0x5c,0x27,0x5c,0xa,0x27,0x27,0x27,0x5c,0xa,0x27,0x27,0x5c,0xa,0x27,0x27,0x5c,0xa,0x27,0x27,0x5c,0xa,0x27,0x27, Step #5: ''\\\012'\\\012''\\\012''\\\015''\\\012''\\\012'''\012\\'\\\012'''\\\012''\\\012''\\\012''\\\012'' Step #5: artifact_prefix='./'; Test unit written to ./oom-a3465e53274f9fb8674985ad58d5943da22d8f58 Step #5: Base64: JydcCidcCicnXAonJ1wNJydcCicnXAonJycKXCdcCicnJ1wKJydcCicnXAonJ1wKJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3252 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1052663839 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7a51e4d60, 0x55b7a53cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7a53cd720,0x55b7a72572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a3465e53274f9fb8674985ad58d5943da22d8f58' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3995 processed earlier; will process 6981 files now Step #5: ==117148== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b79bd272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7a2362728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7a234546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7a234538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b79bd2d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b79bc8e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b79bc88c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b79bd1f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b79ed4e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b79ed4e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b79ed4e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b79ed4e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b79ed4e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b79ed4e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b79ed4e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b79ed4e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b79ed4e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b79ed4e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7a0f5345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b79dcaf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b79dcba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b79da65d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b79da65d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b79da66808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b79da65944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b79da65944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b79da65944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7a234794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7a23507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7a2338529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7a2362fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3d7098a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b79bc8743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x75,0x7b,0x74,0x24,0x3b,0x6e,0x24,0x3b,0x74,0x24,0x3b,0x6e,0x24,0x3b,0x74,0x24,0x3b,0x74,0x24,0x3b,0x74,0x24,0x3b,0x74,0x24,0x3b,0x6e,0x24,0x3b,0x6e,0x24,0x3b,0x6e,0x24,0x3b,0x6e,0x24,0x3b,0x74,0x24,0x3b,0x6e,0x24,0x3b,0x6e,0x24,0x3b,0x6e,0x24,0x3b, Step #5: u{t$;n$;t$;n$;t$;t$;t$;t$;n$;n$;n$;n$;t$;n$;n$;n$; Step #5: artifact_prefix='./'; Test unit written to ./oom-90318999e50e9a1785a7fb71411b4c6161cc90f5 Step #5: Base64: dXt0JDtuJDt0JDtuJDt0JDt0JDt0JDt0JDtuJDtuJDtuJDtuJDt0JDtuJDtuJDtuJDs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3253 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1053191384 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561ddcd06d60, 0x561ddceef71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561ddceef720,0x561dded792c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/90318999e50e9a1785a7fb71411b4c6161cc90f5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3996 processed earlier; will process 6980 files now Step #5: #1 pulse cov: 3917 ft: 3918 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 4321 ft: 4709 exec/s: 0 rss: 173Mb Step #5: ==117184== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561dd38492d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561dd9e84728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561dd9e6746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561dd9e6738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561dd384f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561dd37b042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561dd37aac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561dd3841595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561dd68708c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561dd68708c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561dd68708c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561dd68708c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561dd68708c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561dd68708c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561dd68708c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561dd68708c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561dd68708c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561dd68708c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561dd8a7545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561dd57d1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561dd57dc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561dd5587d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561dd5587d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561dd5588808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561dd5587944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561dd5587944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561dd5587944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561dd9e6994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561dd9e727b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561dd9e5a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561dd9e84fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb18d298082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561dd37a943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0xa,0x3d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b,0x7d,0x24,0x7b, Step #5: =\012=${}${}${}${}${}${}${}${}${}${}${}${}${}${}${}${ Step #5: artifact_prefix='./'; Test unit written to ./oom-3f4453cf5222a592e8360f72d554a4dbeb21390d Step #5: Base64: PQo9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHt9JHs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3254 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1053803436 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d6fd5a4d60, 0x55d6fd78d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d6fd78d720,0x55d6ff6172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3f4453cf5222a592e8360f72d554a4dbeb21390d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 3999 processed earlier; will process 6977 files now Step #5: #1 pulse cov: 3663 ft: 3664 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 11762 ft: 12694 exec/s: 0 rss: 191Mb Step #5: ==117220== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d6f40e72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d6fa722728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d6fa70546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d6fa70538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d6f40ed652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d6f404e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d6f4048c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d6f40df595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d6f710e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d6f710e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d6f710e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d6f710e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d6f710e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d6f710e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d6f710e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d6f710e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d6f710e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d6f710e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d6f931345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d6f606f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d6f607a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d6f5e25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d6f5e25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d6f5e26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d6f5e25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d6f5e25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d6f5e25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d6fa70794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d6fa7107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d6fa6f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d6fa722fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd32e918082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d6f404743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdd,0xa7,0xce,0x9b,0xd3,0x8c,0xdd,0x8d,0xde,0xa9,0xdc,0xb9,0xdf,0x8d,0xd6,0x8e,0xde,0xaa,0xdd,0xb9,0xdf,0x8c,0xde,0x8c,0xd5,0x8d,0xd4,0x89,0xdc,0xa1,0xdd,0x82,0x8a,0x20,0x0,0x2f,0x85,0x24,0x0,0x0,0xf3,0x8e,0x12,0x6b,0x25,0x44,0x8d,0x2f,0x89,0x26, Step #5: \335\247\316\233\323\214\335\215\336\251\334\271\337\215\326\216\336\252\335\271\337\214\336\214\325\215\324\211\334\241\335\202\212 \000/\205$\000\000\363\216\022k%D\215/\211& Step #5: artifact_prefix='./'; Test unit written to ./oom-293aa9c5dd7632c271ee200d313638e205167291 Step #5: Base64: 3afOm9OM3Y3eqdy5343Wjt6q3bnfjN6M1Y3Uidyh3YKKIAAvhSQAAPOOEmslRI0viSY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3255 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1054433859 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b9eb2ed60, 0x560b9ed1771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b9ed17720,0x560ba0ba12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/293aa9c5dd7632c271ee200d313638e205167291' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4002 processed earlier; will process 6974 files now Step #5: ==117256== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b956712d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b9bcac728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b9bc8f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b9bc8f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b95677652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b955d842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b955d2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b95669595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b986988c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b986988c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b986988c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b986988c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b986988c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b986988c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b986988c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b986988c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b986988c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b986988c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b9a89d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b975f9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b976045a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b973afd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b973afd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b973b0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b973af944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b973af944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b973af944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b9bc9194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b9bc9a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b9bc82529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b9bcacfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f69af120082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b955d143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x0,0xa,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x10,0x4,0x0,0x18,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x0, Step #5: \001\000\012\000\000\000\000\000\000\000\000\000\001\000\020\004\000\030\000\000\000\000\000\000\001\000\000\000\000\000\000\000\000\001\000\000\000\000\001\000\000\000\000\000\001\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-e1189cec715dfc16c6d9e859498e3cf641f9dcb8 Step #5: Base64: AQAKAAAAAAAAAAAAAQAQBAAYAAAAAAAAAQAAAAAAAAAAAQAAAAABAAAAAAABAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3256 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1054952191 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ea9f5b5d60, 0x55ea9f79e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ea9f79e720,0x55eaa16282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e1189cec715dfc16c6d9e859498e3cf641f9dcb8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4003 processed earlier; will process 6973 files now Step #5: ==117292== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ea960f82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ea9c733728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ea9c71646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ea9c71638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ea960fe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ea9605f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ea96059c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ea960f0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ea9911f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ea9911f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ea9911f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ea9911f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ea9911f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ea9911f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ea9911f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ea9911f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ea9911f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ea9911f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ea9b32445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ea98080578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ea9808b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ea97e36d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ea97e36d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ea97e37808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ea97e36944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ea97e36944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ea97e36944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ea9c71894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ea9c7217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ea9c709529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ea9c733fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9e8db76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ea9605843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x73,0x64,0x3,0x11,0x47,0x0,0x54,0x49,0x42,0x2b,0x0,0x0,0x5b,0x67,0xe,0x68,0x68,0x43,0xda,0x82,0x0,0x20,0x79,0x11,0x47,0x0,0x54,0x49,0x42,0x2b,0x0,0x0,0x5b,0x67,0xe,0x68,0x68,0x43,0xda,0x82,0x1,0x70,0x70,0x70,0x70,0x70,0x20, Step #5: ID3sd\003\021G\000TIB+\000\000[g\016hhC\332\202\000 y\021G\000TIB+\000\000[g\016hhC\332\202\001ppppp Step #5: artifact_prefix='./'; Test unit written to ./oom-e4a65f3b7a2fe60c8b2d950cd09beaffa7f02d33 Step #5: Base64: SUQzc2QDEUcAVElCKwAAW2cOaGhD2oIAIHkRRwBUSUIrAABbZw5oaEPaggFwcHBwcCA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3257 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1055471350 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561193d6cd60, 0x561193f5571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561193f55720,0x561195ddf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e4a65f3b7a2fe60c8b2d950cd09beaffa7f02d33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4004 processed earlier; will process 6972 files now Step #5: ==117328== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56118a8af2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561190eea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561190ecd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561190ecd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56118a8b5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56118a81642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56118a810c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56118a8a7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56118d8d68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56118d8d68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56118d8d68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56118d8d68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56118d8d68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56118d8d68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56118d8d68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56118d8d68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56118d8d68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56118d8d68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56118fadb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56118c837578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56118c8425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56118c5edd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56118c5edd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56118c5ee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56118c5ed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56118c5ed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56118c5ed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561190ecf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561190ed87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561190ec0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561190eeafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc50e056082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56118a80f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x64,0x3d,0x4d,0x61,0x67,0x69,0x63,0x6b,0x43,0x61,0x63,0x68,0x65,0xb,0x50,0x61,0x67,0x65,0x3d,0x58,0x2d,0x31,0xb,0x50,0x61,0x67,0x65,0x3d,0x58,0x2d,0x32,0xb,0x50,0x61,0x67,0x65,0x3d,0x58,0x2d,0x31,0xb,0x50,0x61,0x67,0x65,0x3d,0x58,0x2d,0x38, Step #5: Id=MagickCache\013Page=X-1\013Page=X-2\013Page=X-1\013Page=X-8 Step #5: artifact_prefix='./'; Test unit written to ./oom-784f391212939e19ee5bce0d2a76361db962ae6c Step #5: Base64: SWQ9TWFnaWNrQ2FjaGULUGFnZT1YLTELUGFnZT1YLTILUGFnZT1YLTELUGFnZT1YLTg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3258 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1056007358 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56352cf4ad60, 0x56352d13371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56352d133720,0x56352efbd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/784f391212939e19ee5bce0d2a76361db962ae6c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4005 processed earlier; will process 6971 files now Step #5: ==117364== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563523a8d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56352a0c8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56352a0ab46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56352a0ab38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563523a93652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5635239f442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5635239eec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563523a85595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563526ab48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563526ab48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563526ab48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563526ab48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563526ab48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563526ab48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563526ab48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563526ab48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563526ab48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563526ab48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563528cb945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563525a15578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563525a205a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5635257cbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5635257cbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5635257cc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5635257cb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5635257cb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5635257cb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56352a0ad94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56352a0b67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56352a09e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56352a0c8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd63d10c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5635239ed43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0xa,0xa,0x2d,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0xa,0xa,0x2d,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0xa,0xa,0x2d,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d, Step #5: -\012\012\012--\012-\012-\012-\012\012\012--\012-\012-\012-\012-\012-\012-\012-\012\012\012--\012-\012-\012-\012-\012-\012-\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-1fb7a4e9a670703b5dabe379e3186f5f07357dc2 Step #5: Base64: LQoKCi0tCi0KLQotCgoKLS0KLQotCi0KLQotCi0KLQoKCi0tCi0KLQotCi0KLQotCi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3259 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1056550306 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d415e3dd60, 0x55d41602671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d416026720,0x55d417eb02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1fb7a4e9a670703b5dabe379e3186f5f07357dc2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4006 processed earlier; will process 6970 files now Step #5: ==117400== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d40c9802d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d412fbb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d412f9e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d412f9e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d40c986652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d40c8e742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d40c8e1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d40c978595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d40f9a78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d40f9a78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d40f9a78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d40f9a78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d40f9a78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d40f9a78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d40f9a78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d40f9a78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d40f9a78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d40f9a78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d411bac45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d40e908578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d40e9135a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d40e6bed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d40e6bed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d40e6bf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d40e6be944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d40e6be944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d40e6be944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d412fa094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d412fa97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d412f91529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d412fbbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f380e6e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d40c8e043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x27,0xf3,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27,0xf2,0xad,0xad,0x94,0x22,0x27, Step #5: \"'\363\255\255\224\"'\362\255\255\224\"'\362\255\255\224\"'\362\255\255\224\"'\362\255\255\224\"'\362\255\255\224\"'\362\255\255\224\"'\362\255\255\224\"' Step #5: artifact_prefix='./'; Test unit written to ./oom-3da7cc41c028b39127ec96130cc14c334ed4c2ee Step #5: Base64: Iifzra2UIifyra2UIifyra2UIifyra2UIifyra2UIifyra2UIifyra2UIifyra2UIic= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3260 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1057073548 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559e4190bd60, 0x559e41af471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559e41af4720,0x559e4397e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3da7cc41c028b39127ec96130cc14c334ed4c2ee' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4007 processed earlier; will process 6969 files now Step #5: ==117436== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559e3844e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559e3ea89728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559e3ea6c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559e3ea6c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559e38454652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559e383b542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559e383afc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559e38446595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559e3b4758c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559e3b4758c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559e3b4758c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559e3b4758c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559e3b4758c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559e3b4758c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559e3b4758c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559e3b4758c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559e3b4758c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559e3b4758c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559e3d67a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559e3a3d6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559e3a3e15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559e3a18cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559e3a18cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559e3a18d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559e3a18c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559e3a18c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559e3a18c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559e3ea6e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559e3ea777b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559e3ea5f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559e3ea89fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8f7a7cb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559e383ae43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0,0x0,0x52,0x2f,0x8b,0xe,0x35,0x0,0xbb,0x0,0x6b,0x6b,0x6b,0x6b,0x6b,0x90,0x0,0x0,0x23,0x0,0x0,0x0,0x0,0x6d,0x5d,0x6d,0x6d,0x6d,0x40,0x2,0xff,0xa0,0x0,0x0,0xff,0xff,0x73,0xff,0xff,0xff,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: \000\000\000\000\000\000R/\213\0165\000\273\000kkkkk\220\000\000#\000\000\000\000m]mmm@\002\377\240\000\000\377\377s\377\377\377\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-412a9e0dbf184ba372da8cc8fb5de6c766d44aac Step #5: Base64: AAAAAAAAUi+LDjUAuwBra2tra5AAACMAAAAAbV1tbW1AAv+gAAD//3P///8AAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3261 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1057615720 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55621f253d60, 0x55621f43c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55621f43c720,0x5562212c62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/412a9e0dbf184ba372da8cc8fb5de6c766d44aac' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4008 processed earlier; will process 6968 files now Step #5: ==117472== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556215d962d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55621c3d1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55621c3b446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55621c3b438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556215d9c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556215cfd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556215cf7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556215d8e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556218dbd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556218dbd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556218dbd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556218dbd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556218dbd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556218dbd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556218dbd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556218dbd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556218dbd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556218dbd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55621afc245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556217d1e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556217d295a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556217ad4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556217ad4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556217ad5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556217ad4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556217ad4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556217ad4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55621c3b694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55621c3bf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55621c3a7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55621c3d1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f065af74082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556215cf643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf,0x3c,0xf3,0xa0,0x80,0xb4,0x6d,0x61,0x74,0x68,0x20,0x78,0x6d,0x6c,0x6e,0x73,0x3d,0x22,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f,0x77,0x77,0x74,0x54,0x68,0x20,0x78,0x6d,0x6c,0x6d,0x73,0x70,0x2d,0x32,0x31,0x35,0x30,0x38,0x38,0x38,0x6c,0x22,0x20, Step #5: \357\273\277<\363\240\200\264math xmlns=\"http://wwtTh xmlmsp-2150888l\" Step #5: artifact_prefix='./'; Test unit written to ./oom-af3a2c5dedfd382884c86cefc1487229442b9f5c Step #5: Base64: 77u/PPOggLRtYXRoIHhtbG5zPSJodHRwOi8vd3d0VGggeG1sbXNwLTIxNTA4ODhsIiA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3262 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1058144132 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ee12048d60, 0x55ee1223171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ee12231720,0x55ee140bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af3a2c5dedfd382884c86cefc1487229442b9f5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4009 processed earlier; will process 6967 files now Step #5: ==117508== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ee08b8b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ee0f1c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ee0f1a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ee0f1a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ee08b91652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ee08af242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ee08aecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ee08b83595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ee0bbb28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ee0bbb28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ee0bbb28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ee0bbb28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ee0bbb28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ee0bbb28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ee0bbb28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ee0bbb28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ee0bbb28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ee0bbb28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ee0ddb745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ee0ab13578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ee0ab1e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ee0a8c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ee0a8c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ee0a8ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ee0a8c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ee0a8c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ee0a8c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ee0f1ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ee0f1b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ee0f19c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ee0f1c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6ef355c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ee08aeb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xe3,0x80,0xae,0x61,0x30,0x64,0x61,0xf,0x0,0x0,0x0,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0xa6,0xcd,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\200\256\004\343\200\256a0da\017\000\000\0003\004\342\200\256\004\342\200\256a\342\200\256\246\315\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-6fcb387aa69bd6430e40f282d6f1f105964bd0eb Step #5: Base64: SUQzSU0zBOKArgTigK5h4oCuBOOArmEwZGEPAAAAMwTigK4E4oCuYeKArqbNnu/9uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3263 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1058675714 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56005fc3ad60, 0x56005fe2371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56005fe23720,0x560061cad2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6fcb387aa69bd6430e40f282d6f1f105964bd0eb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4010 processed earlier; will process 6966 files now Step #5: ==117544== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56005677d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56005cdb8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56005cd9b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56005cd9b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560056783652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600566e442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600566dec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560056775595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600597a48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600597a48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600597a48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600597a48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600597a48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600597a48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600597a48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600597a48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600597a48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600597a48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56005b9a945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560058705578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600587105a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5600584bbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5600584bbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5600584bc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5600584bb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5600584bb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5600584bb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56005cd9d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56005cda67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56005cd8e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56005cdb8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f712ef13082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600566dd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xa2,0x80,0xae,0x61,0x30,0x64,0x61,0xf,0x0,0x0,0x0,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0xa6,0xcd,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\200\256\004\242\200\256a0da\017\000\000\0003\004\342\200\256\004\342\200\256a\342\200\256\246\315\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-25ae4b659eeafabf24b35c5c16f21f7a3c42547b Step #5: Base64: SUQzSU0zBOKArgTigK5h4oCuBKKArmEwZGEPAAAAMwTigK4E4oCuYeKArqbNnu/9uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3264 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1059192591 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55bf1c376d60, 0x55bf1c55f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55bf1c55f720,0x55bf1e3e92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/25ae4b659eeafabf24b35c5c16f21f7a3c42547b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4011 processed earlier; will process 6965 files now Step #5: ==117580== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bf12eb92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bf194f4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bf194d746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bf194d738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bf12ebf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bf12e2042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bf12e1ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bf12eb1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bf15ee08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bf15ee08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bf15ee08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bf15ee08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bf15ee08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bf15ee08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bf15ee08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bf15ee08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bf15ee08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bf15ee08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bf180e545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bf14e41578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bf14e4c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bf14bf7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bf14bf7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bf14bf8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bf14bf7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bf14bf7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bf14bf7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bf194d994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bf194e27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bf194ca529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bf194f4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd985a4b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bf12e1943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xe6,0x80,0xae,0x61,0x30,0x64,0x61,0xf,0x0,0x0,0x0,0x33,0x80,0x4,0xae,0xe2,0x4,0xe2,0x80,0xae,0x61,0xe2,0x20,0x69,0xa,0xa,0x72,0x3d,0x73,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\200\256\004\346\200\256a0da\017\000\000\0003\200\004\256\342\004\342\200\256a\342 i\012\012r=s\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-4bdf5354d5aa3bc0bbc123b05a5d4ba479c13191 Step #5: Base64: SUQzSU0zBOKArgTigK5h4oCuBOaArmEwZGEPAAAAM4AEruIE4oCuYeIgaQoKcj1zuTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3265 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1059723579 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558bea3b4d60, 0x558bea59d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558bea59d720,0x558bec4272c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4bdf5354d5aa3bc0bbc123b05a5d4ba479c13191' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4012 processed earlier; will process 6964 files now Step #5: ==117616== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558be0ef72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558be7532728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558be751546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558be751538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558be0efd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558be0e5e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558be0e58c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558be0eef595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558be3f1e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558be3f1e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558be3f1e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558be3f1e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558be3f1e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558be3f1e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558be3f1e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558be3f1e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558be3f1e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558be3f1e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558be612345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558be2e7f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558be2e8a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558be2c35d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558be2c35d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558be2c36808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558be2c35944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558be2c35944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558be2c35944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558be751794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558be75207b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558be7508529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558be7532fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28123e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558be0e5743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0x30,0x64,0x61,0xf,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x38,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0xd0,0xa6,0xcd,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\200\256\004\342\200\256a0da\017\000\000\000\000\000\000\0008\001\000\000\000\000\000\000\320\246\315\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-096ff1344d6a6707500785ad28fb87c441de5ffd Step #5: Base64: SUQzSU0zBOKArgTigK5h4oCuBOKArmEwZGEPAAAAAAAAADgBAAAAAAAA0KbNnu/9uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3266 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1060246135 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563141bb5d60, 0x563141d9e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563141d9e720,0x563143c282c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/096ff1344d6a6707500785ad28fb87c441de5ffd' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4013 processed earlier; will process 6963 files now Step #5: ==117652== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5631386f82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56313ed33728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56313ed1646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56313ed1638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5631386fe652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56313865f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563138659c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5631386f0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56313b71f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56313b71f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56313b71f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56313b71f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56313b71f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56313b71f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56313b71f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56313b71f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56313b71f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56313b71f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56313d92445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56313a680578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56313a68b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56313a436d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56313a436d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56313a437808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56313a436944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56313a436944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56313a436944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56313ed1894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56313ed217b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56313ed09529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56313ed33fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4a34686082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56313865843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x34,0x68,0x3d,0xa,0x21,0x42,0x3d,0xa,0x3d,0xa,0x3d,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24,0x24, Step #5: 4h=\012!B=\012=\012=$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Step #5: artifact_prefix='./'; Test unit written to ./oom-6d49b8432b68552567a2a3a7dcefe8cc98b0ffce Step #5: Base64: NGg9CiFCPQo9Cj0kJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3267 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1060798551 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55903826bd60, 0x55903845471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559038454720,0x55903a2de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6d49b8432b68552567a2a3a7dcefe8cc98b0ffce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4014 processed earlier; will process 6962 files now Step #5: #1 pulse cov: 3729 ft: 3730 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 3938 ft: 4232 exec/s: 0 rss: 176Mb Step #5: ==117688== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55902edae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5590353e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5590353cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5590353cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55902edb4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55902ed1542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55902ed0fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55902eda6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559031dd58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559031dd58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559031dd58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559031dd58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559031dd58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559031dd58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559031dd58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559031dd58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559031dd58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559031dd58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559033fda45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559030d36578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559030d415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559030aecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559030aecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559030aed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559030aec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559030aec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559030aec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5590353ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5590353d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5590353bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5590353e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9c9b7e6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55902ed0e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0x3a,0x3f,0xe3,0x8c,0x96,0xe3,0x81,0xbe,0xe3,0x81,0x9e,0xe3,0x81,0xbe,0xe3,0x81,0x9e,0xe3,0x84,0xbe,0xe3,0x81,0xbe,0xef,0xbc,0x8f,0xe3,0x81,0xb5,0xe3,0x81,0xbe,0xe3,0x81,0xbf,0xe3,0x81,0x9e,0xe3,0x81,0xbe,0xe3,0x81,0xbe,0xe3,0x81,0xbe,0xe4,0x8c,0x96, Step #5: i:?\343\214\226\343\201\276\343\201\236\343\201\276\343\201\236\343\204\276\343\201\276\357\274\217\343\201\265\343\201\276\343\201\277\343\201\236\343\201\276\343\201\276\343\201\276\344\214\226 Step #5: artifact_prefix='./'; Test unit written to ./oom-69c56fd34a8c2b905fbc0df27d04341ca653a2ee Step #5: Base64: aTo/44yW44G+44Ge44G+44Ge44S+44G+77yP44G144G+44G/44Ge44G+44G+44G+5IyW Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3268 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1061416506 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a2c3cf3d60, 0x55a2c3edc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a2c3edc720,0x55a2c5d662c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/69c56fd34a8c2b905fbc0df27d04341ca653a2ee' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4017 processed earlier; will process 6959 files now Step #5: ==117724== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a2ba8362d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a2c0e71728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a2c0e5446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a2c0e5438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a2ba83c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a2ba79d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a2ba797c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a2ba82e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a2bd85d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a2bd85d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a2bd85d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a2bd85d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a2bd85d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a2bd85d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a2bd85d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a2bd85d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a2bd85d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a2bd85d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a2bfa6245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a2bc7be578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a2bc7c95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a2bc574d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a2bc574d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a2bc575808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a2bc574944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a2bc574944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a2bc574944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a2c0e5694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a2c0e5f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a2c0e47529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a2c0e71fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f123217e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a2ba79643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5, Step #5: ws:\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-98d8bdc4476b550ff10741aabc5be67c62c56548 Step #5: Base64: d3M64ayR4ay14ayR4ay14ayR4ay14ayR4ay14ayR4ay14ayR4ay14ayR4ay14ayR4ay1 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3269 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1061933322 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fa94f51d60, 0x55fa9513a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fa9513a720,0x55fa96fc42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/98d8bdc4476b550ff10741aabc5be67c62c56548' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4018 processed earlier; will process 6958 files now Step #5: ==117760== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fa8ba942d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fa920cf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fa920b246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fa920b238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fa8ba9a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fa8b9fb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fa8b9f5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fa8ba8c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fa8eabb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fa8eabb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fa8eabb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fa8eabb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fa8eabb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fa8eabb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fa8eabb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fa8eabb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fa8eabb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fa8eabb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fa90cc045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fa8da1c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fa8da275a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fa8d7d2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fa8d7d2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fa8d7d3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fa8d7d2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fa8d7d2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fa8d7d2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fa920b494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fa920bd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fa920a5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fa920cffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ef3717082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fa8b9f443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0x30,0x64,0x61,0xf,0x0,0x0,0x0,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0xa6,0xcd,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\200\256\004\342\200\256a0da\017\000\000\0003\004\342\200\256\004\342\200\256a\342\200\256\246\315\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-548bd26eec36f1c8058644ed4e0eff2459ff0273 Step #5: Base64: SUQzSU0zBOKArgTigK5h4oCuBOKArmEwZGEPAAAAMwTigK4E4oCuYeKArqbNnu/9uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3270 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1062447331 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55facd531d60, 0x55facd71a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55facd71a720,0x55facf5a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/548bd26eec36f1c8058644ed4e0eff2459ff0273' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4019 processed earlier; will process 6957 files now Step #5: ==117796== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fac40742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55faca6af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55faca69246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55faca69238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fac407a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fac3fdb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fac3fd5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fac406c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fac709b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fac709b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fac709b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fac709b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fac709b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fac709b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fac709b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fac709b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fac709b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fac709b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fac92a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fac5ffc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fac60075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fac5db2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fac5db2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fac5db3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fac5db2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fac5db2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fac5db2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55faca69494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55faca69d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55faca685529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55faca6affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd755d9c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fac3fd443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x41,0x3a,0x2f,0xe1,0xa4,0xb9,0xe1,0xa4,0xb9,0xe1,0x80,0xb9,0xeb,0xa4,0xb9,0xe1,0x80,0xb9,0xe1,0xa4,0xb9,0xe1,0xa4,0xa9,0xe1,0x80,0xb9,0xeb,0xa4,0xb9,0xe1,0x80,0xb9,0xe1,0xa4,0xb9,0xe1,0xa4,0xb9,0xe1,0x80,0xb9,0xe1,0x80,0xb9,0xe1,0xa4,0xb9,0xe1,0xa0,0xb9, Step #5: A:/\341\244\271\341\244\271\341\200\271\353\244\271\341\200\271\341\244\271\341\244\251\341\200\271\353\244\271\341\200\271\341\244\271\341\244\271\341\200\271\341\200\271\341\244\271\341\240\271 Step #5: artifact_prefix='./'; Test unit written to ./oom-9715a046217a509932aea77b4306a571e84febc3 Step #5: Base64: QTov4aS54aS54YC566S54YC54aS54aSp4YC566S54YC54aS54aS54YC54YC54aS54aC5 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3271 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1062988055 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a4d1b89d60, 0x55a4d1d7271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a4d1d72720,0x55a4d3bfc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9715a046217a509932aea77b4306a571e84febc3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4020 processed earlier; will process 6956 files now Step #5: #1 pulse cov: 3998 ft: 3999 exec/s: 0 rss: 175Mb Step #5: ==117832== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a4c86cc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a4ced07728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a4cecea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a4cecea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a4c86d2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a4c863342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a4c862dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a4c86c4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a4cb6f38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a4cb6f38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a4cb6f38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a4cb6f38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a4cb6f38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a4cb6f38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a4cb6f38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a4cb6f38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a4cb6f38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a4cb6f38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a4cd8f845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a4ca654578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4ca65f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4ca40ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4ca40ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4ca40b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4ca40a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4ca40a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4ca40a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a4cecec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a4cecf57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a4cecdd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a4ced07fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7049970082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a4c862c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0xd,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x5b, Step #5: \015- - - - - - - - - - - - - - - - - - - - - - - - [ Step #5: artifact_prefix='./'; Test unit written to ./oom-c786dfa6dd619fbdf508f7252b474bf76215d7d7 Step #5: Base64: IA0tIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSBb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3272 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1063600870 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fe6f4d7d60, 0x55fe6f6c071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fe6f6c0720,0x55fe7154a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c786dfa6dd619fbdf508f7252b474bf76215d7d7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4022 processed earlier; will process 6954 files now Step #5: ==117868== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fe6601a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fe6c655728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fe6c63846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fe6c63838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fe66020652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fe65f8142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fe65f7bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fe66012595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fe690418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fe690418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fe690418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fe690418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fe690418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fe690418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fe690418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fe690418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fe690418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fe690418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fe6b24645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fe67fa2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fe67fad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fe67d58d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fe67d58d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fe67d59808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fe67d58944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fe67d58944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fe67d58944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fe6c63a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fe6c6437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fe6c62b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fe6c655fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f83068c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fe65f7a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd,0xd,0x22,0x5c,0x75,0x7b,0x66,0x46,0x7d,0x5c,0x75,0x7b,0x66,0x66,0x7d,0x5c,0x75,0x7b,0x66,0x66,0x7d,0x5c,0x75,0x7b,0x66,0x66,0x7d,0x5c,0x75,0x7b,0x66,0x66,0x7d,0x5c,0x75,0x7b,0x66,0x66,0x7d,0x5c,0x75,0x7b,0x66,0x46,0x7d,0x5c,0x75,0x7b,0x62,0x66,0x7d, Step #5: \015\015\"\\u{fF}\\u{ff}\\u{ff}\\u{ff}\\u{ff}\\u{ff}\\u{fF}\\u{bf} Step #5: artifact_prefix='./'; Test unit written to ./oom-b406f424f5b8a6d10b1af4c7e03efa6a73b41f53 Step #5: Base64: DQ0iXHV7ZkZ9XHV7ZmZ9XHV7ZmZ9XHV7ZmZ9XHV7ZmZ9XHV7ZmZ9XHV7ZkZ9XHV7YmZ9 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3273 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1064117771 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56009496ad60, 0x560094b5371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560094b53720,0x5600969dd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b406f424f5b8a6d10b1af4c7e03efa6a73b41f53' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4023 processed earlier; will process 6953 files now Step #5: ==117904== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56008b4ad2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560091ae8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560091acb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560091acb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56008b4b3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56008b41442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56008b40ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56008b4a5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56008e4d48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56008e4d48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56008e4d48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56008e4d48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56008e4d48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56008e4d48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56008e4d48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56008e4d48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56008e4d48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56008e4d48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5600906d945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56008d435578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56008d4405a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56008d1ebd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56008d1ebd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56008d1ec808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56008d1eb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56008d1eb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56008d1eb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560091acd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560091ad67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560091abe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560091ae8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6f933c2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56008b40d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x64,0x61,0xf,0x0,0x0,0x0,0x33,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\377\377\377\377\377\377\377\377da\017\000\000\0003\200\256\004\342\200\256a\342\200\256\004\342\200\256\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-0054929c1a4672652a806fcd22327684b154d3d1 Step #5: Base64: SUQzSU0zBOKArgTigK5h4v//////////ZGEPAAAAM4CuBOKArmHigK4E4oCunu/9uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3274 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1064648287 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5604e0bd4d60, 0x5604e0dbd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5604e0dbd720,0x5604e2c472c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0054929c1a4672652a806fcd22327684b154d3d1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4024 processed earlier; will process 6952 files now Step #5: #1 pulse cov: 11465 ft: 11466 exec/s: 0 rss: 192Mb Step #5: ==117940== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5604d77172d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5604ddd52728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5604ddd3546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5604ddd3538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5604d771d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5604d767e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5604d7678c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5604d770f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604da73e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604da73e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604da73e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604da73e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604da73e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604da73e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604da73e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604da73e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604da73e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604da73e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5604dc94345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5604d969f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604d96aa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5604d9455d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5604d9455d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5604d9456808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5604d9455944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5604d9455944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5604d9455944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5604ddd3794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5604ddd407b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5604ddd28529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5604ddd52fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3fdc7fa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5604d767743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x76,0x42,0xa,0x3d,0x20,0x20,0xa,0x3d,0x20,0x20,0x2e,0x1d,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x4,0x0,0x60,0x60,0xa,0x69,0x66,0x3d,0x42,0x42,0xa,0x3d,0x20,0x20,0xa,0x3d,0x20,0x20,0x2e,0x1d,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x4,0x0,0x60,0x60,0xa, Step #5: vB\012= \012= .\035\001\000\000\000\000\000\000\004\000``\012if=BB\012= \012= .\035\001\000\000\000\000\000\000\004\000``\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-5bb424710035b7415a8c091ad48ab77aa8bbd5a0 Step #5: Base64: dkIKPSAgCj0gIC4dAQAAAAAAAAQAYGAKaWY9QkIKPSAgCj0gIC4dAQAAAAAAAAQAYGAK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3275 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1065366581 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5600497bbd60, 0x5600499a471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5600499a4720,0x56004b82e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5bb424710035b7415a8c091ad48ab77aa8bbd5a0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4026 processed earlier; will process 6950 files now Step #5: ==117976== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600402fe2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560046939728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56004691c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56004691c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560040304652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56004026542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56004025fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5600402f6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5600433258c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5600433258c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5600433258c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5600433258c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5600433258c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5600433258c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5600433258c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5600433258c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5600433258c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5600433258c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56004552a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560042286578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5600422915a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56004203cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56004203cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56004203d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56004203c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56004203c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56004203c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56004691e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5600469277b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56004690f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560046939fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff5b1c6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56004025e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x78,0xcd,0x84,0x70,0xcd,0x84,0x7d,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84,0x78,0xcd,0x84, Step #5: ws:x\315\204p\315\204}\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204x\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-63464f71fdbba8447f4ff0171eeb397cdd0067d5 Step #5: Base64: d3M6eM2EcM2Efc2EeM2EeM2EeM2EeM2EeM2EeM2EeM2EeM2EeM2EeM2EeM2EeM2EeM2E Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3276 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1065891715 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556e2804fd60, 0x556e2823871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556e28238720,0x556e2a0c22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/63464f71fdbba8447f4ff0171eeb397cdd0067d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4027 processed earlier; will process 6949 files now Step #5: ==118012== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556e1eb922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556e251cd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556e251b046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556e251b038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556e1eb98652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556e1eaf942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556e1eaf3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556e1eb8a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556e21bb98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556e21bb98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556e21bb98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556e21bb98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556e21bb98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556e21bb98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556e21bb98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556e21bb98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556e21bb98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556e21bb98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556e23dbe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556e20b1a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556e20b255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556e208d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556e208d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556e208d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556e208d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556e208d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556e208d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556e251b294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556e251bb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556e251a3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556e251cdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc52edb9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556e1eaf243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5e,0x28,0x2e,0x24,0x7c,0x2e,0x3f,0x29,0x29,0x7b,0x39,0x38,0x39,0x7b,0x7c,0x2e,0x3f,0x29,0x29,0x7b,0x39,0x38,0x39,0x7b,0x7c,0x2e,0x3f,0x28,0x0,0x29,0x2f,0x2e,0xa,0x28,0x0,0x29,0x2f,0x2e,0xa,0x2e,0x3f,0x29,0x7b,0x39,0x38,0x39,0x39,0x38,0x39,0x7d,0x24, Step #5: ^(.$|.?)){989{|.?)){989{|.?(\000)/.\012(\000)/.\012.?){989989}$ Step #5: artifact_prefix='./'; Test unit written to ./oom-c233f3bf32750c1c6db86650df6813f2cd2ad107 Step #5: Base64: XiguJHwuPykpezk4OXt8Lj8pKXs5ODl7fC4/KAApLy4KKAApLy4KLj8pezk4OTk4OX0k Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3277 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1066427354 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e3f6e07d60, 0x55e3f6ff071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e3f6ff0720,0x55e3f8e7a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c233f3bf32750c1c6db86650df6813f2cd2ad107' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4028 processed earlier; will process 6948 files now Step #5: ==118048== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e3ed94a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e3f3f85728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e3f3f6846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e3f3f6838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e3ed950652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e3ed8b142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e3ed8abc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e3ed942595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e3f09718c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e3f09718c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e3f09718c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e3f09718c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e3f09718c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e3f09718c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e3f09718c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e3f09718c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e3f09718c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e3f09718c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e3f2b7645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e3ef8d2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e3ef8dd5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e3ef688d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e3ef688d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e3ef689808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e3ef688944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e3ef688944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e3ef688944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e3f3f6a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e3f3f737b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e3f3f5b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e3f3f85fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f908d50e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e3ed8aa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x6e,0x69,0x6f,0x6e,0x2d,0x6b,0x65,0x79,0xa,0x6e,0x74,0x46,0x54,0x79,0x77,0x42,0x4b,0x52,0x48,0x25,0x72,0x74,0x61,0x76,0x45,0x64,0x6d,0x65,0x79,0x73,0x63,0x65,0x6e,0x74,0x20,0x4e,0x30,0x65,0x46,0x76,0x52,0x6c,0xa,0x61,0x20,0x2d,0x31,0x32,0x38,0x2e, Step #5: onion-key\012ntFTywBKRH%rtavEdmeyscent N0eFvRl\012a -128. Step #5: artifact_prefix='./'; Test unit written to ./oom-e94b995c32253e406e39b48c1e50546f039437b3 Step #5: Base64: b25pb24ta2V5Cm50RlR5d0JLUkglcnRhdkVkbWV5c2NlbnQgTjBlRnZSbAphIC0xMjgu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3278 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1066952415 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b2bed0d60, 0x556b2c0b971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b2c0b9720,0x556b2df432c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e94b995c32253e406e39b48c1e50546f039437b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4029 processed earlier; will process 6947 files now Step #5: ==118084== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b22a132d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b2904e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b2903146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b2903138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b22a19652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b2297a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b22974c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b22a0b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b25a3a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b25a3a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b25a3a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b25a3a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b25a3a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b25a3a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b25a3a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b25a3a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b25a3a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b25a3a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b27c3f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b2499b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b249a65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b24751d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b24751d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b24752808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b24751944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b24751944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b24751944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b2903394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b2903c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b29024529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b2904efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8edbdb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b2297343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x3f,0x78,0x6d,0x6c,0x20,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x3d,0x22,0x22,0x20,0x73,0x74,0x61,0x6e,0x64,0x61,0x6c,0x6f,0x6e,0x65,0x3d,0x22,0x79,0x65,0x73,0x22,0x3f,0x3e,0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0x20,0x65,0x5b,0x25,0x55,0x61,0x3b, Step #5: Step #5: Step #5: #0 0x55786e3fb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557874a36728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557874a1946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557874a1938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55786e401652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55786e36242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55786e35cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55786e3f3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5578714228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5578714228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5578714228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5578714228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5578714228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5578714228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5578714228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5578714228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5578714228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5578714228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55787362745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557870383578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55787038e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557870139d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557870139d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55787013a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557870139944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557870139944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557870139944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557874a1b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557874a247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557874a0c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557874a36fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fad9b12d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55786e35b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0x2e,0xc2,0xbc,0xa,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0x2e,0xc2,0xbc,0xa,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0x2e,0xc2,0xbc,0xa,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0x2e,0xc2,0xbc, Step #5: \357\267\272\357\267\272\357\267\272.\302\274\012\357\267\272\357\267\272\357\267\272.\302\274\012\357\267\272\357\267\272\357\267\272.\302\274\012\357\267\272\357\267\272\357\267\272.\302\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-e0d2ca00ce3dab4485a33f127c4d4a34236fce90 Step #5: Base64: 77e677e677e6LsK8Cu+3uu+3uu+3ui7CvArvt7rvt7rvt7ouwrwK77e677e677e6LsK8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3280 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1068015067 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aeadad7d60, 0x55aeadcc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aeadcc0720,0x55aeafb4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e0d2ca00ce3dab4485a33f127c4d4a34236fce90' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4031 processed earlier; will process 6945 files now Step #5: ==118156== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aea461a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aeaac55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aeaac3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aeaac3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aea4620652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aea458142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aea457bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aea4612595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aea76418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aea76418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aea76418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aea76418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aea76418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aea76418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aea76418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aea76418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aea76418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aea76418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aea984645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aea65a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aea65ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aea6358d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aea6358d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aea6359808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aea6358944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aea6358944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aea6358944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aeaac3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aeaac437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aeaac2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aeaac55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe931c5f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aea457a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3,0xe0,0xbd,0xb3, Step #5: ws:\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263\340\275\263 Step #5: artifact_prefix='./'; Test unit written to ./oom-d013a7d432128e2927c19411cad76c2e9d0cc708 Step #5: Base64: d3M64L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z4L2z Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3281 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1068548216 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556923350d60, 0x55692353971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556923539720,0x5569253c32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d013a7d432128e2927c19411cad76c2e9d0cc708' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4032 processed earlier; will process 6944 files now Step #5: #1 pulse cov: 3659 ft: 3660 exec/s: 0 rss: 174Mb Step #5: ==118192== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556919e932d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5569204ce728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5569204b146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5569204b138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556919e99652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556919dfa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556919df4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556919e8b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55691ceba8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55691ceba8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55691ceba8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55691ceba8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55691ceba8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55691ceba8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55691ceba8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55691ceba8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55691ceba8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55691ceba8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55691f0bf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55691be1b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55691be265a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55691bbd1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55691bbd1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55691bbd2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55691bbd1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55691bbd1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55691bbd1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5569204b394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5569204bc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5569204a4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5569204cefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b5a398082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556919df343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x54,0x68,0x69,0x73,0x20,0x66,0x69,0x6c,0x65,0x20,0x6d,0x75,0x73,0x74,0x20,0x62,0x65,0x20,0x63,0x6f,0x6e,0x76,0x65,0x72,0x74,0x65,0x64,0x20,0x77,0x69,0x74,0x68,0x20,0x42,0x69,0x6e,0x48,0x65,0x78,0x20,0x34,0x2e,0x30,0x29,0x1,0x0,0x33,0x4a,0x21,0x20, Step #5: (This file must be converted with BinHex 4.0)\001\0003J! Step #5: artifact_prefix='./'; Test unit written to ./oom-a762d33bfa359f4817259ba7c3e4e9fe6250d48c Step #5: Base64: KFRoaXMgZmlsZSBtdXN0IGJlIGNvbnZlcnRlZCB3aXRoIEJpbkhleCA0LjApAQAzSiEg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3282 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1069126391 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5592fad73d60, 0x5592faf5c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5592faf5c720,0x5592fcde62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a762d33bfa359f4817259ba7c3e4e9fe6250d48c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4034 processed earlier; will process 6942 files now Step #5: ==118228== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5592f18b62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5592f7ef1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5592f7ed446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5592f7ed438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5592f18bc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5592f181d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5592f1817c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5592f18ae595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5592f48dd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5592f48dd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5592f48dd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5592f48dd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5592f48dd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5592f48dd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5592f48dd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5592f48dd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5592f48dd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5592f48dd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5592f6ae245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5592f383e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5592f38495a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5592f35f4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5592f35f4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5592f35f5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5592f35f4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5592f35f4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5592f35f4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5592f7ed694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5592f7edf7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5592f7ec7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5592f7ef1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f166fde3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5592f181643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e,0xef,0xbe,0x9e, Step #5: ws:\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236\357\276\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-b1ec0f0f1ce0a43ac6b93a7acdfd57d592b61d92 Step #5: Base64: d3M6776e776e776e776e776e776e776e776e776e776e776e776e776e776e776e776e Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3283 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1069654010 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56447eaced60, 0x56447ecb771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56447ecb7720,0x564480b412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b1ec0f0f1ce0a43ac6b93a7acdfd57d592b61d92' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4035 processed earlier; will process 6941 files now Step #5: #1 pulse cov: 11258 ft: 11259 exec/s: 0 rss: 193Mb Step #5: ==118264== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5644756112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56447bc4c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56447bc2f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56447bc2f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564475617652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56447557842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564475572c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564475609595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5644786388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5644786388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5644786388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5644786388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5644786388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5644786388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5644786388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5644786388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5644786388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5644786388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56447a83d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564477599578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5644775a45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56447734fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56447734fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564477350808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56447734f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56447734f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56447734f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56447bc3194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56447bc3a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56447bc22529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56447bc4cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb81599a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56447557143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x73,0x20,0x30,0xa,0x20,0x20,0x3d,0x22,0x22,0x22,0x22,0x0,0x0,0x22,0x22,0x22,0x22,0x0,0x0,0x0,0x0,0x0,0x22,0x1,0x2d,0x0, Step #5: \"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"s 0\012 =\"\"\"\"\000\000\"\"\"\"\000\000\000\000\000\"\001-\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-b301e7388fa0bfc8a0d72cfd8e306c2c30a06df0 Step #5: Base64: IiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiInMgMAogID0iIiIiAAAiIiIiAAAAAAAiAS0A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3284 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1070257011 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5578913b1d60, 0x55789159a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55789159a720,0x5578934242c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b301e7388fa0bfc8a0d72cfd8e306c2c30a06df0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4037 processed earlier; will process 6939 files now Step #5: ==118300== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557887ef42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55788e52f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55788e51246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55788e51238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557887efa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557887e5b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557887e55c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557887eec595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55788af1b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55788af1b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55788af1b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55788af1b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55788af1b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55788af1b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55788af1b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55788af1b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55788af1b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55788af1b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55788d12045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557889e7c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557889e875a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557889c32d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557889c32d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557889c33808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557889c32944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557889c32944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557889c32944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55788e51494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55788e51d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55788e505529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55788e52ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd104dc1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557887e5443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0x30,0xe0,0xa7,0x9c,0xe1,0xb7,0x9a,0xe0,0xb7,0x9d,0xe1,0xa5,0x9d,0xe0,0xa5,0x9d,0xe1,0xa5,0x9d,0xe0,0xa5,0x9d,0x30,0x65,0x78,0x2d,0x36,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x5a,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: 0\340\247\234\341\267\232\340\267\235\341\245\235\340\245\235\341\245\235\340\245\2350ex-6Z Step #5: artifact_prefix='./'; Test unit written to ./oom-b39a1a64fb99e548df45498dd8284bbb95b60aeb Step #5: Base64: PHN2Zz48dGV4dD4w4Kec4bea4Led4aWd4KWd4aWd4KWdMGV4LTY8L3RleHQ+Wjwvc3ZnPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3285 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1070790176 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559900c7fd60, 0x559900e6871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559900e68720,0x559902cf22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b39a1a64fb99e548df45498dd8284bbb95b60aeb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4038 processed earlier; will process 6938 files now Step #5: ==118336== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5598f77c22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5598fddfd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5598fdde046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5598fdde038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5598f77c8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5598f772942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5598f7723c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5598f77ba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5598fa7e98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5598fa7e98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5598fa7e98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5598fa7e98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5598fa7e98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5598fa7e98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5598fa7e98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5598fa7e98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5598fa7e98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5598fa7e98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5598fc9ee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5598f974a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5598f97555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5598f9500d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5598f9500d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5598f9501808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5598f9500944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5598f9500944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5598f9500944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5598fdde294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5598fddeb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5598fddd3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5598fddfdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3ebce32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5598f772243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0x5b,0x5c,0x70,0x4c,0x2e,0x2d,0xc6,0xac,0x52,0x29,0x8,0x5d,0x5b,0x5c,0x70,0x4c,0x2e,0x2d,0xc6,0xac,0x52,0x29,0x8,0x5d,0x5b,0x5c,0x70,0x4c,0x2e,0x2d,0xc6,0xac,0x52,0x29,0x8,0x5d,0x5b,0x5c,0x70,0x4c,0x2e,0x2d,0xc6,0xac,0x52,0x2b,0x8,0x5d, Step #5: (?i)[\\pL.-\306\254R)\010][\\pL.-\306\254R)\010][\\pL.-\306\254R)\010][\\pL.-\306\254R+\010] Step #5: artifact_prefix='./'; Test unit written to ./oom-20f27da9a50ba541e8d906bcc7b51fd48fc4b3a6 Step #5: Base64: KD9pKVtccEwuLcasUikIXVtccEwuLcasUikIXVtccEwuLcasUikIXVtccEwuLcasUisIXQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3286 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1071311078 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563e14c89d60, 0x563e14e7271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563e14e72720,0x563e16cfc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/20f27da9a50ba541e8d906bcc7b51fd48fc4b3a6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4039 processed earlier; will process 6937 files now Step #5: #1 pulse cov: 3586 ft: 3587 exec/s: 0 rss: 172Mb Step #5: ==118372== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563e0b7cc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563e11e07728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563e11dea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563e11dea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563e0b7d2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563e0b73342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563e0b72dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563e0b7c4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563e0e7f38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563e0e7f38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563e0e7f38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563e0e7f38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563e0e7f38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563e0e7f38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563e0e7f38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563e0e7f38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563e0e7f38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563e0e7f38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563e109f845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563e0d754578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563e0d75f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563e0d50ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563e0d50ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563e0d50b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563e0d50a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563e0d50a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563e0d50a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563e11dec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563e11df57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563e11ddd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563e11e07fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f83dd312082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563e0b72c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x76,0x21,0x39,0xa,0x0,0x70,0x69,0x7d,0x7d,0x7d,0x7d,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x72,0x65,0x61,0x6d,0xd7,0xaf,0x39,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0xd7,0xa3,0x1,0xd7,0xa3,0x2d,0x0, Step #5: #v!9\012\000pi}}}}dddddddream\327\2579>>>>>>>>>>>>>>>>>>>\327\243\001\327\243-\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0d996df07f4b4ccbf2b3ec5e20fc96ed1b6845c5 Step #5: Base64: I3YhOQoAcGl9fX19ZGRkZGRkZHJlYW3Xrzk+Pj4+Pj4+Pj4+Pj4+Pj4+Pj4+16MB16MtAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3287 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1071895435 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56477cf40d60, 0x56477d12971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56477d129720,0x56477efb32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0d996df07f4b4ccbf2b3ec5e20fc96ed1b6845c5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4041 processed earlier; will process 6935 files now Step #5: ==118408== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564773a832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56477a0be728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56477a0a146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56477a0a138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564773a89652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5647739ea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5647739e4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564773a7b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564776aaa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564776aaa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564776aaa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564776aaa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564776aaa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564776aaa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564776aaa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564776aaa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564776aaa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564776aaa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564778caf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564775a0b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564775a165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5647757c1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5647757c1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5647757c2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5647757c1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5647757c1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5647757c1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56477a0a394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56477a0ac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56477a094529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56477a0befa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc27ddde082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5647739e343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x40,0x1,0x7f,0x77,0x1e,0x0,0x47,0x45,0x4f,0x42,0x7d,0x24,0x7f,0x5d,0x7f,0x7f,0x6f,0x7c,0x10,0x2f,0x5b,0x32,0x2e,0x2e,0x2f,0x73,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x32,0x10,0x2e,0x2f,0x2d,0x5f,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x24, Step #5: ID3\004@\001\177w\036\000GEOB}$\177]\177\177o|\020/[2../s 7 0 2\020 2\020./-_\177\177\177o\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-83b818d8353e35693ced8bcc4447f539946870a1 Step #5: Base64: SUQzBEABf3ceAEdFT0J9JH9df39vfBAvWzIuLi9zIDcgMCAyECAyEC4vLV9/f39vAABDJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3288 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1072433160 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56007271bd60, 0x56007290471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560072904720,0x56007478e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/83b818d8353e35693ced8bcc4447f539946870a1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4042 processed earlier; will process 6934 files now Step #5: #1 pulse cov: 3969 ft: 3970 exec/s: 0 rss: 174Mb Step #5: ==118444== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56006925e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56006f899728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56006f87c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56006f87c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560069264652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600691c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5600691bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560069256595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56006c2858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56006c2858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56006c2858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56006c2858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56006c2858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56006c2858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56006c2858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56006c2858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56006c2858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56006c2858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56006e48a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56006b1e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56006b1f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56006af9cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56006af9cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56006af9d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56006af9c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56006af9c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56006af9c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56006f87e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56006f8877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56006f86f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56006f899fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f54a1c34082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5600691be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0x80,0xed,0x98,0x80,0xed,0x90,0xa0,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0x80,0x90,0xed,0x98,0x80,0xed,0x98,0x80,0xed,0x90,0x80,0xed,0x98,0x80,0xed,0x90,0xed, Step #5: \363\240\200\200\355\230\200\355\220\240\355\230\200\355\220\200\355\230\200\355\220\200\355\230\200\355\220\200\355\230\200\355\220\200\355\200\220\355\230\200\355\230\200\355\220\200\355\230\200\355\220\355 Step #5: artifact_prefix='./'; Test unit written to ./oom-c2b8772225e62607a37f2489695632fac195c26e Step #5: Base64: 86CAgO2YgO2QoO2YgO2QgO2YgO2QgO2YgO2QgO2YgO2QgO2AkO2YgO2YgO2QgO2YgO2Q7Q== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3289 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1073004972 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5648adb7fd60, 0x5648add6871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5648add68720,0x5648afbf22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c2b8772225e62607a37f2489695632fac195c26e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4044 processed earlier; will process 6932 files now Step #5: ==118480== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5648a46c22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5648aacfd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5648aace046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5648aace038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5648a46c8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5648a462942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5648a4623c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5648a46ba595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5648a76e98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5648a76e98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5648a76e98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5648a76e98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5648a76e98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5648a76e98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5648a76e98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5648a76e98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5648a76e98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5648a76e98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5648a98ee45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5648a664a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5648a66555a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5648a6400d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5648a6400d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5648a6401808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5648a6400944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5648a6400944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5648a6400944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5648aace294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5648aaceb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5648aacd3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5648aacfdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f855ad3b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5648a462243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0x78,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5,0xe1,0xac,0xb5, Step #5: ws:x\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265\341\254\265 Step #5: artifact_prefix='./'; Test unit written to ./oom-8e93bc46b3b62fc46ec1bcc1e42bbba6e419f037 Step #5: Base64: d3M6eOGsteGsteGsteGsteGsteGsteGsteGsteGsteGsteGsteGsteGsteGsteGsteGstQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3290 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1073521302 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7dd6a0d60, 0x55b7dd88971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7dd889720,0x55b7df7132c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8e93bc46b3b62fc46ec1bcc1e42bbba6e419f037' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4045 processed earlier; will process 6931 files now Step #5: ==118516== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7d41e32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7da81e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7da80146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7da80138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7d41e9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7d414a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7d4144c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7d41db595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7d720a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7d720a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7d720a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7d720a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7d720a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7d720a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7d720a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7d720a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7d720a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7d720a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7d940f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7d616b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7d61765a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7d5f21d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7d5f21d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7d5f22808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7d5f21944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7d5f21944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7d5f21944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7da80394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7da80c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7da7f4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7da81efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa15373e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7d414343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4a,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0xe1,0x85,0x9f,0x0,0x34,0xe1,0x85,0x9f,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x47,0x64,0xa,0x2d,0xa,0xf3,0xa0,0x81,0xb3,0x66, Step #5: J-----BE\341\205\237\0004\341\205\237GIN -------IN -----------\012Gd\012-\012\363\240\201\263f Step #5: artifact_prefix='./'; Test unit written to ./oom-33ff3234553f6dbae159f6e98de93450308d5b33 Step #5: Base64: Si0tLS0tQkXhhZ8ANOGFn0dJTiAtLS0tLS0tSU4gLS0tLS0tLS0tLS0KR2QKLQrzoIGzZg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3291 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1074050572 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561e89ea7d60, 0x561e8a09071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561e8a090720,0x561e8bf1a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/33ff3234553f6dbae159f6e98de93450308d5b33' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4046 processed earlier; will process 6930 files now Step #5: ==118552== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561e809ea2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561e87025728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561e8700846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561e8700838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561e809f0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561e8095142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561e8094bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561e809e2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561e83a118c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561e83a118c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561e83a118c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561e83a118c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561e83a118c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561e83a118c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561e83a118c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561e83a118c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561e83a118c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561e83a118c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561e85c1645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561e82972578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561e8297d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561e82728d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561e82728d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561e82729808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561e82728944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561e82728944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561e82728944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561e8700a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561e870137b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561e86ffb529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561e87025fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbb7e98b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561e8094a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x66,0x31,0x3e,0x3c,0x66,0x66,0x66,0x66,0x70,0x66,0x70,0x65,0x3e,0x3c,0x66,0x66,0x66,0x66,0x70,0x66,0x70,0x65,0x3e,0x3f,0x78,0x6d,0x6c,0x3c,0x66,0x66,0x66,0x66,0x70,0x66,0x70,0x65,0x3e,0x38,0x30,0x32,0x66,0x0,0x3e,0x3f,0x67,0x62,0x32,0x33,0x31,0x32,0x78, Step #5: ?xml802f\000>?gb2312x Step #5: artifact_prefix='./'; Test unit written to ./oom-f31ddfdfb18efa8863b9289c7758edb4a5b334cc Step #5: Base64: PGYxPjxmZmZmcGZwZT48ZmZmZnBmcGU+P3htbDxmZmZmcGZwZT44MDJmAD4/Z2IyMzEyeA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3292 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1074572781 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca54922d60, 0x55ca54b0b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca54b0b720,0x55ca569952c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f31ddfdfb18efa8863b9289c7758edb4a5b334cc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4047 processed earlier; will process 6929 files now Step #5: ==118588== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca4b4652d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca51aa0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca51a8346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca51a8338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca4b46b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca4b3cc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca4b3c6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca4b45d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca4e48c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca4e48c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca4e48c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca4e48c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca4e48c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca4e48c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca4e48c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca4e48c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca4e48c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca4e48c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca5069145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca4d3ed578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca4d3f85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca4d1a3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca4d1a3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca4d1a4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca4d1a3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca4d1a3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca4d1a3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca51a8594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca51a8e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca51a76529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca51aa0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9c8bf37082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca4b3c543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x2d,0x42,0x45,0x47,0xff, Step #5: x-----B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-B-BEG\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-fb3feb94820ebdacb5dfc40a3d97c37674fcdf9d Step #5: Base64: eC0tLS0tQi1CLUItQi1CLUItQi1CLUItQi1CLUItQi1CLUItQi1CLUItQi1CLUItQkVH/w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3293 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1075095292 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5653bae85d60, 0x5653bb06e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5653bb06e720,0x5653bcef82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb3feb94820ebdacb5dfc40a3d97c37674fcdf9d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4048 processed earlier; will process 6928 files now Step #5: #1 pulse cov: 3510 ft: 3511 exec/s: 0 rss: 175Mb Step #5: #2 pulse cov: 3723 ft: 3948 exec/s: 0 rss: 176Mb Step #5: ==118624== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5653b19c82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5653b8003728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5653b7fe646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5653b7fe638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5653b19ce652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5653b192f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5653b1929c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5653b19c0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5653b49ef8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5653b49ef8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5653b49ef8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5653b49ef8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5653b49ef8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5653b49ef8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5653b49ef8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5653b49ef8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5653b49ef8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5653b49ef8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5653b6bf445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5653b3950578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5653b395b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5653b3706d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5653b3706d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5653b3707808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5653b3706944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5653b3706944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5653b3706944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5653b7fe894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5653b7ff17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5653b7fd9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5653b8003fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faeac210082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5653b192843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0x30,0xe0,0xa7,0xa1,0xe0,0xb7,0x9a,0xe0,0xb7,0x9d,0xe1,0xa5,0x9d,0xe0,0xbc,0x9d,0xe0,0xb7,0x9d,0xe0,0xb7,0x9d,0xe0,0xb7,0x9d,0x2d,0x2b,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x5a,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: 0\340\247\241\340\267\232\340\267\235\341\245\235\340\274\235\340\267\235\340\267\235\340\267\235-+Z Step #5: artifact_prefix='./'; Test unit written to ./oom-03a0f89ecd6b6ce066e93c360e5657fb21dd4dcc Step #5: Base64: PHN2Zz48dGV4dD4w4Keh4Lea4Led4aWd4Lyd4Led4Led4LedLSs8L3RleHQ+Wjwvc3ZnPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3294 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1075693583 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55fe17dd7d60, 0x55fe17fc071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55fe17fc0720,0x55fe19e4a2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/03a0f89ecd6b6ce066e93c360e5657fb21dd4dcc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4051 processed earlier; will process 6925 files now Step #5: ==118660== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55fe0e91a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55fe14f55728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55fe14f3846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55fe14f3838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55fe0e920652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55fe0e88142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55fe0e87bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55fe0e912595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55fe119418c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55fe119418c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55fe119418c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55fe119418c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55fe119418c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55fe119418c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55fe119418c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55fe119418c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55fe119418c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55fe119418c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55fe13b4645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55fe108a2578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55fe108ad5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55fe10658d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55fe10658d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55fe10659808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55fe10658944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55fe10658944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55fe10658944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55fe14f3a94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55fe14f437b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55fe14f2b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55fe14f55fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdbe454c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55fe0e87a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x90,0x80,0x81,0xef,0xbf,0xa9,0xef,0xb4,0xaf,0xef,0xbf,0xa9,0xef,0xbf,0xa3,0xef,0xbf,0xa3,0xef,0xbf,0xa8,0xef,0xbf,0xab,0xef,0xbf,0xa3,0xef,0xbf,0xa3,0xef,0xbf,0xa9,0xef,0xbf,0xab,0xef,0x9f,0xa3,0xef,0xbf,0xa3,0xef,0xbf,0xa9,0xef,0xbf,0xaf,0xef,0xa9,0xef, Step #5: \360\220\200\201\357\277\251\357\264\257\357\277\251\357\277\243\357\277\243\357\277\250\357\277\253\357\277\243\357\277\243\357\277\251\357\277\253\357\237\243\357\277\243\357\277\251\357\277\257\357\251\357 Step #5: artifact_prefix='./'; Test unit written to ./oom-7b5449ba20fb57f84d263f7a1d7afb056fd0dc41 Step #5: Base64: 8JCAge+/qe+0r++/qe+/o++/o++/qO+/q++/o++/o++/qe+/q++fo++/o++/qe+/r++p7w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3295 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1076232533 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55804e09dd60, 0x55804e28671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55804e286720,0x5580501102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7b5449ba20fb57f84d263f7a1d7afb056fd0dc41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4052 processed earlier; will process 6924 files now Step #5: ==118696== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558044be02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55804b21b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55804b1fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55804b1fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558044be6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558044b4742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558044b41c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558044bd8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558047c078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558047c078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558047c078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558047c078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558047c078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558047c078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558047c078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558047c078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558047c078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558047c078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558049e0c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558046b68578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558046b735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55804691ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55804691ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55804691f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55804691e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55804691e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55804691e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55804b20094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55804b2097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55804b1f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55804b21bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6e7900a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558044b4043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x24,0x3a,0x24,0x30,0x3a,0x3a,0x28,0x24,0x33,0x3a,0x3a,0x7b,0x24,0x3a,0x24,0x30,0x3a,0x3a,0x28,0x24,0x30,0x3a,0x3a,0x28,0x24,0x34,0x3a,0x3a,0x7b,0x24,0x3a,0x24,0x30,0x3a,0x3a,0x28,0x24,0x31,0x3a,0x3a,0x28,0x24,0x33,0x3a,0x3a,0x7b,0x30, Step #5: $3::{$:$0::($3::{$:$0::($0::($4::{$:$0::($1::($3::{0 Step #5: artifact_prefix='./'; Test unit written to ./oom-f7eae870fed6de502f366c851309833972adeaa3 Step #5: Base64: JDM6OnskOiQwOjooJDM6OnskOiQwOjooJDA6OigkNDo6eyQ6JDA6OigkMTo6KCQzOjp7MA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3296 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1076761873 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e282e36d60, 0x55e28301f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e28301f720,0x55e284ea92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7eae870fed6de502f366c851309833972adeaa3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4053 processed earlier; will process 6923 files now Step #5: ==118732== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e2799792d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e27ffb4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e27ff9746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e27ff9738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e27997f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e2798e042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e2798dac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e279971595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e27c9a08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e27c9a08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e27c9a08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e27c9a08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e27c9a08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e27c9a08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e27c9a08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e27c9a08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e27c9a08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e27c9a08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e27eba545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e27b901578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e27b90c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e27b6b7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e27b6b7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e27b6b8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e27b6b7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e27b6b7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e27b6b7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e27ff9994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e27ffa27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e27ff8a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e27ffb4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2251404082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e2798d943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x40,0x1,0x7f,0x77,0x1e,0x0,0x47,0x45,0x4f,0x42,0x7d,0x24,0x7f,0x5d,0x7f,0x7f,0x6f,0x7c,0x10,0x2f,0x5b,0x32,0x2e,0x2e,0x2d,0x73,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x33,0x10,0x2e,0x2f,0x2d,0x5f,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x24, Step #5: ID3\004@\001\177w\036\000GEOB}$\177]\177\177o|\020/[2..-s 7 0 2\020 3\020./-_\177\177\177o\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-d07422fde16bcb0f716ef0deca3efcbc91fbb1b8 Step #5: Base64: SUQzBEABf3ceAEdFT0J9JH9df39vfBAvWzIuLi1zIDcgMCAyECAzEC4vLV9/f39vAABDJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3297 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1077315051 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55982bd52d60, 0x55982bf3b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55982bf3b720,0x55982ddc52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d07422fde16bcb0f716ef0deca3efcbc91fbb1b8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4054 processed earlier; will process 6922 files now Step #5: ==118768== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5598228952d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559828ed0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559828eb346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559828eb338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55982289b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5598227fc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5598227f6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55982288d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5598258bc8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5598258bc8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5598258bc8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5598258bc8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5598258bc8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5598258bc8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5598258bc8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5598258bc8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5598258bc8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5598258bc8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559827ac145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55982481d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5598248285a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5598245d3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5598245d3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5598245d4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5598245d3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5598245d3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5598245d3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559828eb594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559828ebe7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559828ea6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559828ed0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3393f06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5598227f543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xa,0x72,0x32,0x66,0x3d,0x42,0x42,0xa,0x3d,0x20,0x60,0xd8,0x80,0x4,0x0,0x0,0xa,0xd8,0x80,0x0,0x4,0x0,0xa,0x0,0x0,0x8,0xa,0x3d,0x20,0x20,0x2e,0x1a,0x20,0x2e,0x2d,0x13,0x1d,0x10,0x0,0xa,0xd8,0x80,0x4,0x1c,0x60,0x0,0x66,0x0,0x60,0x60,0xa, Step #5: \000\012r2f=BB\012= `\330\200\004\000\000\012\330\200\000\004\000\012\000\000\010\012= .\032 .-\023\035\020\000\012\330\200\004\034`\000f\000``\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-dbd778558ab2dd37e4b0b56865f511a0ade69eb6 Step #5: Base64: AApyMmY9QkIKPSBg2IAEAAAK2IAABAAKAAAICj0gIC4aIC4tEx0QAArYgAQcYABmAGBgCg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3298 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1077975912 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eea8a38d60, 0x55eea8c2171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eea8c21720,0x55eeaaaab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dbd778558ab2dd37e4b0b56865f511a0ade69eb6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4055 processed earlier; will process 6921 files now Step #5: ==118804== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ee9f57b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eea5bb6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eea5b9946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eea5b9938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ee9f581652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ee9f4e242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ee9f4dcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ee9f573595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eea25a28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eea25a28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eea25a28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eea25a28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eea25a28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eea25a28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eea25a28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eea25a28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eea25a28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eea25a28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eea47a745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eea1503578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eea150e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eea12b9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eea12b9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eea12ba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eea12b9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eea12b9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eea12b9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eea5b9b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eea5ba47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eea5b8c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eea5bb6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc534cc7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ee9f4db43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x75,0x70,0x64,0x61,0x74,0x65,0x5d,0xa,0x63,0x6f,0x6d,0x70,0x61,0x74,0x69,0x62,0x6c,0x65,0x3d,0xf0,0x93,0x81,0xb6,0xf0,0x93,0x82,0x82,0xf0,0x92,0x82,0x82,0xf0,0x93,0x82,0xab,0xf0,0x93,0x82,0xb6,0xf0,0x93,0x82,0xa6,0xf0,0x93,0x82,0xb6,0xf0,0x93,0x82,0xae, Step #5: [update]\012compatible=\360\223\201\266\360\223\202\202\360\222\202\202\360\223\202\253\360\223\202\266\360\223\202\246\360\223\202\266\360\223\202\256 Step #5: artifact_prefix='./'; Test unit written to ./oom-c52eb83c971b5089b4f5d3ba5f1b2ad9d1a95a67 Step #5: Base64: W3VwZGF0ZV0KY29tcGF0aWJsZT3wk4G28JOCgvCSgoLwk4Kr8JOCtvCTgqbwk4K28JOCrg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3299 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1078499930 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5651dca59d60, 0x5651dcc4271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5651dcc42720,0x5651deacc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c52eb83c971b5089b4f5d3ba5f1b2ad9d1a95a67' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4056 processed earlier; will process 6920 files now Step #5: #1 pulse cov: 3594 ft: 3595 exec/s: 0 rss: 174Mb Step #5: ==118840== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5651d359c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5651d9bd7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5651d9bba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5651d9bba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5651d35a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5651d350342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5651d34fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5651d3594595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5651d65c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5651d65c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5651d65c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5651d65c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5651d65c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5651d65c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5651d65c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5651d65c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5651d65c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5651d65c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5651d87c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5651d5524578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5651d552f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5651d52dad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5651d52dad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5651d52db808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5651d52da944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5651d52da944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5651d52da944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5651d9bbc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5651d9bc57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5651d9bad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5651d9bd7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f327f029082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5651d34fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4d,0x73,0x72,0x20,0x43,0x70,0x73,0x72,0x5f,0x2c,0x4c,0x52,0xd,0x4d,0x73,0x72,0x20,0x43,0x70,0x73,0x72,0x5f,0x2c,0x4c,0x52,0xd,0x4d,0x73,0x72,0x20,0x43,0x70,0x73,0x72,0x5f,0x2c,0x4c,0x52,0xd,0x4d,0x73,0x72,0x20,0x43,0x70,0x73,0x72,0x5f,0x2c,0x4c,0x3b,0x73, Step #5: Msr Cpsr_,LR\015Msr Cpsr_,LR\015Msr Cpsr_,LR\015Msr Cpsr_,L;s Step #5: artifact_prefix='./'; Test unit written to ./oom-8d75eec200eef5d20801e7eb95bd3613db85a31a Step #5: Base64: TXNyIENwc3JfLExSDU1zciBDcHNyXyxMUg1Nc3IgQ3Bzcl8sTFINTXNyIENwc3JfLEw7cw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3300 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1079054263 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a1bda93d60, 0x55a1bdc7c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a1bdc7c720,0x55a1bfb062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8d75eec200eef5d20801e7eb95bd3613db85a31a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4058 processed earlier; will process 6918 files now Step #5: ==118876== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a1b45d62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a1bac11728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a1babf446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a1babf438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a1b45dc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a1b453d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a1b4537c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a1b45ce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a1b75fd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a1b75fd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a1b75fd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a1b75fd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a1b75fd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a1b75fd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a1b75fd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a1b75fd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a1b75fd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a1b75fd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a1b980245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a1b655e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a1b65695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a1b6314d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a1b6314d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a1b6315808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a1b6314944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a1b6314944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a1b6314944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a1babf694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a1babff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a1babe7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a1bac11fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc48bb1f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a1b453643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x80,0xa4,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xba,0xe0,0xaa,0xb2,0xe0,0xb2,0xb2,0xe0,0xb2,0xb9,0xe0,0xb2,0xba,0xe0,0xaa,0xb2,0xe0,0xb2,0xb2, Step #5: \363\240\200\244\340\262\262\340\262\262\340\262\262\340\262\262\340\262\262\340\262\262\340\262\262\340\262\262\340\262\262\340\262\272\340\252\262\340\262\262\340\262\271\340\262\272\340\252\262\340\262\262 Step #5: artifact_prefix='./'; Test unit written to ./oom-8c12088f7e09c11209a0e2444704e70027f958d5 Step #5: Base64: 86CApOCysuCysuCysuCysuCysuCysuCysuCysuCysuCyuuCqsuCysuCyueCyuuCqsuCysg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3301 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1079575169 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f724f58d60, 0x55f72514171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f725141720,0x55f726fcb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8c12088f7e09c11209a0e2444704e70027f958d5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4059 processed earlier; will process 6917 files now Step #5: ==118912== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f71ba9b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f7220d6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f7220b946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f7220b938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f71baa1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f71ba0242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f71b9fcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f71ba93595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f71eac28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f71eac28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f71eac28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f71eac28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f71eac28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f71eac28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f71eac28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f71eac28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f71eac28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f71eac28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f720cc745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f71da23578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f71da2e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f71d7d9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f71d7d9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f71d7da808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f71d7d9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f71d7d9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f71d7d9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f7220bb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f7220c47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f7220ac529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f7220d6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe4d80e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f71b9fb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x30,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0xd5,0x9a,0xc7,0x99,0xce,0xbd,0xdd,0xaa,0xd5,0x95,0xc7,0x9a,0x24,0xd7,0x85,0xd7,0x9a,0x9,0x2d,0x30,0x62,0x20,0xd5,0x9a,0xc7,0x99,0xcd,0x9c,0x9,0x3a,0xa,0x24,0xdc,0x90,0xc6,0xa5,0x32,0x6e,0x25,0x3a,0x20, Step #5: \000\000\0000jobs:\012 \325\232\307\231\316\275\335\252\325\225\307\232$\327\205\327\232\011-0b \325\232\307\231\315\234\011:\012$\334\220\306\2452n%: Step #5: artifact_prefix='./'; Test unit written to ./oom-29ad8ffe2e8160c134f9e35465dc025634546fc3 Step #5: Base64: AAAAMGpvYnM6CiDVmseZzr3dqtWVx5ok14XXmgktMGIg1ZrHmc2cCToKJNyQxqUybiU6IA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3302 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1080108576 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561bcdda6d60, 0x561bcdf8f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561bcdf8f720,0x561bcfe192c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/29ad8ffe2e8160c134f9e35465dc025634546fc3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4060 processed earlier; will process 6916 files now Step #5: ==118948== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561bc48e92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561bcaf24728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561bcaf0746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561bcaf0738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561bc48ef652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561bc485042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561bc484ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561bc48e1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561bc79108c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561bc79108c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561bc79108c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561bc79108c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561bc79108c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561bc79108c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561bc79108c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561bc79108c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561bc79108c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561bc79108c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561bc9b1545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561bc6871578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561bc687c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561bc6627d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561bc6627d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561bc6628808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561bc6627944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561bc6627944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561bc6627944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561bcaf0994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561bcaf127b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561bcaefa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561bcaf24fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f08ccf33082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561bc484943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x4f,0x27,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x45,0x27,0x5b,0xca,0xb6,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x45,0x27,0x5b,0xca,0xb6,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x45,0x27,0x5c,0xd1,0xa1,0x27,0x5c,0x2f,0xab,0xac,0x27,0x5c, Step #5: dO'\321\241'E'\\\321\241'E'[\312\266\321\241'E'\\\321\241'E'[\312\266\321\241'E'\\\321\241'E'\\\321\241'\\/\253\254'\\ Step #5: artifact_prefix='./'; Test unit written to ./oom-7fe108005f0bebcfd06fdcd3ce99b6bc7c036376 Step #5: Base64: ZE8n0aEnRSdc0aEnRSdbyrbRoSdFJ1zRoSdFJ1vKttGhJ0UnXNGhJ0UnXNGhJ1wvq6wnXA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3303 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1080638003 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55aa75f47d60, 0x55aa7613071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55aa76130720,0x55aa77fba2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7fe108005f0bebcfd06fdcd3ce99b6bc7c036376' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4061 processed earlier; will process 6915 files now Step #5: ==118984== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55aa6ca8a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55aa730c5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55aa730a846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55aa730a838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55aa6ca90652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55aa6c9f142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55aa6c9ebc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55aa6ca82595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55aa6fab18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55aa6fab18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55aa6fab18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55aa6fab18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55aa6fab18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55aa6fab18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55aa6fab18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55aa6fab18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55aa6fab18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55aa6fab18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55aa71cb645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55aa6ea12578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55aa6ea1d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55aa6e7c8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55aa6e7c8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55aa6e7c9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55aa6e7c8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55aa6e7c8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55aa6e7c8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55aa730aa94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55aa730b37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55aa7309b529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55aa730c5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f13257ef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55aa6c9ea43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x42,0x6a,0x2d,0x24,0x42,0x22,0x22,0x22,0xe2,0x80,0xad,0x22,0x3d,0x24,0x74,0x2d,0xf3,0xa0,0x81,0x8b,0x21,0x2d,0x2d,0x24,0x3d,0x24,0x42,0x6a,0x2d,0x24,0x42,0x22,0x22,0x22,0xe2,0x80,0xad,0x22,0x3d,0x24,0x74,0x2d,0xf3,0xa0,0x81,0x8b,0x21,0x2d,0x2d,0x24,0x3d,0x24, Step #5: Bj-$B\"\"\"\342\200\255\"=$t-\363\240\201\213!--$=$Bj-$B\"\"\"\342\200\255\"=$t-\363\240\201\213!--$=$ Step #5: artifact_prefix='./'; Test unit written to ./oom-3b660c95e4a3b1f297b92216aaa7f87170c6c8d0 Step #5: Base64: QmotJEIiIiLigK0iPSR0LfOggYshLS0kPSRCai0kQiIiIuKArSI9JHQt86CBiyEtLSQ9JA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3304 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1081162137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557d5a325d60, 0x557d5a50e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557d5a50e720,0x557d5c3982c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3b660c95e4a3b1f297b92216aaa7f87170c6c8d0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4062 processed earlier; will process 6914 files now Step #5: ==119020== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557d50e682d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557d574a3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557d5748646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557d5748638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557d50e6e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557d50dcf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557d50dc9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557d50e60595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557d53e8f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557d53e8f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557d53e8f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557d53e8f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557d53e8f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557d53e8f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557d53e8f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557d53e8f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557d53e8f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557d53e8f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557d5609445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557d52df0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557d52dfb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557d52ba6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557d52ba6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557d52ba7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557d52ba6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557d52ba6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557d52ba6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557d5748894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557d574917b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557d57479529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557d574a3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3fe7446082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557d50dc843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x27,0x3f,0x28,0xcc,0x9d,0x3f,0x28,0xcc,0x9d,0x0,0x26,0x28,0xcc,0x9d,0x29,0x0,0x7d,0xcc,0x9d,0x3f,0x28,0xcc,0x9d,0x0,0x26,0x28,0xcc,0x9d,0x29,0x0,0x7d,0x29,0x7b,0x36,0x39,0x34,0x29,0x7b,0x36,0x39,0x3f,0x76,0x7d,0x34,0x7d,0x29,0x7b,0x34,0x38,0x33,0x7d, Step #5: ('?(\314\235?(\314\235\000&(\314\235)\000}\314\235?(\314\235\000&(\314\235)\000}){694){69?v}4}){483} Step #5: artifact_prefix='./'; Test unit written to ./oom-b84c9087da0a0a53b6252da8a9a50fbb02618b63 Step #5: Base64: KCc/KMydPyjMnQAmKMydKQB9zJ0/KMydACYozJ0pAH0pezY5NCl7Njk/dn00fSl7NDgzfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3305 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1081685725 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c44e498d60, 0x55c44e68171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c44e681720,0x55c45050b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b84c9087da0a0a53b6252da8a9a50fbb02618b63' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4063 processed earlier; will process 6913 files now Step #5: ==119056== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c444fdb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c44b616728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c44b5f946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c44b5f938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c444fe1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c444f4242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c444f3cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c444fd3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c4480028c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c4480028c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c4480028c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c4480028c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c4480028c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c4480028c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c4480028c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c4480028c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c4480028c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c4480028c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c44a20745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c446f63578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c446f6e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c446d19d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c446d19d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c446d1a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c446d19944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c446d19944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c446d19944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c44b5fb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c44b6047b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c44b5ec529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c44b616fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2a15731082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c444f3b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x27,0x3f,0x28,0xcc,0x9d,0x3f,0x28,0xcc,0x9d,0x0,0x26,0x28,0xcc,0x9d,0x29,0x0,0x7d,0xcc,0x9d,0x3f,0x28,0xcc,0x9d,0x0,0x26,0x28,0xcc,0x9d,0x29,0x0,0x7d,0x29,0x7b,0x36,0x39,0x34,0x29,0x7b,0x36,0x39,0x34,0x7d,0x76,0x3f,0x7d,0x29,0x7b,0x34,0x38,0x33,0x7d, Step #5: ('?(\314\235?(\314\235\000&(\314\235)\000}\314\235?(\314\235\000&(\314\235)\000}){694){694}v?}){483} Step #5: artifact_prefix='./'; Test unit written to ./oom-555a7a644bd630f20cd6909512b34af4aebd63ec Step #5: Base64: KCc/KMydPyjMnQAmKMydKQB9zJ0/KMydACYozJ0pAH0pezY5NCl7Njk0fXY/fSl7NDgzfQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3306 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1082206480 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ca93ce8d60, 0x55ca93ed171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ca93ed1720,0x55ca95d5b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/555a7a644bd630f20cd6909512b34af4aebd63ec' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4064 processed earlier; will process 6912 files now Step #5: ==119092== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ca8a82b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ca90e66728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ca90e4946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ca90e4938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ca8a831652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ca8a79242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ca8a78cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ca8a823595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ca8d8528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ca8d8528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ca8d8528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ca8d8528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ca8d8528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ca8d8528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ca8d8528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ca8d8528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ca8d8528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ca8d8528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ca8fa5745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ca8c7b3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ca8c7be5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ca8c569d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ca8c569d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ca8c56a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ca8c569944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ca8c569944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ca8c569944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ca90e4b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ca90e547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ca90e3c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ca90e66fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1b286c3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ca8a78b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x50,0x55,0x54,0x20,0x2f,0xa,0x54,0x72,0x61,0x6e,0x73,0x66,0x65,0x72,0x2d,0x45,0x6e,0x63,0x6f,0x64,0x69,0x6e,0x67,0x3a,0x63,0x68,0x75,0x6e,0x6b,0x65,0x64,0xa,0xa,0x66,0x66,0x66,0x66,0x46,0x66,0x66,0x66,0x46,0x66,0x66,0x66,0xc4,0x99,0x9a,0xc8,0xd,0xa,0x6b, Step #5: PUT /\012Transfer-Encoding:chunked\012\012ffffFfffFfff\304\231\232\310\015\012k Step #5: artifact_prefix='./'; Test unit written to ./oom-8cf49f5a4399dbd32fc53e349d680a845381648b Step #5: Base64: UFVUIC8KVHJhbnNmZXItRW5jb2Rpbmc6Y2h1bmtlZAoKZmZmZkZmZmZGZmZmxJmayA0Kaw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3307 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1082747134 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5614be682d60, 0x5614be86b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5614be86b720,0x5614c06f52c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8cf49f5a4399dbd32fc53e349d680a845381648b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4065 processed earlier; will process 6911 files now Step #5: ==119128== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5614b51c52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5614bb800728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5614bb7e346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5614bb7e338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5614b51cb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5614b512c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5614b5126c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5614b51bd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5614b81ec8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5614b81ec8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5614b81ec8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5614b81ec8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5614b81ec8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5614b81ec8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5614b81ec8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5614b81ec8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5614b81ec8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5614b81ec8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5614ba3f145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5614b714d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5614b71585a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5614b6f03d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5614b6f03d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5614b6f04808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5614b6f03944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5614b6f03944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5614b6f03944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5614bb7e594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5614bb7ee7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5614bb7d6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5614bb800fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbbc4ea1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5614b512543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0xbd,0xb5,0xb5,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xab,0x82,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0x98,0xe0,0xbe,0xe8, Step #5: \360\275\265\265\340\276\230\340\276\230\340\276\230\340\276\230\340\276\230\340\253\202\340\276\230\340\276\230\340\276\230\340\276\230\340\276\230\340\276\230\340\276\230\340\276\230\340\276\230\340\276\350 Step #5: artifact_prefix='./'; Test unit written to ./oom-f1a8d5417f7b3477b681b27debfbd9d891ac3d2b Step #5: Base64: 8L21teC+mOC+mOC+mOC+mOC+mOCrguC+mOC+mOC+mOC+mOC+mOC+mOC+mOC+mOC+mOC+6A== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3308 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1083268085 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556fcf938d60, 0x556fcfb2171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556fcfb21720,0x556fd19ab2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f1a8d5417f7b3477b681b27debfbd9d891ac3d2b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4066 processed earlier; will process 6910 files now Step #5: #1 pulse cov: 3737 ft: 3738 exec/s: 0 rss: 172Mb Step #5: ==119164== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556fc647b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556fccab6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556fcca9946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556fcca9938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556fc6481652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556fc63e242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556fc63dcc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556fc6473595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556fc94a28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556fc94a28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556fc94a28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556fc94a28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556fc94a28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556fc94a28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556fc94a28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556fc94a28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556fc94a28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556fc94a28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556fcb6a745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556fc8403578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556fc840e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556fc81b9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556fc81b9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556fc81ba808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556fc81b9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556fc81b9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556fc81b9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556fcca9b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556fccaa47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556fcca8c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556fccab6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd666d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556fc63db43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x77,0x53,0x3a,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x99,0xe3,0x8c,0x96,0xe3,0x8c,0x96,0xe3,0x8c,0x97,0xe3,0x8c,0x96, Step #5: \016wS:\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\226\343\214\231\343\214\226\343\214\226\343\214\227\343\214\226 Step #5: artifact_prefix='./'; Test unit written to ./oom-61cc93fb7f5a473648db5e438f32807162e94f74 Step #5: Base64: DndTOuOMluOMluOMluOMluOMluOMluOMluOMluOMluOMluOMluOMmeOMluOMluOMl+OMlg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3309 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1083825020 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ee747a3d60, 0x55ee7498c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ee7498c720,0x55ee768162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/61cc93fb7f5a473648db5e438f32807162e94f74' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4068 processed earlier; will process 6908 files now Step #5: ==119200== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ee6b2e62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ee71921728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ee7190446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ee7190438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ee6b2ec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ee6b24d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ee6b247c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ee6b2de595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ee6e30d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ee6e30d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ee6e30d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ee6e30d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ee6e30d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ee6e30d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ee6e30d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ee6e30d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ee6e30d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ee6e30d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ee7051245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ee6d26e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ee6d2795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ee6d024d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ee6d024d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ee6d025808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ee6d024944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ee6d024944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ee6d024944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ee7190694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ee7190f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ee718f7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ee71921fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f72f46d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ee6b24643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf0,0x94,0x8f,0x8b,0xe2,0x80,0x88,0xe2,0x80,0x88,0xe2,0x80,0x88,0xe2,0x80,0x8a,0xe2,0x80,0x8a,0xe2,0x80,0x82,0xe2,0x80,0x8a,0xe2,0x80,0x80,0xe2,0x81,0x9f,0xe2,0x81,0x9f,0xe2,0x81,0x9f,0xe2,0x81,0x9f,0xe2,0x81,0x9f,0xe2,0x81,0x9f,0xe2,0x81,0x8a,0xe3,0x81,0x9f, Step #5: \360\224\217\213\342\200\210\342\200\210\342\200\210\342\200\212\342\200\212\342\200\202\342\200\212\342\200\200\342\201\237\342\201\237\342\201\237\342\201\237\342\201\237\342\201\237\342\201\212\343\201\237 Step #5: artifact_prefix='./'; Test unit written to ./oom-91cb41dc7ab01213fe061f1004193df93c31ef74 Step #5: Base64: 8JSPi+KAiOKAiOKAiOKAiuKAiuKAguKAiuKAgOKBn+KBn+KBn+KBn+KBn+KBn+KBiuOBnw== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3310 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1084339285 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cdaf266d60, 0x55cdaf44f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cdaf44f720,0x55cdb12d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/91cb41dc7ab01213fe061f1004193df93c31ef74' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4069 processed earlier; will process 6907 files now Step #5: ==119236== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cda5da92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cdac3e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cdac3c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cdac3c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cda5daf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cda5d1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cda5d0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cda5da1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cda8dd08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cda8dd08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cda8dd08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cda8dd08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cda8dd08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cda8dd08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cda8dd08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cda8dd08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cda8dd08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cda8dd08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cdaafd545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cda7d31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cda7d3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cda7ae7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cda7ae7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cda7ae8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cda7ae7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cda7ae7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cda7ae7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cdac3c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cdac3d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cdac3ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cdac3e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb88b644082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cda5d0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45,0x58,0x50,0x20,0x20,0x31,0xa,0x43,0x6e,0x54,0x20,0x20,0x32,0xa,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x39,0x32,0x32,0x33,0x33,0x37,0x32,0x30,0x31,0x30,0x36,0x30,0x30,0x30,0x31,0x35,0x36,0x31,0x35,0x2e,0xf9,0x20, Step #5: EXP 1\012CnT 2\01200000000000000009223372010600015615.\371 Step #5: artifact_prefix='./'; Test unit written to ./oom-1f96463b53364de58ee84c57b9fcccfef7421b71 Step #5: Base64: RVhQICAxCkNuVCAgMgowMDAwMDAwMDAwMDAwMDAwOTIyMzM3MjAxMDYwMDAxNTYxNS75IA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3311 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1084864426 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557975dbcd60, 0x557975fa571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557975fa5720,0x557977e2f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1f96463b53364de58ee84c57b9fcccfef7421b71' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4070 processed earlier; will process 6906 files now Step #5: #1 pulse cov: 12723 ft: 12724 exec/s: 0 rss: 194Mb Step #5: ==119272== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55796c8ff2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557972f3a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557972f1d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557972f1d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55796c905652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55796c86642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55796c860c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55796c8f7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55796f9268c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55796f9268c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55796f9268c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55796f9268c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55796f9268c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55796f9268c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55796f9268c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55796f9268c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55796f9268c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55796f9268c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557971b2b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55796e887578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55796e8925a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55796e63dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55796e63dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55796e63e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55796e63d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55796e63d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55796e63d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557972f1f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557972f287b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557972f10529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557972f3afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f24bc812082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55796c85f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x7f,0x0,0x0,0x0,0x32,0x0,0x0,0x0,0x32,0x2e,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x0,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x7f,0x0,0x0,0x0,0x32,0x0,0x24,0x0,0x0,0x0, Step #5: $\177]\177\000\000\0002\000\000\0002.23/\020./( 7 =\177\000\000\000\000\177\177\177o\000\00023/\020./( \177\000\000\0002\000$\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-58690483137cf13969294718e390ce0dc63e6700 Step #5: Base64: JH9dfwAAADIAAAAyLjIzLxAuLyggNyA9fwAAAAB/f39vAAAyMy8QLi8oIH8AAAAyACQAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3312 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1085467940 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5594ee06bd60, 0x5594ee25471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5594ee254720,0x5594f00de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/58690483137cf13969294718e390ce0dc63e6700' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4072 processed earlier; will process 6904 files now Step #5: ==119308== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5594e4bae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5594eb1e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5594eb1cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5594eb1cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5594e4bb4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5594e4b1542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5594e4b0fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5594e4ba6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5594e7bd58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5594e7bd58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5594e7bd58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5594e7bd58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5594e7bd58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5594e7bd58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5594e7bd58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5594e7bd58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5594e7bd58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5594e7bd58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5594e9dda45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5594e6b36578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5594e6b415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5594e68ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5594e68ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5594e68ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5594e68ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5594e68ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5594e68ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5594eb1ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5594eb1d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5594eb1bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5594eb1e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa880aae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5594e4b0e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0x20,0x20,0x20,0x20,0x20,0x20,0xd9,0x8b,0xd9,0x98,0x20,0xd9,0x90,0xd9,0x95,0xd9,0x86,0xd9,0x98,0x20,0xd9,0x90,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e,0x27,0x3c,0x2f,0x74,0x65,0x78, Step #5: \331\213\331\230 \331\220\331\225\331\206\331\230 \331\220'' Step #5: Step #5: #0 0x5592d2af22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5592d912d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5592d911046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5592d911038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5592d2af8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5592d2a5942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5592d2a53c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5592d2aea595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5592d5b198c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5592d5b198c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5592d5b198c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5592d5b198c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5592d5b198c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5592d5b198c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5592d5b198c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5592d5b198c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5592d5b198c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5592d5b198c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5592d7d1e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5592d4a7a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5592d4a855a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5592d4830d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5592d4830d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5592d4831808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5592d4830944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5592d4830944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5592d4830944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5592d911294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5592d911b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5592d9103529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5592d912dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9455e3c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5592d2a5243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x61,0x73,0x6d,0x1,0x0,0x0,0x0,0x1,0x5,0xf3,0x9f,0x81,0xa2,0x1,0x60,0x0,0x0,0x7b,0x3,0x2,0x1,0x0,0x0,0x0,0x0,0x1,0x5,0x0,0x60,0x0,0x0,0x7b,0x3,0x2,0x1,0x0,0xa,0x1a,0x1,0x17,0xff,0x0,0x81,0x0,0xff,0xfd,0xfd,0x0,0xfd,0x0,0xb,0x43, Step #5: \000asm\001\000\000\000\001\005\363\237\201\242\001`\000\000{\003\002\001\000\000\000\000\001\005\000`\000\000{\003\002\001\000\012\032\001\027\377\000\201\000\377\375\375\000\375\000\013C Step #5: artifact_prefix='./'; Test unit written to ./oom-7afeceb89eaf56b098c204235e6d464719f7c231 Step #5: Base64: AGFzbQEAAAABBfOfgaIBYAAAewMCAQAAAAABBQBgAAB7AwIBAAoaARf/AIEA//39AP0AC0M= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3314 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1086766223 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7bf57dd60, 0x55b7bf76671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7bf766720,0x55b7c15f02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7afeceb89eaf56b098c204235e6d464719f7c231' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4077 processed earlier; will process 6899 files now Step #5: ==119380== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7b60c02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7bc6fb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7bc6de46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7bc6de38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7b60c6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7b602742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7b6021c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7b60b8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7b90e78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7b90e78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7b90e78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7b90e78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7b90e78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7b90e78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7b90e78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7b90e78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7b90e78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7b90e78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7bb2ec45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7b8048578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7b80535a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7b7dfed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7b7dfed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7b7dff808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7b7dfe944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7b7dfe944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7b7dfe944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7bc6e094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7bc6e97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7bc6d1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7bc6fbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3cf2ac2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7b602043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x7e,0x7c,0x7c,0x24,0x7c,0x7c,0x2f,0x7c,0x7c,0x24,0x7c,0x7c,0x25,0x7c,0x7c,0x5,0x7c,0x7c,0x24,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c, Step #5: (?:(?:(?:(?:(?:$||$||$||~||$||/||$||%||\005||$)|)|)|)|)| Step #5: artifact_prefix='./'; Test unit written to ./oom-fccc376147126f92cc23858982ff6092d3a97d3d Step #5: Base64: KD86KD86KD86KD86KD86JHx8JHx8JHx8fnx8JHx8L3x8JHx8JXx8BXx8JCl8KXwpfCl8KXw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3315 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1087297378 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5572c4d1cd60, 0x5572c4f0571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5572c4f05720,0x5572c6d8f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fccc376147126f92cc23858982ff6092d3a97d3d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4078 processed earlier; will process 6898 files now Step #5: #1 pulse cov: 4069 ft: 4070 exec/s: 0 rss: 175Mb Step #5: ==119416== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5572bb85f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5572c1e9a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5572c1e7d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5572c1e7d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5572bb865652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5572bb7c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5572bb7c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5572bb857595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5572be8868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5572be8868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5572be8868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5572be8868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5572be8868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5572be8868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5572be8868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5572be8868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5572be8868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5572be8868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5572c0a8b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5572bd7e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5572bd7f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5572bd59dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5572bd59dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5572bd59e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5572bd59d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5572bd59d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5572bd59d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5572c1e7f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5572c1e887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5572c1e70529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5572c1e9afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8842da0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5572bb7bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x72,0x0,0x43,0x4b,0x2,0x48,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: ID3\002r\000CK\002H\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-11a6cd47d28085c6e690d0f44cd5957b1fb128ee Step #5: Base64: SUQzAnIAQ0sCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3316 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1087861088 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e926d57d60, 0x55e926f4071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e926f40720,0x55e928dca2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/11a6cd47d28085c6e690d0f44cd5957b1fb128ee' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4080 processed earlier; will process 6896 files now Step #5: ==119452== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e91d89a2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e923ed5728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e923eb846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e923eb838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e91d8a0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e91d80142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e91d7fbc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e91d892595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e9208c18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e9208c18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e9208c18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e9208c18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e9208c18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e9208c18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e9208c18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e9208c18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e9208c18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e9208c18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e922ac645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e91f822578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e91f82d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e91f5d8d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e91f5d8d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e91f5d9808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e91f5d8944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e91f5d8944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e91f5d8944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e923eba94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e923ec37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e923eab529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e923ed5fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f50d47eb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e91d7fa43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xe1,0x9e,0x90,0xe1,0x9f,0x84,0x9,0xa,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0xe1,0x9e,0x90,0xe1,0x9f,0x84,0x9,0xa,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \341\236\220\341\237\204\011\012\341\236\220\341\237\204\011\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-1a7f464af2bda06969fd74b8a843c01a5aae311f Step #5: Base64: PHN2Zz48dGV4dD48dGV4dD7hnpDhn4QJCjwvdGV4dD7hnpDhn4QJCjwvdGV4dD48L3N2Zz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3317 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1088386960 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55efc67ead60, 0x55efc69d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55efc69d3720,0x55efc885d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1a7f464af2bda06969fd74b8a843c01a5aae311f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4081 processed earlier; will process 6895 files now Step #5: ==119488== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55efbd32d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55efc3968728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55efc394b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55efc394b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55efbd333652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55efbd29442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55efbd28ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55efbd325595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55efc03548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55efc03548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55efc03548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55efc03548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55efc03548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55efc03548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55efc03548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55efc03548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55efc03548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55efc03548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55efc255945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55efbf2b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55efbf2c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55efbf06bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55efbf06bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55efbf06c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55efbf06b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55efbf06b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55efbf06b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55efc394d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55efc39567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55efc393e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55efc3968fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fef6957a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55efbd28d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x40,0x1,0x7f,0x77,0x1e,0x0,0x47,0x45,0x4f,0x42,0x7d,0x24,0x7f,0x5d,0x7f,0x7f,0x6f,0x7c,0x10,0x2f,0x5b,0x32,0x2e,0x2e,0x2d,0x73,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x33,0x10,0x2e,0x2f,0x4d,0x2d,0x5f,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x24, Step #5: ID3\004@\001\177w\036\000GEOB}$\177]\177\177o|\020/[2..-s 7 0 2\020 3\020./M-_\177\177\177o\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-b5fd35f8a011ea20cd3637c37ddbac322bf4fa57 Step #5: Base64: SUQzBEABf3ceAEdFT0J9JH9df39vfBAvWzIuLi1zIDcgMCAyECAzEC4vTS1ff39/bwAAQyQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3318 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1088920268 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a41cf29d60, 0x55a41d11271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a41d112720,0x55a41ef9c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b5fd35f8a011ea20cd3637c37ddbac322bf4fa57' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4082 processed earlier; will process 6894 files now Step #5: ==119524== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a413a6c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a41a0a7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a41a08a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a41a08a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a413a72652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a4139d342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a4139cdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a413a64595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a416a938c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a416a938c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a416a938c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a416a938c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a416a938c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a416a938c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a416a938c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a416a938c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a416a938c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a416a938c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a418c9845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a4159f4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a4159ff5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a4157aad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a4157aad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a4157ab808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a4157aa944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a4157aa944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a4157aa944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a41a08c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a41a0957b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a41a07d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a41a0a7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff46cdd4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a4139cc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x20,0x0,0x2d,0x20,0x20,0x0,0x0,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x40,0x3e,0x0,0x0,0x26,0x26,0x26,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x30, Step #5: - \000- \000\000&&&&&&&&>$@>\000\000&&&&$0&&&&&&&&&$0&&&&&&&&&&>$0 Step #5: artifact_prefix='./'; Test unit written to ./oom-41e71007395dbd4f271c8320ada1cd3794098a02 Step #5: Base64: LSAgAC0gIAAAJiYmJiYmJiY+JEA+AAAmJiYmJDAmJiYmJiYmJiYkMCYmJiYmJiYmJiY+JDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3319 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1089442516 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cb2c7ead60, 0x55cb2c9d371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cb2c9d3720,0x55cb2e85d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/41e71007395dbd4f271c8320ada1cd3794098a02' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4083 processed earlier; will process 6893 files now Step #5: ==119560== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cb2332d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cb29968728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cb2994b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cb2994b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cb23333652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cb2329442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cb2328ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cb23325595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cb263548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cb263548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cb263548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cb263548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cb263548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cb263548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cb263548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cb263548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cb263548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cb263548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cb2855945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cb252b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cb252c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cb2506bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cb2506bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cb2506c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cb2506b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cb2506b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cb2506b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cb2994d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cb299567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cb2993e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cb29968fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f25e5857082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cb2328d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x88,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0x2f,0xa,0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0x20,0x69,0xa,0xa,0x72,0x3d,0x73,0x65,0x66,0x3d,0xa,0x3d,0x2b,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x44,0xa,0x3d,0xa,0x39,0x20,0x60,0x20,0x60,0xa,0x9, Step #5: `\342\210\210-\000`\012\363\240\201\272/\012`\342\200\210-\000` i\012\012r=sef=\012=+=\012=\012=\012=\012D\012=\0129 ` `\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-3f988e383f2a46099289f11c4551b3f64a512e0a Step #5: Base64: YOKIiC0AYArzoIG6Lwpg4oCILQBgIGkKCnI9c2VmPQo9Kz0KPQo9Cj0KRAo9CjkgYCBgCgk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3320 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1090100717 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55beafa6bd60, 0x55beafc5471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55beafc54720,0x55beb1ade2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3f988e383f2a46099289f11c4551b3f64a512e0a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4084 processed earlier; will process 6892 files now Step #5: #1 pulse cov: 3690 ft: 3691 exec/s: 0 rss: 173Mb Step #5: ==119596== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55bea65ae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55beacbe9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55beacbcc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55beacbcc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bea65b4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bea651542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bea650fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bea65a6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bea95d58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bea95d58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bea95d58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bea95d58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bea95d58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bea95d58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bea95d58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bea95d58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bea95d58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bea95d58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55beab7da45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bea8536578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bea85415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bea82ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bea82ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bea82ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bea82ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bea82ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bea82ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55beacbce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55beacbd77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55beacbbf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55beacbe9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feba18c1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bea650e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x73,0x3a,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xa,0xe1,0xac,0xa5,0xe1,0xbc,0x91,0xe1,0xae,0xb5,0xe1,0xbf,0x91,0xe1,0xac,0xb5,0xe1,0x8f,0x91,0xe1,0xac,0xb5,0xe1,0xac,0x91,0xe1,0xac,0xb5,0x27, Step #5: ws:\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\341\254\265\341\254\221\012\341\254\245\341\274\221\341\256\265\341\277\221\341\254\265\341\217\221\341\254\265\341\254\221\341\254\265' Step #5: artifact_prefix='./'; Test unit written to ./oom-6e190389ad05d63b3188f1f17d6ce0a234d22b06 Step #5: Base64: d3M64ayR4ay14ayR4ay14ayR4ay14ayRCuGspeG8keGuteG/keGsteGPkeGsteGskeGstSc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3321 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1090675175 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5614a6f90d60, 0x5614a717971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5614a7179720,0x5614a90032c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6e190389ad05d63b3188f1f17d6ce0a234d22b06' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4086 processed earlier; will process 6890 files now Step #5: ==119632== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56149dad32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5614a410e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5614a40f146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5614a40f138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56149dad9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56149da3a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56149da34c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56149dacb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5614a0afa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5614a0afa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5614a0afa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5614a0afa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5614a0afa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5614a0afa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5614a0afa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5614a0afa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5614a0afa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5614a0afa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5614a2cff45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56149fa5b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56149fa665a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56149f811d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56149f811d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56149f812808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56149f811944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56149f811944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56149f811944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5614a40f394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5614a40fc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5614a40e4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5614a410efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9aafd56082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56149da3343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x58,0xc,0x44,0x45,0x46,0x41,0x55,0x4c,0x54,0x28,0x41,0x50,0x50,0x4c,0x59,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x57,0x49,0x54,0x48,0x28,0x57,0x49,0x54,0x48,0x28,0x43,0x4f,0x4c,0x55,0x4d,0x4e,0x53,0x28,0x27,0x7c,0x2d,0x31,0x27,0x27,0x7c,0x2d,0x31,0x27,0x29,0xa, Step #5: \012X\014DEFAULT(APPLY(((((((WITH(WITH(COLUMNS('|-1''|-1')\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-32f5a372bba4ceed38cada2c35f58748ea9100b2 Step #5: Base64: ClgMREVGQVVMVChBUFBMWSgoKCgoKChXSVRIKFdJVEgoQ09MVU1OUygnfC0xJyd8LTEnKQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3322 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1091197297 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d63d764d60, 0x55d63d94d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d63d94d720,0x55d63f7d72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/32f5a372bba4ceed38cada2c35f58748ea9100b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4087 processed earlier; will process 6889 files now Step #5: ==119668== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d6342a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d63a8e2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d63a8c546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d63a8c538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d6342ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d63420e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d634208c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d63429f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d6372ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d6372ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d6372ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d6372ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d6372ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d6372ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d6372ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d6372ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d6372ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d6372ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d6394d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d63622f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d63623a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d635fe5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d635fe5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d635fe6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d635fe5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d635fe5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d635fe5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d63a8c794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d63a8d07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d63a8b8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d63a8e2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe13c74d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d63420743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x2c,0x2d,0x2d,0x2d,0x2d,0xa,0x2c,0xa,0x2d,0xa,0x64,0xa,0x2d,0xa,0x64,0xa,0x64,0xa,0x2d,0xa,0x2,0xa,0x2d,0xa,0x2,0xa,0x2d,0xa,0x2c,0xa,0x2d,0xa,0x64,0xa,0x2,0xa,0x2d,0xa,0x2d,0xa,0xff, Step #5: \000-----BEGIN ,----\012,\012-\012d\012-\012d\012d\012-\012\002\012-\012\002\012-\012,\012-\012d\012\002\012-\012-\012\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-f41ebf8c144ef04338840eef6275d70ae25ef580 Step #5: Base64: AC0tLS0tQkVHSU4gLC0tLS0KLAotCmQKLQpkCmQKLQoCCi0KAgotCiwKLQpkCgIKLQotCv8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3323 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1091731922 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d2ddc89d60, 0x55d2dde7271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d2dde72720,0x55d2dfcfc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f41ebf8c144ef04338840eef6275d70ae25ef580' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4088 processed earlier; will process 6888 files now Step #5: ==119704== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d2d47cc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d2dae07728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d2dadea46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d2dadea38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d2d47d2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d2d473342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d2d472dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d2d47c4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d2d77f38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d2d77f38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d2d77f38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d2d77f38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d2d77f38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d2d77f38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d2d77f38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d2d77f38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d2d77f38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d2d77f38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d2d99f845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d2d6754578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d2d675f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d2d650ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d2d650ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d2d650b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d2d650a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d2d650a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d2d650a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d2dadec94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d2dadf57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d2daddd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d2dae07fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7129605082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d2d472c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0xa,0x3c,0x3c,0xa,0x2f,0x52,0x6f,0x6f,0x74,0x20,0x31,0x20,0x30,0x52,0xa,0x1,0x1,0xa,0x31,0x20,0x32,0x35,0x37,0x20,0x6f,0x62,0x6a,0x33,0x32,0x37,0x36,0x39,0x78,0x27,0xef,0xac,0xab,0xf3,0xa0,0x81,0xbb,0x2d,0x39,0x38,0x25,0xa, Step #5: trailer\012<<\012/Root 1 0R\012\001\001\0121 257 obj32769x'\357\254\253\363\240\201\273-98%\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-1fdef66f78725ed9eff81beef28a5265eb634324 Step #5: Base64: dHJhaWxlcgo8PAovUm9vdCAxIDBSCgEBCjEgMjU3IG9iajMyNzY5eCfvrKvzoIG7LTk4JQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3324 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1092243922 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55846fc59d60, 0x55846fe4271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55846fe42720,0x558471ccc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/1fdef66f78725ed9eff81beef28a5265eb634324' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4089 processed earlier; will process 6887 files now Step #5: ==119740== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55846679c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55846cdd7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55846cdba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55846cdba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5584667a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55846670342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5584666fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558466794595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584697c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584697c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584697c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584697c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584697c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584697c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584697c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584697c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584697c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584697c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55846b9c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558468724578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55846872f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5584684dad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5584684dad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5584684db808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5584684da944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5584684da944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5584684da944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55846cdbc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55846cdc57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55846cdad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55846cdd7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f00f60e9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5584666fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x24,0x24,0xd,0x33,0x2d,0x0,0x0,0x1,0x0,0x0,0x2,0x0,0x6e,0x24,0x24,0xd,0x2,0x44,0x0,0x33,0x2d,0x0,0x0,0x1,0x0,0x0,0x2,0x0,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0x6e,0xc2,0xb6, Step #5: x$$\0153-\000\000\001\000\000\002\000n$$\015\002D\0003-\000\000\001\000\000\002\000nnnnnnnnnnnnnnnnnnnnnn\302\266 Step #5: artifact_prefix='./'; Test unit written to ./oom-f16a96c89cba5f81a9ff5dcffcf8342408e26942 Step #5: Base64: eCQkDTMtAAABAAACAG4kJA0CRAAzLQAAAQAAAgBubm5ubm5ubm5ubm5ubm5ubm5ubm5uwrY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3325 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1092763728 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5564d3d5cd60, 0x5564d3f4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5564d3f45720,0x5564d5dcf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f16a96c89cba5f81a9ff5dcffcf8342408e26942' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4090 processed earlier; will process 6886 files now Step #5: ==119776== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564ca89f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564d0eda728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564d0ebd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564d0ebd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564ca8a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564ca80642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564ca800c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564ca897595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564cd8c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564cd8c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564cd8c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564cd8c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564cd8c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564cd8c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564cd8c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564cd8c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564cd8c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564cd8c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564cfacb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5564cc827578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564cc8325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564cc5ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564cc5ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564cc5de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564cc5dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564cc5dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564cc5dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564d0ebf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564d0ec87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5564d0eb0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564d0edafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4b6e225082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564ca7ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x2b,0x2b,0x2d,0x2d,0xe0,0xb9,0x80,0x2d,0xf2,0xa0,0x81,0x8c,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x2b,0x2b,0x2d,0x2d,0xe0,0xb9,0x80,0x2d,0xf2,0xa0,0x81,0x8c,0x2d,0x2d,0xa,0x2d,0x2d,0x2d,0x2d,0x2d, Step #5: x-----BEGIN ++--\340\271\200-\362\240\201\214---BEGIN ++--\340\271\200-\362\240\201\214--\012----- Step #5: artifact_prefix='./'; Test unit written to ./oom-02867cfbd39eb0244d78d983025ea5770c8d6908 Step #5: Base64: eC0tLS0tQkVHSU4gKystLeC5gC3yoIGMLS0tQkVHSU4gKystLeC5gC3yoIGMLS0KLS0tLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3326 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1093284807 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a45cd5d60, 0x564a45ebe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a45ebe720,0x564a47d482c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/02867cfbd39eb0244d78d983025ea5770c8d6908' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4091 processed earlier; will process 6885 files now Step #5: ==119812== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a3c8182d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a42e53728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a42e3646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a42e3638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a3c81e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a3c77f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a3c779c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a3c810595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a3f83f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a3f83f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a3f83f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a3f83f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a3f83f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a3f83f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a3f83f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a3f83f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a3f83f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a3f83f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a41a4445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a3e7a0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a3e7ab5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a3e556d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a3e556d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a3e557808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a3e556944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a3e556944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a3e556944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a42e3894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a42e417b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a42e29529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a42e53fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2b9ae06082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a3c77843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x64,0x4f,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0xef,0xbc,0x8f,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0x27,0x27,0xc,0xc,0x27,0x27, Step #5: dO''\014''\014''\014''\014''\014''\014''\014'\357\274\217'\014''\014''\014''\014''\014''\014''\014''\014\014'' Step #5: artifact_prefix='./'; Test unit written to ./oom-b4e4955c0762fe459a2dce66b76722b1444f006e Step #5: Base64: ZE8nJwwnJwwnJwwnJwwnJwwnJwwnJwwn77yPJwwnJwwnJwwnJwwnJwwnJwwnJwwnJwwMJyc= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3327 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1093814048 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cf10e70d60, 0x55cf1105971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cf11059720,0x55cf12ee32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b4e4955c0762fe459a2dce66b76722b1444f006e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4092 processed earlier; will process 6884 files now Step #5: ==119848== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cf079b32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cf0dfee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cf0dfd146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cf0dfd138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cf079b9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cf0791a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cf07914c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cf079ab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cf0a9da8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cf0a9da8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cf0a9da8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cf0a9da8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cf0a9da8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cf0a9da8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cf0a9da8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cf0a9da8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cf0a9da8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cf0a9da8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cf0cbdf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cf0993b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cf099465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cf096f1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cf096f1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cf096f2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cf096f1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cf096f1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cf096f1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cf0dfd394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cf0dfdc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cf0dfc4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cf0dfeefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8af1274082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cf0791343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x31,0x6a,0x6f,0x62,0x73,0x3a,0xa,0x20,0xf0,0x94,0x95,0xbc,0x65,0xf0,0x97,0x94,0xbc,0xf0,0x90,0x91,0x8d,0x6a,0x3a,0x3a,0xa,0x20,0xf0,0x94,0x95,0xbc,0x65,0xf0,0x97,0x94,0xbc,0xf0,0x90,0x91,0x8d,0x6a,0xf0,0x97,0xbc,0x95,0xf0,0xb4,0x95,0x8d,0x6a,0x3a, Step #5: \000\000\0001jobs:\012 \360\224\225\274e\360\227\224\274\360\220\221\215j::\012 \360\224\225\274e\360\227\224\274\360\220\221\215j\360\227\274\225\360\264\225\215j: Step #5: artifact_prefix='./'; Test unit written to ./oom-6e1c7d0736aacd3008191ddde3a4ea96b964e255 Step #5: Base64: AAAAMWpvYnM6CiDwlJW8ZfCXlLzwkJGNajo6CiDwlJW8ZfCXlLzwkJGNavCXvJXwtJWNajo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3328 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1094339661 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5581ed5b3d60, 0x5581ed79c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5581ed79c720,0x5581ef6262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6e1c7d0736aacd3008191ddde3a4ea96b964e255' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4093 processed earlier; will process 6883 files now Step #5: ==119884== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5581e40f62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5581ea731728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5581ea71446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5581ea71438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5581e40fc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5581e405d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5581e4057c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5581e40ee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5581e711d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5581e711d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5581e711d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5581e711d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5581e711d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5581e711d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5581e711d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5581e711d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5581e711d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5581e711d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5581e932245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5581e607e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5581e60895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5581e5e34d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5581e5e34d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5581e5e35808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5581e5e34944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5581e5e34944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5581e5e34944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5581ea71694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5581ea71f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5581ea707529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5581ea731fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f26a1fcd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5581e405643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x76,0x21,0x39,0xa,0x0,0x70,0x69,0x7d,0x7d,0x7d,0x7d,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x72,0x65,0x61,0x6d,0xd7,0xaf,0x2d,0x0,0x73,0x7e,0x74,0x39,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0x3e,0xd7,0xa3,0x1,0xd7,0xa3,0x2d,0x0, Step #5: #v!9\012\000pi}}}}dddddddream\327\257-\000s~t9>>>>>>>>>>>>>>>\327\243\001\327\243-\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-29c048afc8854f118a2a90febda65e347befbb77 Step #5: Base64: I3YhOQoAcGl9fX19ZGRkZGRkZHJlYW3Xry0Ac350OT4+Pj4+Pj4+Pj4+Pj4+PtejAdejLQA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3329 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1094873056 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556df5f22d60, 0x556df610b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556df610b720,0x556df7f952c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/29c048afc8854f118a2a90febda65e347befbb77' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4094 processed earlier; will process 6882 files now Step #5: ==119920== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556deca652d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556df30a0728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556df308346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556df308338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556deca6b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556dec9cc42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556dec9c6c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556deca5d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556defa8c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556defa8c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556defa8c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556defa8c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556defa8c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556defa8c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556defa8c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556defa8c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556defa8c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556defa8c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556df1c9145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556dee9ed578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556dee9f85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556dee7a3d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556dee7a3d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556dee7a4808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556dee7a3944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556dee7a3944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556dee7a3944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556df308594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556df308e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556df3076529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556df30a0fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb412660082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556dec9c543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x3a,0xa,0x2d,0x29,0x3a,0x9,0x20,0x3e,0x20,0xa,0x20,0x3e,0x20,0xd,0x20,0xc2,0xa5,0xd,0x20,0xc2,0xa5,0xd,0x20,0xc2,0xad,0x3f,0x60,0xd,0x20,0xc2,0xa5,0x3f,0xd,0x20,0xc2,0xa5,0xd,0x20,0xc2,0xa5,0xd,0x20,0xc2,0xad,0x3f,0x60,0xd,0x20,0xc2,0xa5,0x3f,0x31, Step #5: t:\012-):\011 > \012 > \015 \302\245\015 \302\245\015 \302\255?`\015 \302\245?\015 \302\245\015 \302\245\015 \302\255?`\015 \302\245?1 Step #5: artifact_prefix='./'; Test unit written to ./oom-806e44f7cd03b7261017ce46c0a09bc9a87ba431 Step #5: Base64: dDoKLSk6CSA+IAogPiANIMKlDSDCpQ0gwq0/YA0gwqU/DSDCpQ0gwqUNIMKtP2ANIMKlPzE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3330 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1095530159 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e1ac0a2d60, 0x55e1ac28b71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e1ac28b720,0x55e1ae1152c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/806e44f7cd03b7261017ce46c0a09bc9a87ba431' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4095 processed earlier; will process 6881 files now Step #5: ==119956== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e1a2be52d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e1a9220728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e1a920346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e1a920338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e1a2beb652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e1a2b4c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e1a2b46c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e1a2bdd595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e1a5c0c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e1a5c0c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e1a5c0c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e1a5c0c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e1a5c0c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e1a5c0c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e1a5c0c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e1a5c0c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e1a5c0c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e1a5c0c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e1a7e1145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e1a4b6d578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e1a4b785a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e1a4923d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e1a4923d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e1a4924808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e1a4923944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e1a4923944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e1a4923944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e1a920594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e1a920e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e1a91f6529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e1a9220fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f40a3c85082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e1a2b4543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x69,0x29,0x5b,0x0,0x2d,0xf2,0x85,0x85,0x93,0x0,0x2d,0xf2,0x81,0x92,0x96,0x0,0x2d,0xf2,0x85,0x85,0x93,0x0,0x2d,0xf2,0x81,0x92,0x96,0x0,0x2d,0xf2,0x85,0x85,0x93,0x0,0x2d,0xf2,0x81,0x92,0x96,0x0,0x2d,0xf2,0x85,0x85,0x93,0x0,0x2d,0xf2,0x85,0x85,0x93, Step #5: (?i)[\000-\362\205\205\223\000-\362\201\222\226\000-\362\205\205\223\000-\362\201\222\226\000-\362\205\205\223\000-\362\201\222\226\000-\362\205\205\223\000-\362\205\205\223 Step #5: artifact_prefix='./'; Test unit written to ./oom-f8bbd1033441e713206d0a0b1491d08a003831d0 Step #5: Base64: KD9pKVsALfKFhZMALfKBkpYALfKFhZMALfKBkpYALfKFhZMALfKBkpYALfKFhZMALfKFhZM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3331 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1096059396 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555915775d60, 0x55591595e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55591595e720,0x5559177e82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f8bbd1033441e713206d0a0b1491d08a003831d0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4096 processed earlier; will process 6880 files now Step #5: ==119992== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55590c2b82d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5559128f3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5559128d646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5559128d638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55590c2be652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55590c21f42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55590c219c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55590c2b0595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55590f2df8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55590f2df8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55590f2df8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55590f2df8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55590f2df8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55590f2df8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55590f2df8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55590f2df8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55590f2df8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55590f2df8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5559114e445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55590e240578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55590e24b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55590dff6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55590dff6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55590dff7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55590dff6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55590dff6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55590dff6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5559128d894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5559128e17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5559128c9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5559128f3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd80bac1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55590c21843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xb,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xf0,0x96,0xac,0xb1,0xa,0xb,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xef,0xb7,0xba,0xf0,0x96,0xac,0xb1, Step #5: \013\357\267\272\357\267\272\357\267\272\357\267\272\357\267\272\357\267\272\357\267\272\360\226\254\261\012\013\357\267\272\357\267\272\357\267\272\357\267\272\357\267\272\357\267\272\357\267\272\360\226\254\261 Step #5: artifact_prefix='./'; Test unit written to ./oom-cc1cc42c7110db2926db2c1c5fa32d402318ac0e Step #5: Base64: C++3uu+3uu+3uu+3uu+3uu+3uu+3uvCWrLEKC++3uu+3uu+3uu+3uu+3uu+3uu+3uvCWrLE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3332 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1096580168 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c7f80b3d60, 0x55c7f829c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c7f829c720,0x55c7fa1262c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc1cc42c7110db2926db2c1c5fa32d402318ac0e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4097 processed earlier; will process 6879 files now Step #5: ==120028== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c7eebf62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c7f5231728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c7f521446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c7f521438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c7eebfc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c7eeb5d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c7eeb57c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c7eebee595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c7f1c1d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c7f1c1d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c7f1c1d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c7f1c1d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c7f1c1d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c7f1c1d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c7f1c1d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c7f1c1d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c7f1c1d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c7f1c1d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c7f3e2245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c7f0b7e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c7f0b895a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c7f0934d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c7f0934d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c7f0935808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c7f0934944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c7f0934944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c7f0934944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c7f521694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c7f521f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c7f5207529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c7f5231fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff204ead082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c7eeb5643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0xa,0xa,0xa,0x2d,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0xa,0x2d,0xa,0x2c,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0xa,0xa,0xa,0x2d,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0xa,0x2d,0xa,0x2c,0xa,0x2d,0xa,0x2d,0xa,0x2d,0xa,0x2d, Step #5: --\012\012\012--\012-\012-\012-\012-\012\012-\012,\012-\012-\012-\012\012\012\012--\012-\012-\012-\012-\012\012-\012,\012-\012-\012-\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-5386eb1f5e998984caf43bda073e6274082d4aad Step #5: Base64: LS0KCgotLQotCi0KLQotCgotCiwKLQotCi0KCgoKLS0KLQotCi0KLQoKLQosCi0KLQotCi0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3333 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1097123208 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7d1588d60, 0x55b7d177171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7d1771720,0x55b7d35fb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5386eb1f5e998984caf43bda073e6274082d4aad' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4098 processed earlier; will process 6878 files now Step #5: ==120064== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7c80cb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7ce706728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7ce6e946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7ce6e938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7c80d1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7c803242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7c802cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7c80c3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7cb0f28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7cb0f28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7cb0f28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7cb0f28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7cb0f28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7cb0f28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7cb0f28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7cb0f28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7cb0f28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7cb0f28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7cd2f745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7ca053578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7ca05e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7c9e09d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7c9e09d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7c9e0a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7c9e09944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7c9e09944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7c9e09944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7ce6eb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7ce6f47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7ce6dc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7ce706fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f948fc1f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7c802b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe,0x68,0x74,0x74,0x70,0x3a,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x27,0xcd,0x81,0x28,0xcd,0x81, Step #5: \016http:'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201'\315\201(\315\201 Step #5: artifact_prefix='./'; Test unit written to ./oom-42273c89565aa30585da2d10665097fe50ec88f3 Step #5: Base64: Dmh0dHA6J82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BJ82BKM2B Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3334 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1097655363 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a661648d60, 0x55a66183171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a661831720,0x55a6636bb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/42273c89565aa30585da2d10665097fe50ec88f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4099 processed earlier; will process 6877 files now Step #5: ==120100== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a65818b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a65e7c6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a65e7a946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a65e7a938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a658191652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a6580f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a6580ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a658183595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a65b1b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a65b1b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a65b1b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a65b1b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a65b1b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a65b1b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a65b1b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a65b1b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a65b1b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a65b1b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a65d3b745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a65a113578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a65a11e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a659ec9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a659ec9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a659eca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a659ec9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a659ec9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a659ec9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a65e7ab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a65e7b47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a65e79c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a65e7c6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f55058d6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a6580eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x7c,0x24,0x7c,0x29,0x7c,0x51,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c, Step #5: (?:(?:(?:(?:(?:(?:$||$||$||$||$||$||$||$|)|Q)|)|)|)|)| Step #5: artifact_prefix='./'; Test unit written to ./oom-75ea2ce1e133b5fedd5a371fdbb6800ccae02e31 Step #5: Base64: KD86KD86KD86KD86KD86KD86JHx8JHx8JHx8JHx8JHx8JHx8JHx8JHwpfFEpfCl8KXwpfCl8 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3335 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1098202620 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564a536c1d60, 0x564a538aa71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564a538aa720,0x564a557342c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/75ea2ce1e133b5fedd5a371fdbb6800ccae02e31' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4100 processed earlier; will process 6876 files now Step #5: ==120136== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564a4a2042d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564a5083f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564a5082246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564a5082238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564a4a20a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564a4a16b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564a4a165c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564a4a1fc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564a4d22b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564a4d22b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564a4d22b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564a4d22b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564a4d22b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564a4d22b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564a4d22b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564a4d22b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564a4d22b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564a4d22b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564a4f43045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564a4c18c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564a4c1975a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564a4bf42d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564a4bf42d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564a4bf43808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564a4bf42944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564a4bf42944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564a4bf42944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564a5082494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564a5082d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564a50815529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564a5083ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f688cae0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564a4a16443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x0,0x0,0x25,0x1,0x0,0x0,0x0,0x2,0x2f,0x5b,0x43,0x61,0x5d,0xa,0x5b,0x43,0x61,0x5d,0xa,0x73,0x3d,0x27,0xe2,0x8a,0x88,0x27,0xa,0x5b,0x43,0x61,0x5d,0xa,0x73,0x3d,0x27,0xe2,0x8a,0x80,0x27,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff, Step #5: \012\000\000%\001\000\000\000\002/[Ca]\012[Ca]\012s='\342\212\210'\012[Ca]\012s='\342\212\200'\377\377\377\377\377\377\377\377\377\377\377\377\377\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-ee5b1604c62ba2d90bed2e6a86417dfff8ac495d Step #5: Base64: CgAAJQEAAAACL1tDYV0KW0NhXQpzPSfiiognCltDYV0Kcz0n4oqAJ/////////////////// Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3336 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1098736753 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56340d1dcd60, 0x56340d3c571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56340d3c5720,0x56340f24f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ee5b1604c62ba2d90bed2e6a86417dfff8ac495d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4101 processed earlier; will process 6875 files now Step #5: ==120172== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563403d1f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56340a35a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56340a33d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56340a33d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563403d25652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563403c8642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563403c80c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563403d17595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563406d468c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563406d468c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563406d468c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563406d468c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563406d468c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563406d468c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563406d468c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563406d468c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563406d468c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563406d468c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563408f4b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563405ca7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563405cb25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563405a5dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563405a5dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563405a5e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563405a5d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563405a5d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563405a5d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56340a33f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56340a3487b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56340a330529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56340a35afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcc9ba50082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563403c7f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x5,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xa,0x9, Step #5: `\342\200\210-\000`\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\005\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\012\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-6ba8056d50094c56a1279161230be1224382225c Step #5: Base64: YOKAiC0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAAAAoJ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3337 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1099388053 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5633a7f5fd60, 0x5633a814871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5633a8148720,0x5633a9fd22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ba8056d50094c56a1279161230be1224382225c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4102 processed earlier; will process 6874 files now Step #5: ==120208== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56339eaa22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5633a50dd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5633a50c046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5633a50c038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56339eaa8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56339ea0942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56339ea03c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56339ea9a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5633a1ac98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5633a1ac98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5633a1ac98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5633a1ac98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5633a1ac98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5633a1ac98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5633a1ac98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5633a1ac98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5633a1ac98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5633a1ac98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5633a3cce45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633a0a2a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633a0a355a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5633a07e0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5633a07e0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5633a07e1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5633a07e0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5633a07e0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5633a07e0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5633a50c294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5633a50cb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5633a50b3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5633a50ddfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0cf8795082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56339ea0243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x45,0x58,0x50,0x20,0x20,0x31,0xa,0x43,0x6e,0x54,0x20,0x20,0x32,0xa,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x36,0x30,0x33,0x32,0x31,0x34,0x37,0x34,0x31,0x39,0x33,0x32,0x36,0x31,0x36,0x36,0x33,0x31,0x34,0x2e,0x20, Step #5: EXP 1\012CnT 2\01200000000000000000006032147419326166314. Step #5: artifact_prefix='./'; Test unit written to ./oom-e6ed42d394fb43a03b656aaf483052507d3d4258 Step #5: Base64: RVhQICAxCkNuVCAgMgowMDAwMDAwMDAwMDAwMDAwMDAwNjAzMjE0NzQxOTMyNjE2NjMxNC4g Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3338 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1099917660 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0ffbf9d60, 0x55a0ffde271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0ffde2720,0x55a101c6c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e6ed42d394fb43a03b656aaf483052507d3d4258' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4103 processed earlier; will process 6873 files now Step #5: #1 pulse cov: 3525 ft: 3526 exec/s: 0 rss: 174Mb Step #5: ==120244== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0f673c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0fcd77728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0fcd5a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0fcd5a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0f6742652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0f66a342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0f669dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0f6734595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0f97638c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0f97638c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0f97638c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0f97638c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0f97638c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0f97638c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0f97638c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0f97638c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0f97638c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0f97638c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0fb96845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0f86c4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0f86cf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0f847ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0f847ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0f847b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0f847a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0f847a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0f847a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0fcd5c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0fcd657b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0fcd4d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0fcd77fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ffa5afd3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0f669c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x1,0x12,0x9,0x71,0x2d,0xa,0xa,0xa,0x2d,0x24,0x0,0xa,0x41,0x2d,0xa,0x2f,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x3a,0x8,0xa,0x63,0x2d,0x3a,0x24,0x5b,0x0,0x15, Step #5: \001\022\011q-\012\012\012-$\000\012A-\012/\000/\000\000\000/\000\0171\0171\021\0171\021-\000\000\000/\000\0171\021\0171\021-:\010\012c-:$[\000\025 Step #5: artifact_prefix='./'; Test unit written to ./oom-f43e229b5e2e25fad7b85510d015a14aae11139b Step #5: Base64: ARIJcS0KCgotJAAKQS0KLwAvAAAALwAPMQ8xEQ8xES0AAAAvAA8xEQ8xES06CApjLTokWwAV Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3339 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1100486838 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56362bbd3d60, 0x56362bdbc71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56362bdbc720,0x56362dc462c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f43e229b5e2e25fad7b85510d015a14aae11139b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4105 processed earlier; will process 6871 files now Step #5: ==120280== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5636227162d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563628d51728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563628d3446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563628d3438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56362271c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56362267d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563622677c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56362270e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56362573d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56362573d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56362573d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56362573d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56362573d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56362573d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56362573d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56362573d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56362573d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56362573d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56362794245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56362469e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5636246a95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563624454d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563624454d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563624455808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563624454944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563624454944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563624454944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563628d3694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563628d3f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563628d27529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563628d51fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd3a6ed6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56362267643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x20,0x0,0x3,0x2d,0x20,0x20,0x0,0x0,0x26,0x26,0x26,0x27,0x26,0x26,0x26,0x26,0x3e,0x24,0x40,0x3e,0x0,0x0,0x26,0x26,0x20,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x30, Step #5: - \000\003- \000\000&&&'&&&&>$@>\000\000&& &$0&&&&&&&&&$0&&&&&&&&&&>$0 Step #5: artifact_prefix='./'; Test unit written to ./oom-f8ce7c5e5d004d1e0bf2b81848016423031acbd6 Step #5: Base64: LSAgAAMtICAAACYmJicmJiYmPiRAPgAAJiYgJiQwJiYmJiYmJiYmJDAmJiYmJiYmJiYmPiQw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3340 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1101008512 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55759f7e4d60, 0x55759f9cd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55759f9cd720,0x5575a18572c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f8ce7c5e5d004d1e0bf2b81848016423031acbd6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4106 processed earlier; will process 6870 files now Step #5: ==120316== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5575963272d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55759c962728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55759c94546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55759c94538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55759632d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55759628e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557596288c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55759631f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55759934e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55759934e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55759934e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55759934e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55759934e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55759934e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55759934e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55759934e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55759934e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55759934e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55759b55345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5575982af578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5575982ba5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557598065d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557598065d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557598066808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557598065944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557598065944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557598065944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55759c94794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55759c9507b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55759c938529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55759c962fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb374487082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55759628743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x32,0x35,0x31,0x20,0x54,0x54,0x54,0x54,0x48,0xcd,0x8f,0x41,0x43,0xdb,0xbf,0x54,0x54,0x48,0xcd,0x8f,0x49,0x44,0x32,0x35,0x31,0x20,0x54,0x54,0x54,0x54,0x48,0xcd,0x8f,0x41,0x43,0xdb,0xbf,0x54,0x54,0x48,0xcd,0x8f,0x41,0x41,0x43,0xdb,0xbf,0x5,0x2,0xdb,0xbf,0xdf, Step #5: ID251 TTTTH\315\217AC\333\277TTH\315\217ID251 TTTTH\315\217AC\333\277TTH\315\217AAC\333\277\005\002\333\277\337 Step #5: artifact_prefix='./'; Test unit written to ./oom-d17a2af46e9882daf75eb5083e0f99f29385e3d2 Step #5: Base64: SUQyNTEgVFRUVEjNj0FD279UVEjNj0lEMjUxIFRUVFRIzY9BQ9u/VFRIzY9BQUPbvwUC27/f Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3341 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1101528695 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a5325bd60, 0x558a5344471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a53444720,0x558a552ce2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d17a2af46e9882daf75eb5083e0f99f29385e3d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4107 processed earlier; will process 6869 files now Step #5: #1 pulse cov: 3707 ft: 3708 exec/s: 0 rss: 173Mb Step #5: ==120352== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a49d9e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a503d9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a503bc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a503bc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a49da4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a49d0542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a49cffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a49d96595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a4cdc58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a4cdc58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a4cdc58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a4cdc58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a4cdc58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a4cdc58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a4cdc58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a4cdc58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a4cdc58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a4cdc58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a4efca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a4bd26578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a4bd315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a4badcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a4badcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a4badd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a4badc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a4badc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a4badc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a503be94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a503c77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a503af529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a503d9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f131a651082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a49cfe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x32,0x2e,0x32,0x31,0x34,0x37,0x34,0x38,0x33,0x36,0x32,0x35,0x2f,0x10,0x2e,0x2f,0x73,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x32,0x10,0x2e,0x2f,0x2d,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x3f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x24, Step #5: $\177]2.2147483625/\020./s 7 0 2\020 2\020./-\177\177\177\177\177\177\177\177\177\177\177\177\177?\177\177o\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-e79696a0892524f17db10d67d4970b41748e98ed Step #5: Base64: JH9dMi4yMTQ3NDgzNjI1LxAuL3MgNyAwIDIQIDIQLi8tf39/f39/f39/f39/fz9/f28AAEMk Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3342 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1102105126 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b15f68dd60, 0x55b15f87671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b15f876720,0x55b1617002c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e79696a0892524f17db10d67d4970b41748e98ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4109 processed earlier; will process 6867 files now Step #5: #1 pulse cov: 3709 ft: 3710 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 4201 ft: 4576 exec/s: 0 rss: 175Mb Step #5: ==120388== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b1561d02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b15c80b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b15c7ee46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b15c7ee38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b1561d6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b15613742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b156131c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b1561c8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b1591f78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b1591f78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b1591f78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b1591f78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b1591f78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b1591f78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b1591f78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b1591f78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b1591f78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b1591f78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b15b3fc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b158158578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b1581635a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b157f0ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b157f0ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b157f0f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b157f0e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b157f0e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b157f0e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b15c7f094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b15c7f97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b15c7e1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b15c80bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb139c1a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b15613043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xcc,0x9c,0x20,0xcc,0x96,0x31,0x0,0x0,0x0,0x0,0x0,0xcc,0x9c,0x20,0xcc,0x96,0x31,0x0,0x0,0x0,0x0,0x2c,0x0,0xcc,0x9c,0x0,0xcc,0x96,0x31,0x0,0x0,0x0,0x0,0x2c,0x0,0xcc,0x9c,0x0,0xcc,0x96,0x31,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: \000\000\000\000\000\000\000\314\234 \314\2261\000\000\000\000\000\314\234 \314\2261\000\000\000\000,\000\314\234\000\314\2261\000\000\000\000,\000\314\234\000\314\2261\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-5aec5bc0d9cd5730a7c9e1d8ab47820077290741 Step #5: Base64: AAAAAAAAAMycIMyWMQAAAAAAzJwgzJYxAAAAACwAzJwAzJYxAAAAACwAzJwAzJYxAAAAAAAA Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3343 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1102704891 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d715b93d60, 0x55d715d7c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d715d7c720,0x55d717c062c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5aec5bc0d9cd5730a7c9e1d8ab47820077290741' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4112 processed earlier; will process 6864 files now Step #5: ==120424== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d70c6d62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d712d11728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d712cf446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d712cf438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d70c6dc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d70c63d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d70c637c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d70c6ce595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d70f6fd8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d70f6fd8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d70f6fd8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d70f6fd8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d70f6fd8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d70f6fd8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d70f6fd8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d70f6fd8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d70f6fd8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d70f6fd8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d71190245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d70e65e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d70e6695a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d70e414d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d70e414d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d70e415808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d70e414944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d70e414944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d70e414944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d712cf694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d712cff7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d712ce7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d712d11fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f193b432082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d70c63643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x2,0x0,0x30,0x2e,0x3d,0x60,0x37,0x50,0x49,0x43,0x0,0x0,0x7,0x21,0x70,0x6e,0x47,0x3d,0x70,0x31,0x43,0x48,0x41,0x0,0x0,0x13,0x0,0x30,0x2e,0x3d,0x60,0x38,0x50,0x49,0x43,0x0,0x0,0x7,0x21,0x70,0x6e,0x47,0x0,0x26,0xeb,0x43,0x48,0x41,0x0,0x0,0x13, Step #5: ID3\002\0000.=`7PIC\000\000\007!pnG=p1CHA\000\000\023\0000.=`8PIC\000\000\007!pnG\000&\353CHA\000\000\023 Step #5: artifact_prefix='./'; Test unit written to ./oom-00151a36d428682fd138a0ba6b3be186c1651aa7 Step #5: Base64: SUQzAgAwLj1gN1BJQwAAByFwbkc9cDFDSEEAABMAMC49YDhQSUMAAAchcG5HACbrQ0hBAAAT Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3344 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1103344090 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55746159dd60, 0x55746178671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557461786720,0x5574636102c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/00151a36d428682fd138a0ba6b3be186c1651aa7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4113 processed earlier; will process 6863 files now Step #5: ==120460== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5574580e02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55745e71b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55745e6fe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55745e6fe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5574580e6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55745804742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557458041c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5574580d8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55745b1078c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55745b1078c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55745b1078c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55745b1078c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55745b1078c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55745b1078c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55745b1078c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55745b1078c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55745b1078c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55745b1078c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55745d30c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55745a068578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55745a0735a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557459e1ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557459e1ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557459e1f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557459e1e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557459e1e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557459e1e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55745e70094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55745e7097b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55745e6f1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55745e71bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7359f43082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55745804043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xef,0xbb,0xbf,0xef,0xbb,0xbf,0xa,0xc2,0xa5,0xd,0xc2,0xa1,0xa,0xc3,0xa6,0xd,0xc8,0xa4,0xa,0xc7,0xa5,0xa,0xc7,0xa4,0xa,0xc8,0xa3,0xa,0xc8,0xa3,0xa,0xc8,0xa3,0xa,0xc7,0xa5,0xa,0xc3,0xa6,0xd,0xc8,0xa4,0xa,0xc7,0xa5,0xa,0xc6,0xa4,0xa,0xc8,0xa3,0xa,0xc7,0xa5, Step #5: \357\273\277\357\273\277\012\302\245\015\302\241\012\303\246\015\310\244\012\307\245\012\307\244\012\310\243\012\310\243\012\310\243\012\307\245\012\303\246\015\310\244\012\307\245\012\306\244\012\310\243\012\307\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-526dc4603a972531f38cecea8f7c69017a8018a9 Step #5: Base64: 77u/77u/CsKlDcKhCsOmDcikCselCsekCsijCsijCsijCselCsOmDcikCselCsakCsijCsel Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3345 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1103893346 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559c9d921d60, 0x559c9db0a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559c9db0a720,0x559c9f9942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/526dc4603a972531f38cecea8f7c69017a8018a9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4114 processed earlier; will process 6862 files now Step #5: #1 pulse cov: 11789 ft: 11790 exec/s: 0 rss: 194Mb Step #5: ==120496== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559c944642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559c9aa9f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559c9aa8246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559c9aa8238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559c9446a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559c943cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559c943c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559c9445c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559c9748b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559c9748b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559c9748b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559c9748b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559c9748b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559c9748b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559c9748b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559c9748b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559c9748b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559c9748b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559c9969045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559c963ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559c963f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559c961a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559c961a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559c961a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559c961a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559c961a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559c961a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559c9aa8494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559c9aa8d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559c9aa75529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559c9aa9ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3f6dfaa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559c943c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6e,0xe,0x6e,0x3d,0xf,0x6e,0x5e,0x28,0x6e,0xd9,0x9b,0x3d,0x2e,0x5e,0x28,0x64,0x3d,0x2e,0x5e,0x28,0x64,0x3d,0x2e,0x5e,0x28,0x64,0x3d,0x6e,0x3d,0xf,0x6e,0x5e,0x28,0x6e,0xd9,0x9b,0x3d,0x2e,0x5e,0x28,0x64,0x3d,0x2e,0x5e,0x28,0x64,0x3d,0x2e,0x5e,0x28,0x64,0x3d,0x2e,0x2e, Step #5: n\016n=\017n^(n\331\233=.^(d=.^(d=.^(d=n=\017n^(n\331\233=.^(d=.^(d=.^(d=.. Step #5: artifact_prefix='./'; Test unit written to ./oom-162882d24a6ce4693c8dbae61ad766b888d68248 Step #5: Base64: bg5uPQ9uXihu2Zs9Ll4oZD0uXihkPS5eKGQ9bj0Pbl4obtmbPS5eKGQ9Ll4oZD0uXihkPS4u Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3346 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1104491643 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56014d194d60, 0x56014d37d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56014d37d720,0x56014f2072c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/162882d24a6ce4693c8dbae61ad766b888d68248' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4116 processed earlier; will process 6860 files now Step #5: ==120532== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560143cd72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56014a312728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56014a2f546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56014a2f538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560143cdd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560143c3e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560143c38c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560143ccf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560146cfe8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560146cfe8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560146cfe8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560146cfe8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560146cfe8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560146cfe8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560146cfe8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560146cfe8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560146cfe8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560146cfe8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560148f0345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560145c5f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560145c6a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560145a15d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560145a15d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560145a16808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560145a15944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560145a15944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560145a15944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56014a2f794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56014a3007b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56014a2e8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56014a312fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2755194082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560143c3743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x4e,0x50,0x55,0x54,0xa,0x23,0x30,0xa,0x23,0x30,0x20,0x23,0x30,0xa,0x23,0x30,0x20,0x23,0x30,0xa,0x23,0x30,0xa,0x23,0x30,0xa,0x23,0x30,0x20,0x23,0x31,0xa,0x23,0x30,0x20,0x23,0x30,0xa,0x23,0x33,0x20,0x23,0x34,0x20,0x23,0x30,0xa,0x23,0x30,0xa,0x23,0x30,0x20, Step #5: INPUT\012#0\012#0 #0\012#0 #0\012#0\012#0\012#0 #1\012#0 #0\012#3 #4 #0\012#0\012#0 Step #5: artifact_prefix='./'; Test unit written to ./oom-6247cd6c69f5fec22e8aa8fe7eaad04451afb72a Step #5: Base64: SU5QVVQKIzAKIzAgIzAKIzAgIzAKIzAKIzAKIzAgIzEKIzAgIzAKIzMgIzQgIzAKIzAKIzAg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3347 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1105031518 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563cd88b9d60, 0x563cd8aa271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563cd8aa2720,0x563cda92c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6247cd6c69f5fec22e8aa8fe7eaad04451afb72a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4117 processed earlier; will process 6859 files now Step #5: ==120568== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563ccf3fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563cd5a37728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563cd5a1a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563cd5a1a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563ccf402652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563ccf36342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563ccf35dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563ccf3f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563cd24238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563cd24238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563cd24238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563cd24238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563cd24238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563cd24238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563cd24238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563cd24238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563cd24238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563cd24238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563cd462845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563cd1384578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563cd138f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563cd113ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563cd113ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563cd113b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563cd113a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563cd113a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563cd113a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563cd5a1c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563cd5a257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563cd5a0d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563cd5a37fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4c064b7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563ccf35c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x29,0x0,0xef,0xbd,0x87,0xef,0xb9,0xbc,0xef,0xbc,0x88,0xef,0xb9,0x88,0x0,0xef,0xbc,0x87,0xef,0xb9,0xbc,0xef,0xbc,0x88,0xef,0xb9,0x88,0x0,0xef,0xbd,0x87,0xef,0xb9,0xbc,0xef,0xbc,0x88,0xef,0xb9,0x88,0x0,0xef,0xbd,0x87,0xef,0xb9,0xbc,0xef,0xbc,0x88,0xef,0xb9,0x88,0xed, Step #5: )\000\357\275\207\357\271\274\357\274\210\357\271\210\000\357\274\207\357\271\274\357\274\210\357\271\210\000\357\275\207\357\271\274\357\274\210\357\271\210\000\357\275\207\357\271\274\357\274\210\357\271\210\355 Step #5: artifact_prefix='./'; Test unit written to ./oom-54793592cff09371ea57c9abdf2bae043bdcf067 Step #5: Base64: KQDvvYfvubzvvIjvuYgA77yH77m877yI77mIAO+9h++5vO+8iO+5iADvvYfvubzvvIjvuYjt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3348 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1105553640 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559f54239d60, 0x559f5442271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559f54422720,0x559f562ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/54793592cff09371ea57c9abdf2bae043bdcf067' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4118 processed earlier; will process 6858 files now Step #5: ==120604== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559f4ad7c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559f513b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559f5139a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559f5139a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559f4ad82652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559f4ace342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559f4acddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559f4ad74595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559f4dda38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559f4dda38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559f4dda38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559f4dda38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559f4dda38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559f4dda38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559f4dda38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559f4dda38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559f4dda38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559f4dda38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559f4ffa845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559f4cd04578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559f4cd0f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559f4cabad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559f4cabad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559f4cabb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559f4caba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559f4caba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559f4caba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559f5139c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559f513a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559f5138d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559f513b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe528d85082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559f4acdc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xf3,0xa0,0x81,0xba,0x2f,0xa,0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xe2,0x80,0x88,0x2d,0x0,0x60,0xa,0xa,0x2f,0xa,0x2f,0xa,0x60,0x60,0x20,0x20,0x20,0x60,0xa,0x9,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0,0xb0, Step #5: `\342\200\210-\000`\012\363\240\201\272/\012`\342\200\210-\000`\342\200\210-\000`\012\012/\012/\012`` `\012\011\260\260\260\260\260\260\260\260\260\260\260\260\260 Step #5: artifact_prefix='./'; Test unit written to ./oom-fbdeaf50a584434e125ddc45e3cf87df97e4ed27 Step #5: Base64: YOKAiC0AYArzoIG6Lwpg4oCILQBg4oCILQBgCgovCi8KYGAgICBgCgmwsLCwsLCwsLCwsLCw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3349 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1106207846 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563236964d60, 0x563236b4d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563236b4d720,0x5632389d72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fbdeaf50a584434e125ddc45e3cf87df97e4ed27' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4119 processed earlier; will process 6857 files now Step #5: ==120640== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56322d4a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563233ae2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563233ac546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563233ac538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56322d4ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56322d40e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56322d408c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56322d49f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5632304ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5632304ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5632304ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5632304ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5632304ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5632304ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5632304ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5632304ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5632304ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5632304ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5632326d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56322f42f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56322f43a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56322f1e5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56322f1e5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56322f1e6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56322f1e5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56322f1e5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56322f1e5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563233ac794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563233ad07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563233ab8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563233ae2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5ab420a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56322d40743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2e,0x7c,0x2e,0x5e,0x2f,0x2e,0x7c,0x7c,0x2e,0x2e,0x2e,0x7c,0x2e,0x7c,0x7c,0x2e,0x7c,0x2e,0x40,0x2e,0x2f,0x2e,0x7c,0x2f,0x2e,0x7c,0x7c,0x2e,0x2e,0x2e,0x7c,0x2e,0x7c,0x7c,0x2e,0x7c,0x2e,0x40,0x2e,0x2f,0x2e,0x7c,0x7c,0x2e,0x2d,0x2e,0x7c,0x2e,0x7c,0x7c,0x2e,0x7c,0x2e,0x2e,0x0, Step #5: .|.^/.||...|.||.|.@./.|/.||...|.||.|.@./.||.-.|.||.|..\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-6bab4762b9b33451817b7878a7ad721a161225a3 Step #5: Base64: LnwuXi8ufHwuLi58Lnx8LnwuQC4vLnwvLnx8Li4ufC58fC58LkAuLy58fC4tLnwufHwufC4uAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3350 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1106739871 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d12971cd60, 0x55d12990571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d129905720,0x55d12b78f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6bab4762b9b33451817b7878a7ad721a161225a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4120 processed earlier; will process 6856 files now Step #5: ==120676== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d12025f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d12689a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d12687d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d12687d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d120265652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d1201c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d1201c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d120257595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d1232868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d1232868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d1232868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d1232868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d1232868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d1232868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d1232868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d1232868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d1232868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d1232868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d12548b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d1221e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d1221f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d121f9dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d121f9dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d121f9e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d121f9d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d121f9d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d121f9d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d12687f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d1268887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d126870529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d12689afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd6b712d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d1201bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x37,0x0,0x0,0x0,0x31,0x53,0x50,0x53,0x1,0x80,0xa,0x4,0xdd,0x2e,0x10,0x0,0x8,0x1b,0xbf,0x3b,0x2b,0x30,0x0,0xd5,0x1f,0x0,0x0,0x0,0xff,0xff,0xff,0x1e,0xae,0x1f,0x10,0x0,0x0,0x3,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x53,0x50,0x53,0xd5,0x5, Step #5: 7\000\000\0001SPS\001\200\012\004\335.\020\000\010\033\277;+0\000\325\037\000\000\000\377\377\377\036\256\037\020\000\000\003\000\000\000\000\000\000\000\001\000\000\000\000SPS\325\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-3f8f3820057672f44b01c39b225abcfe2ba9e54e Step #5: Base64: NwAAADFTUFMBgAoE3S4QAAgbvzsrMADVHwAAAP///x6uHxAAAAMAAAAAAAAAAQAAAABTUFPVBQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3351 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1107275404 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc0a12dd60, 0x55dc0a31671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc0a316720,0x55dc0c1a02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3f8f3820057672f44b01c39b225abcfe2ba9e54e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4121 processed earlier; will process 6855 files now Step #5: ==120712== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc00c702d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc072ab728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc0728e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc0728e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc00c76652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc00bd742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc00bd1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc00c68595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc03c978c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc03c978c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc03c978c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc03c978c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc03c978c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc03c978c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc03c978c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc03c978c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc03c978c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc03c978c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc05e9c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc02bf8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc02c035a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc029aed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc029aed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc029af808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc029ae944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc029ae944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc029ae944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc0729094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc072997b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc07281529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc072abfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1ff62e4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc00bd043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x0, Step #5: \000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000FUZZ-TAG\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-db9f05a9a678cce868eedf4596910fa7105dced0 Step #5: Base64: AEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAEZVWlotVEFHAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3352 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1107801575 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55842e420d60, 0x55842e60971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55842e609720,0x5584304932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/db9f05a9a678cce868eedf4596910fa7105dced0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4122 processed earlier; will process 6854 files now Step #5: ==120748== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558424f632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55842b59e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55842b58146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55842b58138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558424f69652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558424eca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558424ec4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558424f5b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558427f8a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558427f8a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558427f8a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558427f8a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558427f8a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558427f8a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558427f8a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558427f8a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558427f8a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558427f8a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55842a18f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558426eeb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558426ef65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558426ca1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558426ca1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558426ca2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558426ca1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558426ca1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558426ca1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55842b58394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55842b58c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55842b574529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55842b59efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2325354082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558424ec343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xae,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x2d,0x0,0x31,0x0,0x5b,0x27,0x5d,0x5b,0x28,0x0,0x0,0x0,0x0,0x0,0x0,0x20,0x0,0xf3,0xa0,0xa0,0xa0,0xf0,0x81,0x80,0x0,0x9d,0xe2,0xe2,0x85,0xf3,0x0,0xae,0x22,0xbf,0x81,0x88,0xbb,0x22,0x81,0xef,0x22,0x22,0x0,0x80,0xab,0x22, Step #5: \326\256\000\000\000\000\000\000\000-\0001\000['][(\000\000\000\000\000\000 \000\363\240\240\240\360\201\200\000\235\342\342\205\363\000\256\"\277\201\210\273\"\201\357\"\"\000\200\253\" Step #5: artifact_prefix='./'; Test unit written to ./oom-512d92c4c0b4e94fdc88caad40a715c9db8f48e0 Step #5: Base64: 1q4AAAAAAAAALQAxAFsnXVsoAAAAAAAAIADzoKCg8IGAAJ3i4oXzAK4iv4GIuyKB7yIiAICrIg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3353 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1108330542 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556dc6c4cd60, 0x556dc6e3571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556dc6e35720,0x556dc8cbf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/512d92c4c0b4e94fdc88caad40a715c9db8f48e0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4123 processed earlier; will process 6853 files now Step #5: ==120784== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556dbd78f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556dc3dca728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556dc3dad46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556dc3dad38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556dbd795652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556dbd6f642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556dbd6f0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556dbd787595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556dc07b68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556dc07b68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556dc07b68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556dc07b68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556dc07b68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556dc07b68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556dc07b68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556dc07b68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556dc07b68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556dc07b68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556dc29bb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556dbf717578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556dbf7225a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556dbf4cdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556dbf4cdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556dbf4ce808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556dbf4cd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556dbf4cd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556dbf4cd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556dc3daf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556dc3db87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556dc3da0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556dc3dcafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc814dd3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556dbd6ef43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x42,0x1,0x0,0x0,0x0,0x0,0x0,0x2d,0x1f,0x44,0x2d,0x0,0x2d,0x33,0x3,0x6d,0x60,0x78,0x21,0x74,0x1,0x33,0x3,0x3c,0x6d,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x23,0x2b,0x2b,0x2b,0x2b,0x26,0x2b,0x60,0xdb,0x1,0x33,0x3,0x3c,0x6d,0x60,0xdb,0x9e,0x3,0x32,0xdb,0xa5,0x32, Step #5: IB\001\000\000\000\000\000-\037D-\000-3\003m`x!t\0013\003 Step #5: Step #5: #0 0x558db2d462d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558db9381728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558db936446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558db936438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558db2d4c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558db2cad42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558db2ca7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558db2d3e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558db5d6d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558db5d6d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558db5d6d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558db5d6d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558db5d6d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558db5d6d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558db5d6d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558db5d6d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558db5d6d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558db5d6d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558db7f7245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558db4cce578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558db4cd95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558db4a84d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558db4a84d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558db4a85808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558db4a84944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558db4a84944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558db4a84944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558db936694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558db936f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558db9357529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558db9381fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22f3144082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558db2ca643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x69,0xdc,0xbf,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb2,0xcc,0xb2,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb2,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb4,0xcc,0xb3,0xcc,0xb4,0xcc,0xb4,0xcc,0xb2,0xcc,0xb4,0xcc,0xb4,0xcc,0xb2,0xcc,0xb2,0xcc,0xb4,0xcc,0xb2,0xcc,0xb4, Step #5: i\334\277\314\264\314\264\314\264\314\264\314\264\314\262\314\262\314\264\314\264\314\264\314\262\314\264\314\264\314\264\314\264\314\263\314\264\314\264\314\262\314\264\314\264\314\262\314\262\314\264\314\262\314\264 Step #5: artifact_prefix='./'; Test unit written to ./oom-f7aabab812c8a466992fe5a3d81f8e79a1b875c2 Step #5: Base64: ady/zLTMtMy0zLTMtMyyzLLMtMy0zLTMssy0zLTMtMy0zLPMtMy0zLLMtMy0zLLMssy0zLLMtA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3355 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1109533824 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ae77ec4d60, 0x55ae780ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ae780ad720,0x55ae79f372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f7aabab812c8a466992fe5a3d81f8e79a1b875c2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4125 processed earlier; will process 6851 files now Step #5: #1 pulse cov: 3687 ft: 3688 exec/s: 0 rss: 175Mb Step #5: #2 pulse cov: 4167 ft: 4807 exec/s: 0 rss: 176Mb Step #5: ==120856== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ae6ea072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ae75042728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ae7502546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ae7502538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ae6ea0d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ae6e96e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ae6e968c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ae6e9ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ae71a2e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ae71a2e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ae71a2e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ae71a2e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ae71a2e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ae71a2e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ae71a2e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ae71a2e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ae71a2e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ae71a2e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ae73c3345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ae7098f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ae7099a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ae70745d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ae70745d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ae70746808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ae70745944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ae70745944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ae70745944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ae7502794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ae750307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ae75018529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ae75042fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0c41b62082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ae6e96743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x27,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x3f,0x42, Step #5: \177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177\177'\177\177\177\177\177\177\177\177\177\177\177\177\177\177?B Step #5: artifact_prefix='./'; Test unit written to ./oom-826bd470e17d0cb38033574be2d2b0ed2440fc7f Step #5: Base64: f39/f39/f39/f39/f39/f39/f39/f39/f39/f39/f39/f39/f38nf39/f39/f39/f39/f38/Qg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3356 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1110139715 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562e7b0fbd60, 0x562e7b2e471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562e7b2e4720,0x562e7d16e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/826bd470e17d0cb38033574be2d2b0ed2440fc7f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4128 processed earlier; will process 6848 files now Step #5: ==120892== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562e71c3e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562e78279728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562e7825c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562e7825c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562e71c44652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562e71ba542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562e71b9fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562e71c36595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562e74c658c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562e74c658c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562e74c658c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562e74c658c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562e74c658c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562e74c658c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562e74c658c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562e74c658c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562e74c658c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562e74c658c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562e76e6a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562e73bc6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562e73bd15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562e7397cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562e7397cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562e7397d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562e7397c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562e7397c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562e7397c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562e7825e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562e782677b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562e7824f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562e78279fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f4af88d0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562e71b9e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x42,0x1,0x0,0x0,0x0,0x0,0x0,0x2d,0x1f,0x44,0x2d,0x0,0x2d,0x33,0x3,0x73,0x60,0x78,0x21,0x74,0x1,0x33,0x3,0x3c,0x6d,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x2b,0x3,0x3c,0x6d,0x60,0xdb,0x9e,0x3,0x32,0xdb,0xa5,0x32, Step #5: IB\001\000\000\000\000\000-\037D-\000-3\003s`x!t\0013\003 Step #5: Step #5: #0 0x56404863f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56404ec7a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56404ec5d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56404ec5d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564048645652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5640485a642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5640485a0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564048637595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56404b6668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56404b6668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56404b6668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56404b6668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56404b6668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56404b6668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56404b6668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56404b6668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56404b6668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56404b6668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56404d86b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56404a5c7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56404a5d25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56404a37dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56404a37dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56404a37e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56404a37d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56404a37d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56404a37d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56404ec5f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56404ec687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56404ec50529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56404ec7afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f06cb4b5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56404859f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x0,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x0,0x0,0x0,0x9c,0x30, Step #5: \000\000\000\000hhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh\000\000\000\2340 Step #5: artifact_prefix='./'; Test unit written to ./oom-e2e63f084ae7a2578a2bcc2abc0fae66465dca41 Step #5: Base64: AAAAAGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGgAAACcMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3358 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1111307272 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8d2444d60, 0x55e8d262d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8d262d720,0x55e8d44b72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e2e63f084ae7a2578a2bcc2abc0fae66465dca41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4130 processed earlier; will process 6846 files now Step #5: ==120964== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8c8f872d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8cf5c2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8cf5a546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8cf5a538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8c8f8d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8c8eee42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8c8ee8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8c8f7f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8cbfae8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8cbfae8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8cbfae8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8cbfae8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8cbfae8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8cbfae8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8cbfae8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8cbfae8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8cbfae8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8cbfae8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8ce1b345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8caf0f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8caf1a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8cacc5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8cacc5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8cacc6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8cacc5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8cacc5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8cacc5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8cf5a794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8cf5b07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8cf598529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8cf5c2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdcbbf75082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8c8ee743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x5b,0x45,0x78,0x65,0x63,0x5d,0xa,0x57,0x6f,0x72,0x6b,0x69,0x6e,0x67,0x44,0x69,0x72,0x65,0x63,0x74,0x6f,0x72,0x79,0x3d,0x2f,0x2e,0x22,0x2f,0x46,0x2f,0x2e,0x5f,0x2e,0x5f,0x2f,0x2e,0x46,0x2f,0x2e,0x41,0x2f,0x2e,0x45,0x2f,0x2e,0x3d,0x2f,0x2e,0x22,0x2f,0x2e,0x3f,0x2f,0x2e,0x2d, Step #5: [Exec]\012WorkingDirectory=/.\"/F/._._/.F/.A/.E/.=/.\"/.?/.- Step #5: artifact_prefix='./'; Test unit written to ./oom-9d94a066244e9f59a407b1896e2059ac3a85f920 Step #5: Base64: W0V4ZWNdCldvcmtpbmdEaXJlY3Rvcnk9Ly4iL0YvLl8uXy8uRi8uQS8uRS8uPS8uIi8uPy8uLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3359 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1111838059 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561426bd4d60, 0x561426dbd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561426dbd720,0x561428c472c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9d94a066244e9f59a407b1896e2059ac3a85f920' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4131 processed earlier; will process 6845 files now Step #5: ==121000== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56141d7172d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561423d52728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561423d3546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561423d3538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56141d71d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56141d67e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56141d678c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56141d70f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56142073e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56142073e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56142073e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56142073e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56142073e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56142073e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56142073e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56142073e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56142073e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56142073e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56142294345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56141f69f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56141f6aa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56141f455d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56141f455d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56141f456808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56141f455944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56141f455944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56141f455944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561423d3794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561423d407b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561423d28529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561423d52fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3bcfbe0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56141d67743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0x8,0x0,0x0,0x1,0x8,0x0,0x0,0x1,0x8,0x0,0x0,0x1,0x8, Step #5: \002\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\001\010\000\000\001\010\000\000\001\010\000\000\001\010 Step #5: artifact_prefix='./'; Test unit written to ./oom-c81e7e7df7f3714e17c54708ccff796698e51ea5 Step #5: Base64: AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABCAAAAQgAAAEIAAABCA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3360 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1112359103 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5619f4a80d60, 0x5619f4c6971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5619f4c69720,0x5619f6af32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c81e7e7df7f3714e17c54708ccff796698e51ea5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4132 processed earlier; will process 6844 files now Step #5: ==121036== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5619eb5c32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5619f1bfe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5619f1be146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5619f1be138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5619eb5c9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5619eb52a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5619eb524c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5619eb5bb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5619ee5ea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5619ee5ea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5619ee5ea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5619ee5ea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5619ee5ea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5619ee5ea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5619ee5ea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5619ee5ea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5619ee5ea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5619ee5ea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5619f07ef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5619ed54b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5619ed5565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5619ed301d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5619ed301d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5619ed302808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5619ed301944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5619ed301944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5619ed301944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5619f1be394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5619f1bec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5619f1bd4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5619f1bfefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6b1fa1b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5619eb52343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x6f,0x63,0x69,0x56,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x31,0x2e,0x30,0x2e,0x30,0x22,0x2c,0x22,0x6c,0x69,0x6e,0x75,0x78,0x22,0x3a,0x7b,0x22,0x6d,0x61,0x73,0x6b,0x65,0x64,0x50,0x61,0x74,0x68,0x73,0x22,0x3a,0x5b,0x22,0x2f,0x73,0x31,0x69,0x22,0x5d,0x7d,0x7d, Step #5: {\"ociVersion\":\"1.0.0\",\"linux\":{\"maskedPaths\":[\"/s1i\"]}} Step #5: artifact_prefix='./'; Test unit written to ./oom-807300e55e151b85625f63f36e58b0ce2dc5c878 Step #5: Base64: eyJvY2lWZXJzaW9uIjoiMS4wLjAiLCJsaW51eCI6eyJtYXNrZWRQYXRocyI6WyIvczFpIl19fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3361 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1112886742 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dde9efad60, 0x55ddea0e371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ddea0e3720,0x55ddebf6d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/807300e55e151b85625f63f36e58b0ce2dc5c878' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4133 processed earlier; will process 6843 files now Step #5: #1 pulse cov: 4057 ft: 4058 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 4294 ft: 4678 exec/s: 0 rss: 173Mb Step #5: ==121072== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dde0a3d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dde7078728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dde705b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dde705b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dde0a43652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dde09a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dde099ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dde0a35595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dde3a648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dde3a648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dde3a648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dde3a648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dde3a648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dde3a648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dde3a648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dde3a648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dde3a648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dde3a648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dde5c6945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dde29c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dde29d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dde277bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dde277bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dde277c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dde277b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dde277b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dde277b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dde705d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dde70667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dde704e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dde7078fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f96ceace082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dde099d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x1,0x0,0x0,0x0,0x10,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f,0x32,0x35,0x34,0x2e,0x43,0x2e,0x0,0x11,0x31,0x0,0x98,0x0,0x0,0x0,0x11,0x66,0x69,0x6c,0x65,0x3a,0x69,0x7c,0x20,0x6e,0x74,0x6c,0x76,0x61,0x6f,0x20,0x57,0x23,0x0,0x28,0x0,0x0,0x0,0x4,0x0,0x0,0x0,0x5, Step #5: \000\001\000\000\000\020http://254.C.\000\0211\000\230\000\000\000\021file:i| ntlvao W#\000(\000\000\000\004\000\000\000\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-873e94ab319839843ad3787783381f80d4e69aae Step #5: Base64: AAEAAAAQaHR0cDovLzI1NC5DLgARMQCYAAAAEWZpbGU6aXwgbnRsdmFvIFcjACgAAAAEAAAABQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3362 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1113481976 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e310726d60, 0x55e31090f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e31090f720,0x55e3127992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/873e94ab319839843ad3787783381f80d4e69aae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4136 processed earlier; will process 6840 files now Step #5: ==121108== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e3072692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e30d8a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e30d88746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e30d88738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e30726f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e3071d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e3071cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e307261595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e30a2908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e30a2908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e30a2908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e30a2908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e30a2908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e30a2908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e30a2908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e30a2908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e30a2908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e30a2908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e30c49545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e3091f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e3091fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e308fa7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e308fa7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e308fa8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e308fa7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e308fa7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e308fa7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e30d88994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e30d8927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e30d87a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e30d8a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbcbabfb082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e3071c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x1,0x0,0x0,0x0,0x10,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f,0x31,0x32,0x37,0x2e,0x30,0x2e,0x0,0x11,0x31,0x0,0x98,0x0,0x0,0x0,0x11,0x2a,0x20,0x4f,0x4b,0xd,0xa,0x53,0x65,0x72,0x76,0x65,0x72,0x3a,0x20,0x74,0x65,0x73,0x0,0x28,0x0,0x0,0x0,0x4,0x0,0x0,0x0,0x5, Step #5: \000\001\000\000\000\020http://127.0.\000\0211\000\230\000\000\000\021* OK\015\012Server: tes\000(\000\000\000\004\000\000\000\005 Step #5: artifact_prefix='./'; Test unit written to ./oom-faf779ab55e387a0591879aefe153de291ebe498 Step #5: Base64: AAEAAAAQaHR0cDovLzEyNy4wLgARMQCYAAAAESogT0sNClNlcnZlcjogdGVzACgAAAAEAAAABQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3363 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1114005293 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f75115ed60, 0x55f75134771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f751347720,0x55f7531d12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/faf779ab55e387a0591879aefe153de291ebe498' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4137 processed earlier; will process 6839 files now Step #5: ==121144== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f747ca12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f74e2dc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f74e2bf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f74e2bf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f747ca7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f747c0842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f747c02c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f747c99595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f74acc88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f74acc88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f74acc88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f74acc88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f74acc88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f74acc88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f74acc88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f74acc88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f74acc88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f74acc88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f74cecd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f749c29578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f749c345a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f7499dfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f7499dfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f7499e0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f7499df944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f7499df944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f7499df944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f74e2c194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f74e2ca7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f74e2b2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f74e2dcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe388496082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f747c0143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x7d,0x7d,0x3c,0x74,0x65,0x78,0x74,0x3e,0x5e,0xe0,0xad,0x8b,0x3b,0xd,0x35,0xe1,0x9e,0xb7,0x31,0xe2,0x84,0x8c,0xe1,0x82,0x8d,0x49,0x43,0x43,0x50,0x5b,0x5b,0x29,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3e,0x3e,0x2c,0x47,0x47,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: }}^\340\255\213;\0155\341\236\2671\342\204\214\341\202\215ICCP[[)>>,GG Step #5: artifact_prefix='./'; Test unit written to ./oom-0b275a8aba2f69e3beaeb10dbaab3ef74975f496 Step #5: Base64: PHN2Zz59fTx0ZXh0Pl7grYs7DTXhnrcx4oSM4YKNSUNDUFtbKTwvdGV4dD4+PixHRzwvc3ZnPg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3364 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1114520006 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a0d5334d60, 0x55a0d551d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a0d551d720,0x55a0d73a72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0b275a8aba2f69e3beaeb10dbaab3ef74975f496' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4138 processed earlier; will process 6838 files now Step #5: ==121180== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a0cbe772d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a0d24b2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a0d249546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a0d249538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a0cbe7d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a0cbdde42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a0cbdd8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a0cbe6f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a0cee9e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a0cee9e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a0cee9e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a0cee9e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a0cee9e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a0cee9e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a0cee9e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a0cee9e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a0cee9e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a0cee9e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a0d10a345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a0cddff578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a0cde0a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a0cdbb5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a0cdbb5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a0cdbb6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a0cdbb5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a0cdbb5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a0cdbb5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a0d249794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a0d24a07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a0d2488529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a0d24b2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa2a7694082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a0cbdd743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4e,0xd,0x60,0x4e,0xd,0xa,0x60,0xd,0x60,0xd,0xa,0x4e,0xd,0xa,0x60,0xd,0x60,0xf3,0xa0,0x81,0x8c,0xd,0xa,0x4e,0xd,0xf3,0xa0,0x80,0xab,0x60,0xd,0x60,0xd,0xa,0x4e,0xd,0xa,0x32,0xd,0x60,0xd,0xd,0xa,0x4e,0xd,0xa,0x0,0x3d,0xa,0x81,0xb3,0xf3,0x3d,0xbc,0xa, Step #5: N\015`N\015\012`\015`\015\012N\015\012`\015`\363\240\201\214\015\012N\015\363\240\200\253`\015`\015\012N\015\0122\015`\015\015\012N\015\012\000=\012\201\263\363=\274\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-4e97966dccc0ddcdac4e22a0f795ab1843d6076e Step #5: Base64: Tg1gTg0KYA1gDQpODQpgDWDzoIGMDQpODfOggKtgDWANCk4NCjINYA0NCk4NCgA9CoGz8z28Cg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3365 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1115166034 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560072cf6d60, 0x560072edf71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560072edf720,0x560074d692c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4e97966dccc0ddcdac4e22a0f795ab1843d6076e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4139 processed earlier; will process 6837 files now Step #5: #1 pulse cov: 11157 ft: 11158 exec/s: 0 rss: 194Mb Step #5: ==121216== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5600698392d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56006fe74728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56006fe5746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56006fe5738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56006983f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5600697a042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56006979ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560069831595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56006c8608c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56006c8608c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56006c8608c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56006c8608c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56006c8608c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56006c8608c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56006c8608c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56006c8608c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56006c8608c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56006c8608c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56006ea6545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56006b7c1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56006b7cc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56006b577d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56006b577d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56006b578808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56006b577944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56006b577944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56006b577944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56006fe5994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56006fe627b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56006fe4a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56006fe74fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe5e9d62082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56006979943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd6,0xae,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x9,0xf3,0xa0,0x81,0x88,0x0,0x0,0x0,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0xe0,0xb9,0x81,0x22,0x22,0x22,0xa,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x22,0x0,0x4f,0x0,0x96,0xc8, Step #5: \326\256\000\000\000\000\000\000\000\000\000\000\000\000\000\000\011\363\240\201\210\000\000\000\"\"\"\"\"\"\"\"\"\"\"\340\271\201\"\"\"\012\"\"\"\"\"\"\"\"\000O\000\226\310 Step #5: artifact_prefix='./'; Test unit written to ./oom-43cc1e8a459b94f6177737d7258f60d7a09c6aae Step #5: Base64: 1q4AAAAAAAAAAAAAAAAAAAnzoIGIAAAAIiIiIiIiIiIiIiLguYEiIiIKIiIiIiIiIiIATwCWyA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3366 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1115768137 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559630bf8d60, 0x559630de171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559630de1720,0x559632c6b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/43cc1e8a459b94f6177737d7258f60d7a09c6aae' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4141 processed earlier; will process 6835 files now Step #5: ==121252== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55962773b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55962dd76728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55962dd5946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55962dd5938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559627741652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5596276a242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55962769cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559627733595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55962a7628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55962a7628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55962a7628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55962a7628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55962a7628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55962a7628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55962a7628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55962a7628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55962a7628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55962a7628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55962c96745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5596296c3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5596296ce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559629479d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559629479d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55962947a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559629479944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559629479944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559629479944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55962dd5b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55962dd647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55962dd4c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55962dd76fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f1a0f13c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55962769b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0xa,0x45,0x5b,0x3c,0x21,0x45,0x4e,0x54,0x49,0x54,0x59,0xd,0x25,0x20,0x78,0x78,0x20,0x53,0x59,0x53,0x54,0x45,0x4d,0xa,0x27,0x75,0x72,0x6e,0x3a,0x70,0x75,0x67,0x6c,0x69,0x63,0x69,0x64,0x3a,0x27,0x3e,0x25,0x78,0x78,0x3b,0x78,0x84, Step #5: %xx;x\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-784ffdd7f81057c38e474db95482c81b5f4ab7e2 Step #5: Base64: PCFET0NUWVBFCkVbPCFFTlRJVFkNJSB4eCBTWVNURU0KJ3VybjpwdWdsaWNpZDonPiV4eDt4hA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3367 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1116296361 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55984d924d60, 0x55984db0d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55984db0d720,0x55984f9972c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/784ffdd7f81057c38e474db95482c81b5f4ab7e2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4142 processed earlier; will process 6834 files now Step #5: ==121288== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5598444672d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55984aaa2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55984aa8546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55984aa8538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55984446d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5598443ce42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5598443c8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55984445f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55984748e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55984748e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55984748e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55984748e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55984748e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55984748e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55984748e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55984748e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55984748e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55984748e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55984969345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5598463ef578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5598463fa5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5598461a5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5598461a5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5598461a6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5598461a5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5598461a5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5598461a5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55984aa8794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55984aa907b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55984aa78529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55984aaa2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f080adbe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5598443c743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x78,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0xa,0x64,0x0,0x0,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x45,0x31,0xa,0x3d,0xcc,0xbb,0x41,0x2d,0x2d,0x2d,0x41,0x73,0x63,0x65,0xa,0x2d,0x3f,0x41,0x73,0xa,0x0,0xa,0x64,0xa,0x64,0xa,0x64,0x0,0x0,0x2d,0x2d, Step #5: x-----BEGIN \012d\000\000-------\012E1\012=\314\273A---Asce\012-?As\012\000\012d\012d\012d\000\000-- Step #5: artifact_prefix='./'; Test unit written to ./oom-ce3f3b5c21137ab236e80ccbd7a9cf35bd52c593 Step #5: Base64: eC0tLS0tQkVHSU4gCmQAAC0tLS0tLS0KRTEKPcy7QS0tLUFzY2UKLT9BcwoACmQKZApkAAAtLQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3368 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1116820429 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cf482aad60, 0x55cf4849371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cf48493720,0x55cf4a31d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ce3f3b5c21137ab236e80ccbd7a9cf35bd52c593' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4143 processed earlier; will process 6833 files now Step #5: ==121324== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55cf3eded2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cf45428728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cf4540b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cf4540b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55cf3edf3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55cf3ed5442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55cf3ed4ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55cf3ede5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55cf41e148c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55cf41e148c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55cf41e148c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55cf41e148c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55cf41e148c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55cf41e148c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55cf41e148c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55cf41e148c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55cf41e148c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55cf41e148c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cf4401945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55cf40d75578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55cf40d805a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55cf40b2bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55cf40b2bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55cf40b2c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55cf40b2b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55cf40b2b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55cf40b2b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cf4540d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cf454167b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cf453fe529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cf45428fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe8aac76082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55cf3ed4d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x40,0x1,0x7f,0x77,0x1e,0x0,0x47,0x45,0x4f,0x42,0x7d,0x24,0x60,0x60,0x60,0x7f,0x5d,0x7f,0x7f,0x6f,0x7c,0x10,0x2f,0x5b,0x32,0x2e,0x2e,0x2f,0x73,0x20,0x37,0x20,0x30,0x20,0x32,0x10,0x20,0x32,0x10,0x2e,0x2f,0x2d,0x5f,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x43,0x24, Step #5: ID3\004@\001\177w\036\000GEOB}$```\177]\177\177o|\020/[2../s 7 0 2\020 2\020./-_\177\177\177o\000\000C$ Step #5: artifact_prefix='./'; Test unit written to ./oom-44e79739ca3842ab595aea03cbc9f9de2976bbe3 Step #5: Base64: SUQzBEABf3ceAEdFT0J9JGBgYH9df39vfBAvWzIuLi9zIDcgMCAyECAyEC4vLV9/f39vAABDJA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3369 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1117362683 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5604a8f1dd60, 0x5604a910671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5604a9106720,0x5604aaf902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/44e79739ca3842ab595aea03cbc9f9de2976bbe3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4144 processed earlier; will process 6832 files now Step #5: #1 pulse cov: 3518 ft: 3519 exec/s: 0 rss: 172Mb Step #5: ==121360== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56049fa602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5604a609b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5604a607e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5604a607e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56049fa66652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56049f9c742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56049f9c1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56049fa58595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5604a2a878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5604a2a878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5604a2a878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5604a2a878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5604a2a878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5604a2a878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5604a2a878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5604a2a878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5604a2a878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5604a2a878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5604a4c8c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5604a19e8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5604a19f35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5604a179ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5604a179ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5604a179f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5604a179e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5604a179e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5604a179e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5604a608094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5604a60897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5604a6071529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5604a609bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcf8e851082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56049f9c043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2f,0x2f,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf,0xe3,0x8e,0xaf, Step #5: //\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257\343\216\257 Step #5: artifact_prefix='./'; Test unit written to ./oom-5ea7ef1149a04e42518af089ae0608df7d252760 Step #5: Base64: Ly/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq/jjq8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3370 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1117919869 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563656e7ad60, 0x56365706371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563657063720,0x563658eed2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5ea7ef1149a04e42518af089ae0608df7d252760' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4146 processed earlier; will process 6830 files now Step #5: ==121396== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56364d9bd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563653ff8728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563653fdb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563653fdb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56364d9c3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56364d92442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56364d91ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56364d9b5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5636509e48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5636509e48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5636509e48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5636509e48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5636509e48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5636509e48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5636509e48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5636509e48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5636509e48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5636509e48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563652be945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56364f945578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56364f9505a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56364f6fbd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56364f6fbd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56364f6fc808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56364f6fb944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56364f6fb944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56364f6fb944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563653fdd94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563653fe67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563653fce529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563653ff8fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6f4366082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56364d91d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x2d,0x2d,0x2d,0x2d,0x45,0x47,0x49,0x73,0x2d,0x2d,0x2d,0x2d,0x45,0x47,0x49,0x4e,0x20,0xca,0xb7,0xd,0xd,0xd,0x29,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0xca,0xb7,0xd,0x4e,0x20,0xca,0xb7,0xd,0xd,0xd,0x29,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0xca,0xb7,0xd,0xd,0xd,0x29,0x48, Step #5: s----EGIs----EGIN \312\267\015\015\015)-BEGIN \312\267\015N \312\267\015\015\015)-BEGIN \312\267\015\015\015)H Step #5: artifact_prefix='./'; Test unit written to ./oom-71c064be157b50147ab647f6b2cdfe18680d3637 Step #5: Base64: cy0tLS1FR0lzLS0tLUVHSU4gyrcNDQ0pLUJFR0lOIMq3DU4gyrcNDQ0pLUJFR0lOIMq3DQ0NKUg= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3371 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1118438226 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5564b068bd60, 0x5564b087471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5564b0874720,0x5564b26fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/71c064be157b50147ab647f6b2cdfe18680d3637' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4147 processed earlier; will process 6829 files now Step #5: #1 pulse cov: 11347 ft: 11348 exec/s: 0 rss: 190Mb Step #5: ==121432== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564a71ce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5564ad809728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5564ad7ec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5564ad7ec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564a71d4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5564a713542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5564a712fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564a71c6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564aa1f58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564aa1f58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564aa1f58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564aa1f58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564aa1f58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564aa1f58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564aa1f58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564aa1f58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564aa1f58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564aa1f58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564ac3fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5564a9156578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564a91615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564a8f0cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564a8f0cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564a8f0d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564a8f0c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564a8f0c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564a8f0c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5564ad7ee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5564ad7f77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5564ad7df529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5564ad809fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f32826a2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5564a712e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4f,0x57,0x4e,0x45,0x52,0x3d,0x22,0xef,0xbe,0xbb,0xef,0xbc,0xbf,0xef,0xbe,0xad,0xef,0xbc,0xbf,0xef,0xbc,0xbf,0xef,0xbc,0xbf,0xef,0xbe,0xbb,0xef,0xbc,0xbf,0xef,0xbe,0xad,0xef,0xbc,0xbf,0xef,0xbe,0xad,0xef,0xbc,0xbf,0xef,0xbe,0xbb,0xef,0xbc,0xbf,0xef,0xbf,0xbb,0xef,0xb8,0xbf,0x22, Step #5: OWNER=\"\357\276\273\357\274\277\357\276\255\357\274\277\357\274\277\357\274\277\357\276\273\357\274\277\357\276\255\357\274\277\357\276\255\357\274\277\357\276\273\357\274\277\357\277\273\357\270\277\" Step #5: artifact_prefix='./'; Test unit written to ./oom-665b4d3684832dbf01384f78d95fadf015ea3a45 Step #5: Base64: T1dORVI9Iu++u++8v+++re+8v++8v++8v+++u++8v+++re+8v+++re+8v+++u++8v++/u++4vyI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3372 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1119027362 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5629ade54d60, 0x5629ae03d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5629ae03d720,0x5629afec72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/665b4d3684832dbf01384f78d95fadf015ea3a45' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4149 processed earlier; will process 6827 files now Step #5: ==121468== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5629a49972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5629aafd2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5629aafb546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5629aafb538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5629a499d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5629a48fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5629a48f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5629a498f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5629a79be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5629a79be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5629a79be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5629a79be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5629a79be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5629a79be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5629a79be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5629a79be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5629a79be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5629a79be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5629a9bc345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5629a691f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5629a692a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5629a66d5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5629a66d5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5629a66d6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5629a66d5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5629a66d5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5629a66d5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5629aafb794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5629aafc07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5629aafa8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5629aafd2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f79738082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5629a48f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6c,0x6f,0x63,0x61,0x6c,0xd,0x5f,0x3c,0x63,0x6c,0x6f,0x73,0x65,0x3e,0x6c,0x6f,0x63,0x61,0x6c,0xd,0x5f,0x3c,0x63,0x6c,0x6f,0x73,0x65,0x3e,0x6c,0x6f,0x63,0x61,0x6c,0xd,0x5f,0x3c,0x63,0x6c,0x6f,0x73,0x65,0x3e,0x6c,0x6f,0x63,0x61,0x6c,0xd,0x5f,0x3c,0x63,0x6c,0x6f,0x73,0x65,0x3e, Step #5: local\015_local\015_local\015_local\015_ Step #5: artifact_prefix='./'; Test unit written to ./oom-cf72a2186f5a8cd4af53d380af4718d7197b33a2 Step #5: Base64: bG9jYWwNXzxjbG9zZT5sb2NhbA1fPGNsb3NlPmxvY2FsDV88Y2xvc2U+bG9jYWwNXzxjbG9zZT4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3373 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1119553831 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555a90d5dd60, 0x555a90f4671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555a90f46720,0x555a92dd02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cf72a2186f5a8cd4af53d380af4718d7197b33a2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4150 processed earlier; will process 6826 files now Step #5: ==121504== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555a878a02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555a8dedb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555a8debe46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555a8debe38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555a878a6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555a8780742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555a87801c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555a87898595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555a8a8c78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555a8a8c78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555a8a8c78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555a8a8c78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555a8a8c78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555a8a8c78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555a8a8c78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555a8a8c78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555a8a8c78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555a8a8c78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555a8cacc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555a89828578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555a898335a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555a895ded3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555a895ded3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555a895df808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555a895de944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555a895de944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555a895de944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555a8dec094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555a8dec97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555a8deb1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555a8dedbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc53d703082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555a8780043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x77,0x53,0x3a,0xe3,0x8c,0x96,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0x2e,0xe3,0x8c,0x96,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0x2e,0xe3,0x8c,0x96,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84,0xcd,0x84, Step #5: wS:\343\214\226\315\204\315\204\315\204\315\204\315\204\315\204\315\204.\343\214\226\315\204\315\204\315\204\315\204\315\204\315\204\315\204.\343\214\226\315\204\315\204\315\204\315\204\315\204\315\204\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-fc9528291b390b8a2ed5fd6bcb4ec75ad2203942 Step #5: Base64: d1M644yWzYTNhM2EzYTNhM2EzYQu44yWzYTNhM2EzYTNhM2EzYQu44yWzYTNhM2EzYTNhM2EzYQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3374 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1120076538 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56330d1cdd60, 0x56330d3b671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56330d3b6720,0x56330f2402c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc9528291b390b8a2ed5fd6bcb4ec75ad2203942' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4151 processed earlier; will process 6825 files now Step #5: #1 pulse cov: 3616 ft: 3617 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 3824 ft: 4186 exec/s: 0 rss: 173Mb Step #5: ==121540== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563303d102d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56330a34b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56330a32e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56330a32e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563303d16652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563303c7742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563303c71c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563303d08595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563306d378c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563306d378c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563306d378c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563306d378c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563306d378c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563306d378c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563306d378c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563306d378c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563306d378c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563306d378c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563308f3c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563305c98578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563305ca35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563305a4ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563305a4ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563305a4f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563305a4e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563305a4e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563305a4e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56330a33094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56330a3397b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56330a321529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56330a34bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f63dff07082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563303c7043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x0,0x6b,0x0,0x60,0x2b,0x2b,0x4a,0x9,0x29,0x4a,0x9,0x29,0xa,0x20,0x0,0x29,0xa,0x5c,0x2b,0x2b,0x4a,0x9,0x29,0x4a,0x9,0x29,0xa,0x20,0x0,0x29,0xa,0x5c,0x9,0x60,0xa9,0x60,0x40,0x29,0xa,0x1,0x0,0x1d,0x9,0x60,0xa9,0x60,0x40,0x29,0xa,0x1,0x0,0x1d,0x9,0x2b,0x29, Step #5: \012\000k\000`++J\011)J\011)\012 \000)\012\\++J\011)J\011)\012 \000)\012\\\011`\251`@)\012\001\000\035\011`\251`@)\012\001\000\035\011+) Step #5: artifact_prefix='./'; Test unit written to ./oom-88295eb0175b6bf097d700c20d16ca2ae2d7e507 Step #5: Base64: CgBrAGArK0oJKUoJKQogACkKXCsrSgkpSgkpCiAAKQpcCWCpYEApCgEAHQlgqWBAKQoBAB0JKyk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3375 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1120823968 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561599a3fd60, 0x561599c2871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561599c28720,0x56159bab22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/88295eb0175b6bf097d700c20d16ca2ae2d7e507' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4154 processed earlier; will process 6822 files now Step #5: ==121576== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5615905822d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561596bbd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561596ba046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561596ba038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561590588652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5615904e942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5615904e3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56159057a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5615935a98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5615935a98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5615935a98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5615935a98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5615935a98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5615935a98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5615935a98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5615935a98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5615935a98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5615935a98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5615957ae45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56159250a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5615925155a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5615922c0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5615922c0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5615922c1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5615922c0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5615922c0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5615922c0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561596ba294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561596bab7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561596b93529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561596bbdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa1a0651082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5615904e243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x69,0x6c,0x65,0x3a,0x2f,0xe3,0x82,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0xa0,0x82,0xe3,0x80,0x80,0xe3,0x80,0x82,0xe3,0x80,0x82,0x2c,0xe3,0x80,0x82,0x30,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0x80,0x82, Step #5: File:/\343\202\202\343\200\202\343\200\202\343\200\202\343\200\202\343\200\202\343\240\202\343\200\200\343\200\202\343\200\202,\343\200\2020\343\200\202\343\200\202\343\200\202\343\200\202\343\200\202 Step #5: artifact_prefix='./'; Test unit written to ./oom-d68eb4f1429192aa643d6d34281e833701b3a4a8 Step #5: Base64: RmlsZTov44KC44CC44CC44CC44CC44CC46CC44CA44CC44CCLOOAgjDjgILjgILjgILjgILjgII= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3376 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1121347882 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8b0be8d60, 0x55e8b0dd171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8b0dd1720,0x55e8b2c5b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d68eb4f1429192aa643d6d34281e833701b3a4a8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4155 processed earlier; will process 6821 files now Step #5: ==121612== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8a772b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8add66728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8add4946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8add4938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8a7731652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8a769242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8a768cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8a7723595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8aa7528c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8aa7528c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8aa7528c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8aa7528c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8aa7528c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8aa7528c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8aa7528c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8aa7528c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8aa7528c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8aa7528c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8ac95745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8a96b3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8a96be5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8a9469d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8a9469d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8a946a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8a9469944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8a9469944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8a9469944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8add4b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8add547b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8add3c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8add66fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9b7f5f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8a768b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x3a,0x28,0x3f,0x6d,0x3a,0x28,0x3f,0x3a,0x24,0x7c,0x7a,0x24,0x7c,0x2e,0x7c,0x24,0x7c,0x73,0x7c,0x24,0x7c,0x5c,0x7a,0x7c,0x25,0x7c,0x5c,0x7a,0x7c,0x0,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c,0x29,0x7c, Step #5: (?:(?:(?:(?:(?:(?m:(?:$|z$|.|$|s|$|\\z|%|\\z|\000)|)|)|)|)|)| Step #5: artifact_prefix='./'; Test unit written to ./oom-a47e66649108d2cb2f4e8118408bf6e3a9c1b2ff Step #5: Base64: KD86KD86KD86KD86KD86KD9tOig/OiR8eiR8LnwkfHN8JHxcenwlfFx6fAApfCl8KXwpfCl8KXw= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3377 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1121876331 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558408df8d60, 0x558408fe171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558408fe1720,0x55840ae6b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a47e66649108d2cb2f4e8118408bf6e3a9c1b2ff' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4156 processed earlier; will process 6820 files now Step #5: ==121648== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5583ff93b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558405f76728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558405f5946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558405f5938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5583ff941652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5583ff8a242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5583ff89cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5583ff933595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5584029628c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5584029628c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5584029628c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5584029628c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5584029628c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5584029628c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5584029628c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5584029628c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5584029628c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5584029628c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558404b6745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5584018c3578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5584018ce5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558401679d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558401679d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55840167a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558401679944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558401679944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558401679944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558405f5b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558405f647b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558405f4c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558405f76fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3ab1f4c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5583ff89b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd7,0xa3,0x1,0xd7,0xa3,0x1,0x9,0x9,0x34,0x9,0x1b,0xd7,0xa3,0x1,0xd7,0xa3,0x1,0x9,0x34,0x9,0x1b,0x1b,0x0,0x0,0x0,0x0,0x0,0x0,0x20,0x22,0x9,0x1b,0xd7,0xa3,0x1,0xd7,0xa3,0x1,0x9,0x34,0x9,0x1b,0x1b,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x92,0x1b,0x74,0x1b,0x1b,0x74, Step #5: \327\243\001\327\243\001\011\0114\011\033\327\243\001\327\243\001\0114\011\033\033\000\000\000\000\000\000 \"\011\033\327\243\001\327\243\001\0114\011\033\033\000\000\000\000\000\000\000\222\033t\033\033t Step #5: artifact_prefix='./'; Test unit written to ./oom-56ab2ae6d1b3d0d40bff060251dee745ad7b80d1 Step #5: Base64: 16MB16MBCQk0CRvXowHXowEJNAkbGwAAAAAAACAiCRvXowHXowEJNAkbGwAAAAAAAACSG3QbG3Q= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3378 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1122404574 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56018893cd60, 0x560188b2571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560188b25720,0x56018a9af2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56ab2ae6d1b3d0d40bff060251dee745ad7b80d1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4157 processed earlier; will process 6819 files now Step #5: ==121684== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56017f47f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560185aba728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560185a9d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560185a9d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56017f485652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56017f3e642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56017f3e0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56017f477595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5601824a68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5601824a68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5601824a68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5601824a68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5601824a68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5601824a68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5601824a68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5601824a68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5601824a68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5601824a68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5601846ab45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560181407578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5601814125a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5601811bdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5601811bdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5601811be808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5601811bd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5601811bd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5601811bd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560185a9f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560185aa87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560185a90529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560185abafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f28a2f83082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56017f3df43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x7f,0x0,0x0,0x0,0x32,0x0,0x0,0x0,0x32,0x2e,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x0,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x32,0x0,0x24,0x0,0x0,0x0, Step #5: $\177]\177\000\000\0002\000\000\0002.23/\020./( 7 =\177\000\000\000\000\177\177\177o\000\00023/\020./( 7 =\177\000\000\0002\000$\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-51b652f36d2ceb7b144f6b9a010d77a9258d9cc7 Step #5: Base64: JH9dfwAAADIAAAAyLjIzLxAuLyggNyA9fwAAAAB/f39vAAAyMy8QLi8oIDcgPX8AAAAyACQAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3379 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1122951505 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5610696d1d60, 0x5610698ba71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5610698ba720,0x56106b7442c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/51b652f36d2ceb7b144f6b9a010d77a9258d9cc7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4158 processed earlier; will process 6818 files now Step #5: ==121720== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5610602142d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56106684f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56106683246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56106683238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56106021a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56106017b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561060175c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56106020c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56106323b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56106323b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56106323b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56106323b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56106323b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56106323b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56106323b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56106323b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56106323b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56106323b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56106544045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56106219c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5610621a75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561061f52d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561061f52d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561061f53808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561061f52944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561061f52944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561061f52944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56106683494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56106683d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561066825529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56106684ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff5e033f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56106017443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0x0,0x0,0x28,0xe2,0x80,0xac,0x0,0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0xe2,0x80,0x8d,0x0,0x0,0x28,0xe2,0x80,0xae,0x0,0x72,0x2b,0x2f,0x76,0x30,0x0,0xf3,0xa0,0x81,0xb8,0x0,0x28,0xd,0x0,0x72,0x64,0x64,0x64,0xb5,0xf3,0xa0,0x81,0x87,0x64,0x64, Step #5: \341\240\216= \177\177\000\000(\342\200\254\000\341\240\216= \177\177\342\200\215\000\000(\342\200\256\000r+/v0\000\363\240\201\270\000(\015\000rddd\265\363\240\201\207dd Step #5: artifact_prefix='./'; Test unit written to ./oom-3a1f8e51c7de04bce749e536421b24751631a9ce Step #5: Base64: 4aCOPSB/fwAAKOKArADhoI49IH9/4oCNAAAo4oCuAHIrL3YwAPOggbgAKA0AcmRkZLXzoIGHZGQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3380 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1123469803 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a4822b8d60, 0x55a4824a171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a4824a1720,0x55a48432b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a1f8e51c7de04bce749e536421b24751631a9ce' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4159 processed earlier; will process 6817 files now Step #5: ==121756== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a478dfb2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a47f436728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a47f41946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a47f41938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a478e01652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a478d6242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a478d5cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a478df3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a47be228c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a47be228c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a47be228c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a47be228c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a47be228c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a47be228c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a47be228c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a47be228c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a47be228c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a47be228c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a47e02745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a47ad83578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a47ad8e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a47ab39d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a47ab39d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a47ab3a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a47ab39944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a47ab39944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a47ab39944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a47f41b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a47f4247b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a47f40c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a47f436fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f293d367082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a478d5b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0x0,0x0,0x28,0xe2,0x80,0xac,0x0,0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0xe2,0x80,0x89,0x0,0x0,0x28,0xe2,0x80,0xae,0x0,0x72,0x2b,0x2f,0x76,0x30,0x0,0xf3,0xa0,0x81,0xb8,0x0,0x28,0xd,0x0,0x72,0x64,0x64,0x64,0xb5,0xf3,0xa0,0x81,0x87,0x64,0x64, Step #5: \341\240\216= \177\177\000\000(\342\200\254\000\341\240\216= \177\177\342\200\211\000\000(\342\200\256\000r+/v0\000\363\240\201\270\000(\015\000rddd\265\363\240\201\207dd Step #5: artifact_prefix='./'; Test unit written to ./oom-6ee59ffc14155b05d725d231e22023018a5dc3d2 Step #5: Base64: 4aCOPSB/fwAAKOKArADhoI49IH9/4oCJAAAo4oCuAHIrL3YwAPOggbgAKA0AcmRkZLXzoIGHZGQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3381 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1124007830 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b6a916bd60, 0x55b6a935471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b6a9354720,0x55b6ab1de2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6ee59ffc14155b05d725d231e22023018a5dc3d2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4160 processed earlier; will process 6816 files now Step #5: ==121792== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b69fcae2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b6a62e9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b6a62cc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b6a62cc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b69fcb4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b69fc1542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b69fc0fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b69fca6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b6a2cd58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b6a2cd58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b6a2cd58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b6a2cd58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b6a2cd58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b6a2cd58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b6a2cd58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b6a2cd58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b6a2cd58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b6a2cd58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b6a4eda45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b6a1c36578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b6a1c415a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b6a19ecd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b6a19ecd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b6a19ed808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b6a19ec944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b6a19ec944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b6a19ec944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b6a62ce94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b6a62d77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b6a62bf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b6a62e9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7faab8d0d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b69fc0e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x23,0x76,0x21,0x39,0xa,0x0,0xe2,0x81,0x9f,0x3e,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xd7,0xa3,0x1,0xd7,0xa3,0x2d,0x0, Step #5: #v!9\012\000\342\201\237>\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\327\243\001\327\243-\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-b123caf3d53a027af69c43583cefd72e45f2915d Step #5: Base64: I3YhOQoA4oGfPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANejAdejLQA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3382 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1124541410 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f97c51ad60, 0x55f97c70371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f97c703720,0x55f97e58d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b123caf3d53a027af69c43583cefd72e45f2915d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4161 processed earlier; will process 6815 files now Step #5: ==121828== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f97305d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f979698728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f97967b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f97967b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f973063652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f972fc442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f972fbec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f973055595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f9760848c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f9760848c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f9760848c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f9760848c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f9760848c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f9760848c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f9760848c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f9760848c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f9760848c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f9760848c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f97828945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f974fe5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f974ff05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f974d9bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f974d9bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f974d9c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f974d9b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f974d9b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f974d9b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f97967d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f9796867b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f97966e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f979698fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82e57b5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f972fbd43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x4e,0x2f,0xe,0x0,0x0,0x2,0x25,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x2,0x25,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xe2,0x80,0xab,0x0,0x3a,0x1,0x0,0x0,0x0, Step #5: \000N/\016\000\000\002%\000\000\000\000\000\000\000\000\000\002%\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\342\200\253\000:\001\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-0acff23461b12c333a793608a2c918a5b1ba00ca Step #5: Base64: AE4vDgAAAiUAAAAAAAAAAAACJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADigKsAOgEAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3383 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1125057439 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562b7c7fed60, 0x562b7c9e771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562b7c9e7720,0x562b7e8712c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0acff23461b12c333a793608a2c918a5b1ba00ca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4162 processed earlier; will process 6814 files now Step #5: ==121864== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562b733412d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562b7997c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562b7995f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562b7995f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562b73347652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562b732a842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562b732a2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562b73339595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562b763688c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562b763688c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562b763688c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562b763688c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562b763688c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562b763688c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562b763688c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562b763688c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562b763688c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562b763688c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562b7856d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562b752c9578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562b752d45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562b7507fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562b7507fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562b75080808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562b7507f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562b7507f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562b7507f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562b7996194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562b7996a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562b79952529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562b7997cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8ebcd47082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562b732a143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3d,0x2d,0xa,0x3d,0x3d,0x5,0xa,0x3d,0x3d,0xa,0x2d,0xa,0x5,0xa,0x3d,0x3d,0xa,0x2d,0xa,0x4e,0x2d,0x2d,0xa,0xd9,0x8e,0x1f,0xa,0xa,0xa,0x3d,0xa,0x3d,0xa,0x6c,0x6c,0x6c,0x6c,0xa,0x3d,0xa,0x3d,0xa,0xa,0x3d,0x13,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x10, Step #5: =-\012==\005\012==\012-\012\005\012==\012-\012N--\012\331\216\037\012\012\012=\012=\012llll\012=\012=\012\012=\023=\012=\012=\012=\012=\012\020 Step #5: artifact_prefix='./'; Test unit written to ./oom-5c004c5278435a70faf2fed5b51abbaf7616ab2d Step #5: Base64: PS0KPT0FCj09Ci0KBQo9PQotCk4tLQrZjh8KCgo9Cj0KbGxsbAo9Cj0KCj0TPQo9Cj0KPQo9ChA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3384 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1125589911 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d8b7dced60, 0x55d8b7fb771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d8b7fb7720,0x55d8b9e412c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5c004c5278435a70faf2fed5b51abbaf7616ab2d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4163 processed earlier; will process 6813 files now Step #5: ==121900== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d8ae9112d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d8b4f4c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d8b4f2f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d8b4f2f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d8ae917652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d8ae87842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d8ae872c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d8ae909595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d8b19388c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d8b19388c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d8b19388c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d8b19388c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d8b19388c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d8b19388c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d8b19388c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d8b19388c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d8b19388c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d8b19388c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d8b3b3d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d8b0899578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d8b08a45a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d8b064fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d8b064fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d8b0650808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d8b064f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d8b064f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d8b064f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d8b4f3194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d8b4f3a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d8b4f22529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d8b4f4cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdc78d62082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d8ae87143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xc,0x62,0xa,0xa,0x8,0xcd,0x9e,0xc3,0xa5,0xc3,0xa5,0xcd,0xa5,0xa,0xc,0x62,0xa,0xa,0x8,0xcd,0x9e,0xc3,0xa5,0xc3,0xa5,0xcd,0xa5,0xa,0xc,0x62,0xa,0xa,0x8,0xcd,0x9e,0xc3,0xa5,0xc3,0xa5,0xcd,0xa5,0xa,0xc,0x62,0xa,0xa,0x8,0xcd,0x9e,0xc3,0xa5,0xcd,0x9e,0xc3,0xa5, Step #5: \012\014b\012\012\010\315\236\303\245\303\245\315\245\012\014b\012\012\010\315\236\303\245\303\245\315\245\012\014b\012\012\010\315\236\303\245\303\245\315\245\012\014b\012\012\010\315\236\303\245\315\236\303\245 Step #5: artifact_prefix='./'; Test unit written to ./oom-0e752f5f086ab1253928bb04f42997bfebdb737c Step #5: Base64: CgxiCgoIzZ7DpcOlzaUKDGIKCgjNnsOlw6XNpQoMYgoKCM2ew6XDpc2lCgxiCgoIzZ7Dpc2ew6U= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3385 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1126119793 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556dd1c74d60, 0x556dd1e5d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556dd1e5d720,0x556dd3ce72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0e752f5f086ab1253928bb04f42997bfebdb737c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4164 processed earlier; will process 6812 files now Step #5: ==121936== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556dc87b72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556dcedf2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556dcedd546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556dcedd538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556dc87bd652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556dc871e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556dc8718c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556dc87af595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556dcb7de8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556dcb7de8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556dcb7de8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556dcb7de8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556dcb7de8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556dcb7de8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556dcb7de8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556dcb7de8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556dcb7de8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556dcb7de8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556dcd9e345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556dca73f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556dca74a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556dca4f5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556dca4f5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556dca4f6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556dca4f5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556dca4f5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556dca4f5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556dcedd794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556dcede07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556dcedc8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556dcedf2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f185470e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556dc871743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x47,0x65,0x74,0x20,0x2f,0x68,0x69,0x20,0x48,0x54,0x54,0x50,0x2f,0x31,0x2e,0x31,0xd,0xa,0x68,0x6f,0x73,0x74,0x3a,0xd,0xa,0x74,0x72,0x61,0x6e,0x73,0x66,0x45,0x72,0x2d,0x65,0x6e,0x63,0x4f,0x64,0x69,0x6e,0x67,0x3a,0x25,0xd,0xa,0xd,0xa,0x42,0x46,0x46,0x46,0x46,0x46,0x65, Step #5: eGet /hi HTTP/1.1\015\012host:\015\012transfEr-encOding:%\015\012\015\012BFFFFFe Step #5: artifact_prefix='./'; Test unit written to ./oom-5b3457a3f7eecafed3b06d9522506ab192e3408b Step #5: Base64: ZUdldCAvaGkgSFRUUC8xLjENCmhvc3Q6DQp0cmFuc2ZFci1lbmNPZGluZzolDQoNCkJGRkZGRmU= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3386 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1126652878 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556b7b54ed60, 0x556b7b73771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556b7b737720,0x556b7d5c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5b3457a3f7eecafed3b06d9522506ab192e3408b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4165 processed earlier; will process 6811 files now Step #5: #1 pulse cov: 3856 ft: 3857 exec/s: 0 rss: 172Mb Step #5: ==121972== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556b720912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556b786cc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556b786af46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556b786af38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556b72097652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556b71ff842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556b71ff2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556b72089595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556b750b88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556b750b88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556b750b88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556b750b88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556b750b88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556b750b88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556b750b88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556b750b88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556b750b88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556b750b88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556b772bd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556b74019578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556b740245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556b73dcfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556b73dcfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556b73dd0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556b73dcf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556b73dcf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556b73dcf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556b786b194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556b786ba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556b786a2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556b786ccfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3e276f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556b71ff143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x20,0x0,0x2d,0x20,0x20,0x0,0x0,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x40,0x3e,0x0,0x0,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x40,0x3e,0x0,0x0,0x26,0x26,0x26,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x30, Step #5: - \000- \000\000&&&&&&&&>$@>\000\000&&&&&&&&>$@>\000\000&&&&$0&&&&&&&&&&>$0 Step #5: artifact_prefix='./'; Test unit written to ./oom-c2078e62ec60d4aa954f600b2760936b758d84ba Step #5: Base64: LSAgAC0gIAAAJiYmJiYmJiY+JEA+AAAmJiYmJiYmJj4kQD4AACYmJiYkMCYmJiYmJiYmJiY+JDA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3387 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1127224273 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b8be33cd60, 0x55b8be52571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b8be525720,0x55b8c03af2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c2078e62ec60d4aa954f600b2760936b758d84ba' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4167 processed earlier; will process 6809 files now Step #5: ==122008== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b8b4e7f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b8bb4ba728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b8bb49d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b8bb49d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b8b4e85652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b8b4de642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b8b4de0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b8b4e77595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b8b7ea68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b8b7ea68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b8b7ea68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b8b7ea68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b8b7ea68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b8b7ea68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b8b7ea68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b8b7ea68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b8b7ea68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b8b7ea68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b8ba0ab45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b8b6e07578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b8b6e125a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b8b6bbdd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b8b6bbdd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b8b6bbe808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b8b6bbd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b8b6bbd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b8b6bbd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b8bb49f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b8bb4a87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b8bb490529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b8bb4bafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2b64b9b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b8b4ddf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0xf3,0xa0,0x80,0xa1,0x2d,0x36,0xf3,0xa0,0x81,0xb9,0x3,0x6,0x0,0x0,0x31,0x0,0x24,0x54,0x3d,0xa,0x3d,0xa,0x1,0x14,0x3d,0xa,0xe2,0x80,0xae,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0x29,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x3d,0xa,0x0,0x0,0xe,0xe,0x24, Step #5: ID\363\240\200\241-6\363\240\201\271\003\006\000\0001\000$T=\012=\012\001\024=\012\342\200\256=\012=\012=\012=\012=\012=)=\012=\012=\012=\012\000\000\016\016$ Step #5: artifact_prefix='./'; Test unit written to ./oom-5723d36e0bcb7bad8b4b97046c1934495df83647 Step #5: Base64: SUTzoIChLTbzoIG5AwYAADEAJFQ9Cj0KARQ9CuKArj0KPQo9Cj0KPQo9KT0KPQo9Cj0KAAAODiQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3388 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1127755743 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561c194c9d60, 0x561c196b271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561c196b2720,0x561c1b53c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5723d36e0bcb7bad8b4b97046c1934495df83647' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4168 processed earlier; will process 6808 files now Step #5: ==122044== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561c1000c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561c16647728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561c1662a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561c1662a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561c10012652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561c0ff7342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561c0ff6dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561c10004595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561c130338c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561c130338c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561c130338c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561c130338c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561c130338c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561c130338c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561c130338c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561c130338c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561c130338c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561c130338c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561c1523845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561c11f94578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561c11f9f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561c11d4ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561c11d4ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561c11d4b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561c11d4a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561c11d4a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561c11d4a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561c1662c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561c166357b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561c1661d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561c16647fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fee8864e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561c0ff6c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xc,0x62,0xa,0xa,0x8,0xf3,0xbc,0x81,0x80,0xf4,0x80,0x80,0xa1,0xa,0xc,0x62,0xa,0xa,0x8,0xf3,0xbc,0x81,0x80,0xf4,0x80,0x80,0xa1,0xa,0xc,0x62,0xa,0xa,0x8,0xf3,0xbc,0x83,0x80,0xf4,0x80,0x80,0xa1,0xa,0xc,0x62,0xa,0xa,0x8,0xf3,0xbc,0x81,0x80,0xf4,0x80,0x80,0xa1, Step #5: \012\014b\012\012\010\363\274\201\200\364\200\200\241\012\014b\012\012\010\363\274\201\200\364\200\200\241\012\014b\012\012\010\363\274\203\200\364\200\200\241\012\014b\012\012\010\363\274\201\200\364\200\200\241 Step #5: artifact_prefix='./'; Test unit written to ./oom-0a8554bfff4004052ff6047011793d8b7780fb03 Step #5: Base64: CgxiCgoI87yBgPSAgKEKDGIKCgjzvIGA9ICAoQoMYgoKCPO8g4D0gIChCgxiCgoI87yBgPSAgKE= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3389 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1128273624 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55eb0cfc8d60, 0x55eb0d1b171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55eb0d1b1720,0x55eb0f03b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0a8554bfff4004052ff6047011793d8b7780fb03' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4169 processed earlier; will process 6807 files now Step #5: ==122080== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55eb03b0b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55eb0a146728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55eb0a12946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55eb0a12938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55eb03b11652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55eb03a7242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55eb03a6cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55eb03b03595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55eb06b328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55eb06b328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55eb06b328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55eb06b328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55eb06b328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55eb06b328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55eb06b328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55eb06b328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55eb06b328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55eb06b328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55eb08d3745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55eb05a93578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55eb05a9e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55eb05849d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55eb05849d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55eb0584a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55eb05849944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55eb05849944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55eb05849944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55eb0a12b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55eb0a1347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55eb0a11c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55eb0a146fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0d0f802082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55eb03a6b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x36,0xa,0x34,0xa,0x32,0x3a,0x30,0xa,0x2e,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50,0x50, Step #5: \0126\0124\0122:0\012.PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP Step #5: artifact_prefix='./'; Test unit written to ./oom-c1fafbf603d7fe7b89d591c9db936160f190ef4e Step #5: Base64: CjYKNAoyOjAKLlBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3390 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1128806808 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556409c6dd60, 0x556409e5671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556409e56720,0x55640bce02c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c1fafbf603d7fe7b89d591c9db936160f190ef4e' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4170 processed earlier; will process 6806 files now Step #5: ==122116== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5564007b02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556406deb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556406dce46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556406dce38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5564007b6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55640071742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556400711c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5564007a8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5564037d78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5564037d78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5564037d78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5564037d78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5564037d78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5564037d78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5564037d78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5564037d78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5564037d78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5564037d78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5564059dc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556402738578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5564027435a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5564024eed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5564024eed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5564024ef808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5564024ee944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5564024ee944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5564024ee944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556406dd094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556406dd97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556406dc1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556406debfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0a00de4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55640071043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0x0,0x0,0x28,0xe2,0x80,0xac,0x0,0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0xe2,0x80,0x89,0x0,0x0,0x28,0x30,0x80,0xae,0x0,0x72,0x2b,0x2f,0x76,0x30,0x0,0xf3,0xa0,0x81,0xb8,0x0,0x28,0xd,0x0,0x72,0x64,0x64,0x64,0xb5,0xf3,0xa0,0x81,0x87,0x64,0x64, Step #5: \341\240\216= \177\177\000\000(\342\200\254\000\341\240\216= \177\177\342\200\211\000\000(0\200\256\000r+/v0\000\363\240\201\270\000(\015\000rddd\265\363\240\201\207dd Step #5: artifact_prefix='./'; Test unit written to ./oom-73ab77a262eb8fd6f68c82375f5bee10d82bd86a Step #5: Base64: 4aCOPSB/fwAAKOKArADhoI49IH9/4oCJAAAoMICuAHIrL3YwAPOggbgAKA0AcmRkZLXzoIGHZGQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3391 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1129340850 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557949639d60, 0x55794982271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557949822720,0x55794b6ac2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/73ab77a262eb8fd6f68c82375f5bee10d82bd86a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4171 processed earlier; will process 6805 files now Step #5: ==122152== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55794017c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5579467b7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55794679a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55794679a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557940182652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5579400e342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5579400ddc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557940174595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5579431a38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5579431a38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5579431a38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5579431a38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5579431a38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5579431a38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5579431a38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5579431a38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5579431a38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5579431a38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5579453a845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557942104578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55794210f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557941ebad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557941ebad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557941ebb808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557941eba944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557941eba944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557941eba944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55794679c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5579467a57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55794678d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5579467b7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f01e7949082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5579400dc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2a,0xd,0xa,0x2a,0x32,0x33,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa,0x2a,0xd,0xa, Step #5: *\015\012*23\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012*\015\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-2effb0c36ec0a597beca2e893ad99a1762542e34 Step #5: Base64: Kg0KKjIzDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQoqDQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3392 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1129872050 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559b1a6bdd60, 0x559b1a8a671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559b1a8a6720,0x559b1c7302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2effb0c36ec0a597beca2e893ad99a1762542e34' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4172 processed earlier; will process 6804 files now Step #5: ==122188== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559b112002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559b1783b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559b1781e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559b1781e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559b11206652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559b1116742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559b11161c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559b111f8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559b142278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559b142278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559b142278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559b142278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559b142278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559b142278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559b142278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559b142278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559b142278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559b142278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559b1642c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559b13188578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559b131935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559b12f3ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559b12f3ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559b12f3f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559b12f3e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559b12f3e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559b12f3e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559b1782094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559b178297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559b17811529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559b1783bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa756bff082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559b1116043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2d,0x2d,0xa,0x27,0xc2,0x85,0x7c,0xc2,0x85,0x5c,0xc2,0x85,0x5c,0xc2,0x85,0x5c,0xc2,0x85,0x5c,0xc2,0x85,0x60,0xc2,0x85,0x7b,0xc2,0x85,0x5c,0xc2,0x85,0x5c,0xc2,0x85,0x60,0xc2,0x85,0x7b,0xc2,0x85,0x5c,0xc2,0x85,0x7a,0xc2,0x85,0x5c,0xc2,0x85,0x5c,0xc2,0x85,0xa,0x2d,0x2d,0x2d, Step #5: ---\012'\302\205|\302\205\\\302\205\\\302\205\\\302\205\\\302\205`\302\205{\302\205\\\302\205\\\302\205`\302\205{\302\205\\\302\205z\302\205\\\302\205\\\302\205\012--- Step #5: artifact_prefix='./'; Test unit written to ./oom-47a1459911549436a1eaa8d8a6297f4cc5011b53 Step #5: Base64: LS0tCifChXzChVzChVzChVzChVzChWDChXvChVzChVzChWDChXvChVzChXrChVzChVzChQotLS0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3393 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1130522411 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5568fb98cd60, 0x5568fbb7571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5568fbb75720,0x5568fd9ff2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/47a1459911549436a1eaa8d8a6297f4cc5011b53' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4173 processed earlier; will process 6803 files now Step #5: ==122224== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5568f24cf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5568f8b0a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5568f8aed46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5568f8aed38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5568f24d5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5568f243642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5568f2430c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5568f24c7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5568f54f68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5568f54f68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5568f54f68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5568f54f68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5568f54f68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5568f54f68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5568f54f68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5568f54f68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5568f54f68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5568f54f68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5568f76fb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5568f4457578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5568f44625a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5568f420dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5568f420dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5568f420e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5568f420d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5568f420d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5568f420d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5568f8aef94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5568f8af87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5568f8ae0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5568f8b0afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8581a08082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5568f242f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x7f,0x5d,0x7f,0x0,0x21,0x0,0x32,0x0,0x0,0x0,0x32,0x2e,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x2c,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x0,0x7f,0x7f,0x7f,0x6f,0x0,0x0,0x32,0x33,0x2f,0x10,0x2e,0x2f,0x28,0x20,0x37,0x20,0x3d,0x7f,0x0,0x0,0x0,0x32,0x0,0x24,0x0,0x0,0x0, Step #5: $\177]\177\000!\0002\000\000\0002.23/\020./, 7 =\177\000\000\000\000\177\177\177o\000\00023/\020./( 7 =\177\000\000\0002\000$\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-85ccaac16798fffa0eb2ac731d4e14e023a5c490 Step #5: Base64: JH9dfwAhADIAAAAyLjIzLxAuLywgNyA9fwAAAAB/f39vAAAyMy8QLi8oIDcgPX8AAAAyACQAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3394 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1131061505 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558a1f4c3d60, 0x558a1f6ac71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558a1f6ac720,0x558a215362c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/85ccaac16798fffa0eb2ac731d4e14e023a5c490' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4174 processed earlier; will process 6802 files now Step #5: ==122260== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558a160062d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558a1c641728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558a1c62446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558a1c62438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558a1600c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558a15f6d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558a15f67c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558a15ffe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558a1902d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558a1902d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558a1902d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558a1902d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558a1902d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558a1902d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558a1902d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558a1902d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558a1902d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558a1902d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558a1b23245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558a17f8e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558a17f995a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558a17d44d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558a17d44d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558a17d45808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558a17d44944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558a17d44944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558a17d44944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558a1c62694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558a1c62f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558a1c617529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558a1c641fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f51eec44082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558a15f6643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0xa,0xd8,0x80,0xe0,0xb9,0x82,0x4,0x0,0x0,0xa,0x2f,0x20,0x0,0x2b,0x38,0x76,0x2d,0x0,0x3a,0xd8,0x80,0x4,0x25,0x0,0x5,0x0,0x0,0x38,0xa,0xd8,0x7d,0x1f,0xb9,0x82,0x4,0x0,0x0,0xa,0x2d,0x20,0x2b,0x2f,0x76,0x38,0x0,0x0,0x3a,0xd8,0x80,0x4,0x25,0x0,0x1,0x0,0xa0, Step #5: \000\012\330\200\340\271\202\004\000\000\012/ \000+8v-\000:\330\200\004%\000\005\000\0008\012\330}\037\271\202\004\000\000\012- +/v8\000\000:\330\200\004%\000\001\000\240 Step #5: artifact_prefix='./'; Test unit written to ./oom-be246efc62fc4d9a1c957afc51df77d42f242a00 Step #5: Base64: AArYgOC5ggQAAAovIAArOHYtADrYgAQlAAUAADgK2H0fuYIEAAAKLSArL3Y4AAA62IAEJQABAKA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3395 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1131591637 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b4e7510d60, 0x55b4e76f971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b4e76f9720,0x55b4e95832c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/be246efc62fc4d9a1c957afc51df77d42f242a00' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4175 processed earlier; will process 6801 files now Step #5: ==122296== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b4de0532d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b4e468e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b4e467146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b4e467138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b4de059652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b4ddfba42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b4ddfb4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b4de04b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b4e107a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b4e107a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b4e107a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b4e107a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b4e107a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b4e107a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b4e107a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b4e107a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b4e107a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b4e107a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b4e327f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b4dffdb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b4dffe65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b4dfd91d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b4dfd91d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b4dfd92808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b4dfd91944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b4dfd91944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b4dfd91944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b4e467394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b4e467c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b4e4664529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b4e468efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe871785082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b4ddfb343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe1,0xa0,0x8e,0x3d,0x20,0x7f,0x7f,0x20,0x0,0x28,0xe2,0x80,0xac,0x0,0xe1,0xa8,0x8e,0x3d,0x20,0x7f,0x7f,0xe2,0x80,0x8d,0x0,0x0,0x28,0xe2,0x80,0xae,0x0,0x72,0x2b,0x38,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x28,0xd,0x0,0x72,0x64,0x38,0x0,0x0,0x0,0xa0,0xa,0x3d,0x64,0x64, Step #5: \341\240\216= \177\177 \000(\342\200\254\000\341\250\216= \177\177\342\200\215\000\000(\342\200\256\000r+8\000\000\000\000\000\000\000\000(\015\000rd8\000\000\000\240\012=dd Step #5: artifact_prefix='./'; Test unit written to ./oom-ce0a9a7e66011ee8cd5f5d93dc0a854e454c35c3 Step #5: Base64: 4aCOPSB/fyAAKOKArADhqI49IH9/4oCNAAAo4oCuAHIrOAAAAAAAAAAAKA0AcmQ4AAAAoAo9ZGQ= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3396 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1132124549 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557086a64d60, 0x557086c4d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557086c4d720,0x557088ad72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ce0a9a7e66011ee8cd5f5d93dc0a854e454c35c3' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4176 processed earlier; will process 6800 files now Step #5: ==122332== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55707d5a72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557083be2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557083bc546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557083bc538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55707d5ad652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55707d50e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55707d508c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55707d59f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5570805ce8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5570805ce8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5570805ce8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5570805ce8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5570805ce8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5570805ce8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5570805ce8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5570805ce8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5570805ce8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5570805ce8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5570827d345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55707f52f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55707f53a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55707f2e5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55707f2e5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55707f2e6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55707f2e5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55707f2e5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55707f2e5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557083bc794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557083bd07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557083bb8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557083be2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f0b913d2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55707d50743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0x7b,0x22,0x4d,0x34,0x22,0x3a,0x20,0x34,0x2c,0x22,0x34,0xd6,0x99,0x61,0x22,0x3a,0x2d,0x38,0x2c,0x22,0x35,0x32,0xd6,0x80,0x22,0x3a,0x20,0x34,0x2c,0x22,0x6c,0x3d,0x6d,0x30,0x22,0x3a,0x2d,0x38,0x2c,0x22,0x34,0xd6,0x99,0x61,0x27,0x2d,0x2c,0x2d,0x22,0x3a,0x34,0x35,0x39,0x7d,0xa, Step #5: \012\012{\"M4\": 4,\"4\326\231a\":-8,\"52\326\200\": 4,\"l=m0\":-8,\"4\326\231a'-,-\":459}\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-316f3ff2761c5b85b28dfc21cf25e84f5e3d050b Step #5: Base64: Cgp7Ik00IjogNCwiNNaZYSI6LTgsIjUy1oAiOiA0LCJsPW0wIjotOCwiNNaZYSctLC0iOjQ1OX0K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3397 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1132651885 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x558ef0286d60, 0x558ef046f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x558ef046f720,0x558ef22f92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/316f3ff2761c5b85b28dfc21cf25e84f5e3d050b' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4177 processed earlier; will process 6799 files now Step #5: ==122368== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x558ee6dc92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x558eed404728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x558eed3e746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x558eed3e738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x558ee6dcf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x558ee6d3042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x558ee6d2ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558ee6dc1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x558ee9df08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x558ee9df08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x558ee9df08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x558ee9df08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x558ee9df08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x558ee9df08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x558ee9df08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x558ee9df08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x558ee9df08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x558ee9df08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x558eebff545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558ee8d51578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x558ee8d5c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x558ee8b07d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x558ee8b07d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x558ee8b08808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x558ee8b07944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x558ee8b07944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x558ee8b07944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x558eed3e994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x558eed3f27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x558eed3da529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x558eed404fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2f08570082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x558ee6d2943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21,0x69,0x66,0x31,0x30,0x29,0x69,0x66,0x31,0x30,0x29,0x29,0x29,0x29,0xd7,0xa9,0x1,0x0,0x0,0x15,0x28,0x30,0x29,0x29,0xd7,0xa9,0x28,0x30,0x9,0x37,0x21,0x29,0x29,0x29,0x29,0xd7,0xa9,0x28,0x30,0x9,0x36,0x21,0x29,0x29,0x29,0x29,0xd7,0xa9,0x28,0x30,0x9,0x37,0x21,0x29,0x0,0x8d,0x0, Step #5: !if10)if10))))\327\251\001\000\000\025(0))\327\251(0\0117!))))\327\251(0\0116!))))\327\251(0\0117!)\000\215\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-fb9e62599543f60ae01ab9692eb3715c6f74a9c7 Step #5: Base64: IWlmMTApaWYxMCkpKSnXqQEAABUoMCkp16koMAk3ISkpKSnXqSgwCTYhKSkpKdepKDAJNyEpAI0A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3398 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1133172716 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5610c11b9d60, 0x5610c13a271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5610c13a2720,0x5610c322c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb9e62599543f60ae01ab9692eb3715c6f74a9c7' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4178 processed earlier; will process 6798 files now Step #5: ==122404== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5610b7cfc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5610be337728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5610be31a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5610be31a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5610b7d02652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5610b7c6342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5610b7c5dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5610b7cf4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5610bad238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5610bad238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5610bad238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5610bad238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5610bad238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5610bad238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5610bad238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5610bad238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5610bad238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5610bad238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5610bcf2845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5610b9c84578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5610b9c8f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5610b9a3ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5610b9a3ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5610b9a3b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5610b9a3a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5610b9a3a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5610b9a3a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5610be31c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5610be3257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5610be30d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5610be337fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f2232200082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5610b7c5c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x7f,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x27,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xa6,0x5b,0xcd,0x9e,0xef,0xf7,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004D3IM3\004\342\200\256\004\000\000\000\000\000\000\000\177\000\000\000\000\000\000\000'\000\000\000\000\000\000\000\000\000\000\000\246[\315\236\357\367\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-7dceb3e6f486922ffd30e0bc85ec06ec8994f8be Step #5: Base64: SUQzSU0zBOKArgREM0lNMwTigK4EAAAAAAAAAH8AAAAAAAAAJwAAAAAAAAAAAAAAplvNnu/3uTIi Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3399 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1133698299 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5557ab626d60, 0x5557ab80f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5557ab80f720,0x5557ad6992c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7dceb3e6f486922ffd30e0bc85ec06ec8994f8be' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4179 processed earlier; will process 6797 files now Step #5: #1 pulse cov: 3870 ft: 3871 exec/s: 0 rss: 175Mb Step #5: ==122440== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5557a21692d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5557a87a4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5557a878746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5557a878738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5557a216f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5557a20d042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5557a20cac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5557a2161595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5557a51908c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5557a51908c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5557a51908c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5557a51908c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5557a51908c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5557a51908c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5557a51908c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5557a51908c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5557a51908c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5557a51908c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5557a739545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5557a40f1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5557a40fc5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5557a3ea7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5557a3ea7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5557a3ea8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5557a3ea7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5557a3ea7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5557a3ea7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5557a878994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5557a87927b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5557a877a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5557a87a4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f245ebc8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5557a20c943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x65,0x20,0x7b,0xa,0x20,0x20,0x6e,0x61,0x6d,0x65,0x3a,0x20,0x22,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x6c,0x22,0xa,0x7d,0xa, Step #5: e {\012 name: \"llllllllllllllllllllllllllllllllllllllll\"\012}\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-a18b9732da8974ab28b0bb7877c4cf2c48c7bac2 Step #5: Base64: ZSB7CiAgbmFtZTogImxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGwiCn0K Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3400 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1134266909 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f2c1c9fd60, 0x55f2c1e8871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f2c1e88720,0x55f2c3d122c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a18b9732da8974ab28b0bb7877c4cf2c48c7bac2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4181 processed earlier; will process 6795 files now Step #5: ==122476== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f2b87e22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f2bee1d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f2bee0046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f2bee0038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f2b87e8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f2b874942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f2b8743c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f2b87da595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f2bb8098c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f2bb8098c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f2bb8098c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f2bb8098c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f2bb8098c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f2bb8098c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f2bb8098c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f2bb8098c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f2bb8098c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f2bb8098c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f2bda0e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f2ba76a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f2ba7755a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f2ba520d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f2ba520d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f2ba521808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f2ba520944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f2ba520944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f2ba520944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f2bee0294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f2bee0b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f2bedf3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f2bee1dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fad0439b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f2b874243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21,0x0,0x2d,0x2d,0x32,0x2d,0x42,0x45,0x47,0x49,0x4e,0x20,0x4e,0x21,0x15,0x0,0x2d,0x2d,0x32,0x2d,0x42,0x45,0x47,0x49,0x4e,0x15,0x20,0x4e,0x15,0x1b,0x24,0x2d,0x44,0x2d,0x2b,0xa,0x5b,0x2d,0x2d,0xa,0x29,0xa,0x15,0x20,0x24,0x2d,0xa,0x2b,0x2d,0x2d,0x5b,0x44,0x2d,0xa,0x29,0xa,0x3f, Step #5: !\000--2-BEGIN N!\025\000--2-BEGIN\025 N\025\033$-D-+\012[--\012)\012\025 $-\012+--[D-\012)\012? Step #5: artifact_prefix='./'; Test unit written to ./oom-80148af1f92481580e159fbecb41e70f85722f41 Step #5: Base64: IQAtLTItQkVHSU4gTiEVAC0tMi1CRUdJThUgThUbJC1ELSsKWy0tCikKFSAkLQorLS1bRC0KKQo/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3401 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1134792073 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563e6fb1bd60, 0x563e6fd0471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563e6fd04720,0x563e71b8e2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/80148af1f92481580e159fbecb41e70f85722f41' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4182 processed earlier; will process 6794 files now Step #5: ==122512== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563e6665e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563e6cc99728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563e6cc7c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563e6cc7c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563e66664652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563e665c542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563e665bfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563e66656595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563e696858c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563e696858c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563e696858c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563e696858c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563e696858c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563e696858c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563e696858c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563e696858c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563e696858c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563e696858c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563e6b88a45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563e685e6578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563e685f15a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563e6839cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563e6839cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563e6839d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563e6839c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563e6839c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563e6839c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563e6cc7e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563e6cc877b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563e6cc6f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563e6cc99fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fabe1e10082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563e665be43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x45,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x45,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3c,0x3f,0xcd,0xb6,0x3f,0x3e,0x3c,0x2f,0x45,0x3e, Step #5: E> Step #5: artifact_prefix='./'; Test unit written to ./oom-36faf098a25c37cb646d67cf175fef87e8ef2424 Step #5: Base64: PEU+PD/Ntj8+PD/Ntj8+RTw/zbY/Pjw/zbY/Pj48P822Pz48P822Pz48P822Pz48P822Pz48L0U+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3402 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1135318667 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56365285cd60, 0x563652a4571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563652a45720,0x5636548cf2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/36faf098a25c37cb646d67cf175fef87e8ef2424' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4183 processed earlier; will process 6793 files now Step #5: #1 pulse cov: 11897 ft: 11898 exec/s: 0 rss: 193Mb Step #5: #2 pulse cov: 12563 ft: 13434 exec/s: 0 rss: 195Mb Step #5: ==122548== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56364939f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56364f9da728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56364f9bd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56364f9bd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5636493a5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56364930642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563649300c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563649397595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56364c3c68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56364c3c68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56364c3c68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56364c3c68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56364c3c68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56364c3c68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56364c3c68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56364c3c68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56364c3c68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56364c3c68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56364e5cb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56364b327578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56364b3325a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56364b0ddd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56364b0ddd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56364b0de808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56364b0dd944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56364b0dd944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56364b0dd944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56364f9bf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56364f9c87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56364f9b0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56364f9dafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff7cb08d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5636492ff43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x20,0x0,0x2d,0x20,0x20,0x0,0x0,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x3e,0x24,0x40,0x3e,0x0,0x0,0x26,0x26,0x26,0x26,0x24,0x30,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x26,0x62,0x6f,0x6c,0x64,0x26,0x3e,0x24,0x30,0x26,0x26,0x62,0x6f,0x6c,0x64,0x26,0x3e,0x24,0x30, Step #5: - \000- \000\000&&&&&&&&>$@>\000\000&&&&$0&&&&&&&&&&bold&>$0&&bold&>$0 Step #5: artifact_prefix='./'; Test unit written to ./oom-f0ece7f3dd344b2739524760ee104c6ec6cdf1be Step #5: Base64: LSAgAC0gIAAAJiYmJiYmJiY+JEA+AAAmJiYmJDAmJiYmJiYmJiYmYm9sZCY+JDAmJmJvbGQmPiQw Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3403 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1135973327 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5571ea18ad60, 0x5571ea37371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5571ea373720,0x5571ec1fd2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f0ece7f3dd344b2739524760ee104c6ec6cdf1be' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4186 processed earlier; will process 6790 files now Step #5: ==122584== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5571e0ccd2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5571e7308728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5571e72eb46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5571e72eb38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5571e0cd3652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5571e0c3442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5571e0c2ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5571e0cc5595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5571e3cf48c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5571e3cf48c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5571e3cf48c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5571e3cf48c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5571e3cf48c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5571e3cf48c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5571e3cf48c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5571e3cf48c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5571e3cf48c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5571e3cf48c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5571e5ef945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5571e2c55578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5571e2c605a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5571e2a0bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5571e2a0bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5571e2a0c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5571e2a0b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5571e2a0b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5571e2a0b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5571e72ed94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5571e72f67b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5571e72de529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5571e7308fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff739034082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5571e0c2d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x70,0x6e,0x72,0x79,0x73,0x6c,0x61,0x74,0x65,0x3e,0x3c,0x74,0x72,0x61,0x6e,0x73,0x6c,0x61,0x74,0x72,0x66,0x6e,0x73,0x6c,0x61,0x74,0x65,0x3e,0x3c,0x74,0x72,0x61,0x6e,0x73,0x6c,0x72,0x79,0x3e,0x3c,0x61,0x74,0x65,0x3e,0x3c,0x74,0x72,0x61,0x6e,0x73,0x6c,0x61,0x74,0x65,0x3e,0x4e,0x65, Step #5: Ne Step #5: artifact_prefix='./'; Test unit written to ./oom-fb6f6acbbff744ea2fc026ca094e6b7086626e08 Step #5: Base64: PHBucnlzbGF0ZT48dHJhbnNsYXRyZm5zbGF0ZT48dHJhbnNscnk+PGF0ZT48dHJhbnNsYXRlPk5l Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3404 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1136494128 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560fbede2d60, 0x560fbefcb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560fbefcb720,0x560fc0e552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fb6f6acbbff744ea2fc026ca094e6b7086626e08' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4187 processed earlier; will process 6789 files now Step #5: ==122620== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560fb59252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560fbbf60728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560fbbf4346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560fbbf4338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560fb592b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560fb588c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560fb5886c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560fb591d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560fb894c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560fb894c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560fb894c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560fb894c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560fb894c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560fb894c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560fb894c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560fb894c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560fb894c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560fb894c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560fbab5145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560fb78ad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560fb78b85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560fb7663d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560fb7663d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560fb7664808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560fb7663944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560fb7663944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560fb7663944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560fbbf4594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560fbbf4e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560fbbf36529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560fbbf60fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f355ab97082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560fb588543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x6f,0x6e,0x69,0x6f,0x6e,0x2d,0x6b,0x65,0x79,0xa,0x6e,0x74,0x46,0x54,0x79,0x77,0x42,0x4b,0x2f,0x37,0x30,0x58,0x69,0x44,0x52,0x48,0x71,0x72,0x74,0x61,0x76,0x45,0x64,0x6d,0x65,0x79,0x73,0x63,0x65,0x6e,0x74,0x20,0x4e,0x30,0x65,0x46,0x76,0x52,0x6c,0xa,0x61,0x20,0x2d,0x31,0x32,0x38,0x2e, Step #5: onion-key\012ntFTywBK/70XiDRHqrtavEdmeyscent N0eFvRl\012a -128. Step #5: artifact_prefix='./'; Test unit written to ./oom-0419ecdbefbb86ffd2ec290e5b1e5f2c655b27b9 Step #5: Base64: b25pb24ta2V5Cm50RlR5d0JLLzcwWGlEUkhxcnRhdkVkbWV5c2NlbnQgTjBlRnZSbAphIC0xMjgu Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3405 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1137024174 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5613dfdbdd60, 0x5613dffa671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5613dffa6720,0x5613e1e302c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0419ecdbefbb86ffd2ec290e5b1e5f2c655b27b9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4188 processed earlier; will process 6788 files now Step #5: #1 pulse cov: 13403 ft: 13404 exec/s: 0 rss: 194Mb Step #5: #2 pulse cov: 13740 ft: 14681 exec/s: 0 rss: 196Mb Step #5: ==122656== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5613d69002d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5613dcf3b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5613dcf1e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5613dcf1e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5613d6906652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5613d686742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5613d6861c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5613d68f8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5613d99278c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5613d99278c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5613d99278c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5613d99278c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5613d99278c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5613d99278c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5613d99278c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5613d99278c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5613d99278c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5613d99278c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5613dbb2c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5613d8888578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5613d88935a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5613d863ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5613d863ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5613d863f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5613d863e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5613d863e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5613d863e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5613dcf2094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5613dcf297b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5613dcf11529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5613dcf3bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3c33775082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5613d686043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0xaf,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0xaf,0xcd,0x8f,0xcd,0x8f,0xcd,0xaf,0xcd,0x8f,0xcd,0x8f,0xcc,0x9f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f, Step #5: 2\315\217\315\217\315\217\315\217\315\217\315\217\315\257\315\217\315\217\315\217\315\257\315\217\315\217\315\257\315\217\315\217\314\237\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-7d4e26faef324b42dc88d0432553487d2475d7bf Step #5: Base64: Ms2PzY/Nj82PzY/Nj82vzY/Nj82Pza/Nj82Pza/Nj82PzJ/Nj82PzY/Nj82PzY/Nj82PzY/Nj82P Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3406 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1137666445 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55802dc59d60, 0x55802de4271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55802de42720,0x55802fccc2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7d4e26faef324b42dc88d0432553487d2475d7bf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4191 processed earlier; will process 6785 files now Step #5: ==122692== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55802479c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55802add7728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55802adba46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55802adba38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5580247a2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55802470342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5580246fdc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x558024794595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5580277c38c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5580277c38c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5580277c38c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5580277c38c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5580277c38c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5580277c38c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5580277c38c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5580277c38c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5580277c38c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5580277c38c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5580299c845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x558026724578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55802672f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5580264dad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5580264dad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5580264db808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5580264da944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5580264da944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5580264da944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55802adbc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55802adc57b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55802adad529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55802add7fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7f9d6c9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5580246fc43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x58,0xc,0x44,0x45,0x46,0x41,0x55,0x4c,0x54,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x57,0x49,0x54,0x48,0x28,0x28,0x28,0x28,0x28,0x28,0x57,0x49,0x54,0x48,0x28,0x57,0x49,0x2a,0x43,0x4f,0x4c,0x55,0x2e,0x43,0x4f,0x4c,0x55,0x2e,0x43,0x4f,0x4c,0x55,0x4d,0x28,0x29,0xcd,0x8f,0x0,0xa, Step #5: \012X\014DEFAULT((((((((WITH((((((WITH(WI*COLU.COLU.COLUM()\315\217\000\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-92fdd3bcd261fb606b888c95e4164b6e9fbf16d8 Step #5: Base64: ClgMREVGQVVMVCgoKCgoKCgoV0lUSCgoKCgoKFdJVEgoV0kqQ09MVS5DT0xVLkNPTFVNKCnNjwAK Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3407 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1138192097 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5575811a4d60, 0x55758138d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55758138d720,0x5575832172c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/92fdd3bcd261fb606b888c95e4164b6e9fbf16d8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4192 processed earlier; will process 6784 files now Step #5: ==122728== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557577ce72d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55757e322728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55757e30546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55757e30538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557577ced652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557577c4e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557577c48c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557577cdf595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55757ad0e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55757ad0e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55757ad0e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55757ad0e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55757ad0e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55757ad0e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55757ad0e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55757ad0e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55757ad0e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55757ad0e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55757cf1345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557579c6f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557579c7a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557579a25d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557579a25d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557579a26808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557579a25944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557579a25944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557579a25944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55757e30794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55757e3107b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55757e2f8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55757e322fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa7e03c8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557577c4743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x1, Step #5: FUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAG\001 Step #5: artifact_prefix='./'; Test unit written to ./oom-034fa94d0df1336e4591d0699d6a7a9b1974b503 Step #5: Base64: RlVaWi1UQUdGVVpaLVRBR0ZVWlotVEFHRlVaWi1UQUdGVVpaLVRBR0ZVWlotVEFHRlVaWi1UQUcB Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3408 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1138719667 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564737299d60, 0x56473748271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564737482720,0x56473930c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/034fa94d0df1336e4591d0699d6a7a9b1974b503' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4193 processed earlier; will process 6783 files now Step #5: ==122764== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56472dddc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564734417728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5647343fa46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5647343fa38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56472dde2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56472dd4342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56472dd3dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56472ddd4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564730e038c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564730e038c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564730e038c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564730e038c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564730e038c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564730e038c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564730e038c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564730e038c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564730e038c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564730e038c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56473300845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56472fd64578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56472fd6f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56472fb1ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56472fb1ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56472fb1b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56472fb1a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56472fb1a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56472fb1a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5647343fc94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5647344057b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5647343ed529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564734417fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc2e51f6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56472dd3c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x7e,0x21,0x7d,0x3c,0x74,0x65,0x78,0x74,0x3e,0x30,0x21,0xe0,0xb8,0xb1,0x55,0x2d,0x5b,0x21,0x30,0x65,0x7f,0x7f,0x7f,0x65,0x78,0x74,0x3e,0x30,0x21,0xe0,0xbd,0xb1,0x55,0x2d,0x7f,0x30,0x7f,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x42,0x4f,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: ~!}0!\340\270\261U-[!0e\177\177\177ext>0!\340\275\261U-\1770\177BO Step #5: artifact_prefix='./'; Test unit written to ./oom-b61119a1cae14703aeff82bb5f13c1ac8ec76cca Step #5: Base64: PHN2Zz5+IX08dGV4dD4wIeC4sVUtWyEwZX9/f2V4dD4wIeC9sVUtfzB/PC90ZXh0PkJPPC9zdmc+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3409 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1139254249 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563994b30d60, 0x563994d1971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563994d19720,0x563996ba32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b61119a1cae14703aeff82bb5f13c1ac8ec76cca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4194 processed earlier; will process 6782 files now Step #5: #1 pulse cov: 3533 ft: 3534 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 3619 ft: 4024 exec/s: 0 rss: 173Mb Step #5: ==122800== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56398b6732d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563991cae728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563991c9146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563991c9138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56398b679652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56398b5da42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56398b5d4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56398b66b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56398e69a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56398e69a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56398e69a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56398e69a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56398e69a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56398e69a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56398e69a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56398e69a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56398e69a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56398e69a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56399089f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56398d5fb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56398d6065a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56398d3b1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56398d3b1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56398d3b2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56398d3b1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56398d3b1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56398d3b1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563991c9394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563991c9c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563991c84529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563991caefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f64f3905082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56398b5d343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x48,0x3a,0x64,0x2c,0x6d,0x61,0x78,0x5f,0x69,0x64,0x3a,0x64,0x2c,0x48,0x3a,0x64,0x2c,0x64,0x24,0x69,0x6e,0x6e,0x5f,0x35,0x5f,0x31,0x3a,0x64,0x2c,0x48,0x3a,0x64,0x2c,0x68,0x6f,0x6e,0x5f,0x73,0x79,0x6d,0x62,0x6f,0x3a,0x64,0x2c,0x6c,0x5f,0x74,0x48,0x3a,0x64,0x2c, Step #5: $3::{H:d,max_id:d,H:d,d$inn_5_1:d,H:d,hon_symbo:d,l_tH:d, Step #5: artifact_prefix='./'; Test unit written to ./oom-96ad07863b59048f85eb36f8e830b318f4a8b7e4 Step #5: Base64: JDM6OntIOmQsbWF4X2lkOmQsSDpkLGQkaW5uXzVfMTpkLEg6ZCxob25fc3ltYm86ZCxsX3RIOmQs Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3410 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1139887144 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564fc29cfd60, 0x564fc2bb871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564fc2bb8720,0x564fc4a422c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/96ad07863b59048f85eb36f8e830b318f4a8b7e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4198 processed earlier; will process 6778 files now Step #5: #1 pulse cov: 3858 ft: 3859 exec/s: 0 rss: 174Mb Step #5: ==122836== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564fb95122d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564fbfb4d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564fbfb3046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564fbfb3038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564fb9518652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564fb947942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564fb9473c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564fb950a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564fbc5398c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564fbc5398c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564fbc5398c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564fbc5398c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564fbc5398c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564fbc5398c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564fbc5398c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564fbc5398c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564fbc5398c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564fbc5398c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564fbe73e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564fbb49a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564fbb4a55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564fbb250d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564fbb250d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564fbb251808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564fbb250944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564fbb250944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564fbb250944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564fbfb3294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564fbfb3b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564fbfb23529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564fbfb4dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5b35939082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564fb947243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x20,0x24,0x2b,0x3d,0xd,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x4,0xc,0xc,0x3c,0x3c,0x3c,0x3c,0x3c,0x3c,0x3c,0x3c,0x3c,0x3c,0x3c,0x24,0x3c,0x3c,0xc,0xe2,0xc,0xf3,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x2c,0x24,0x66,0x3a,0x1a, Step #5: $+=\015,,,,,,,,,,,,,,,,,,\004\014\014<<<<<<<<<<<$<<\014\342\014\363,,,,,,,,,,$f:\032 Step #5: artifact_prefix='./'; Test unit written to ./oom-cb45dab239a243c886009b9562c248bc80062430 Step #5: Base64: ICQrPQ0sLCwsLCwsLCwsLCwsLCwsLCwEDAw8PDw8PDw8PDw8PCQ8PAziDPMsLCwsLCwsLCwsJGY6Gg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3411 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1140448142 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559a4c780d60, 0x559a4c96971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559a4c969720,0x559a4e7f32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cb45dab239a243c886009b9562c248bc80062430' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4200 processed earlier; will process 6776 files now Step #5: #1 pulse cov: 11716 ft: 11717 exec/s: 0 rss: 190Mb Step #5: ==122872== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559a432c32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559a498fe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559a498e146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559a498e138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559a432c9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559a4322a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559a43224c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559a432bb595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559a462ea8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559a462ea8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559a462ea8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559a462ea8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559a462ea8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559a462ea8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559a462ea8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559a462ea8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559a462ea8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559a462ea8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559a484ef45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559a4524b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559a452565a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559a45001d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559a45001d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559a45002808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559a45001944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559a45001944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559a45001944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559a498e394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559a498ec7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559a498d4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559a498fefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f03de6b4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559a4322343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x56,0x69,0x73,0x69,0x6f,0x44,0x6f,0x63,0x75,0x6d,0x65,0x6e,0x74,0x3e,0x3c,0x47,0x65,0x6f,0x6d,0x3e,0x3c,0x4e,0x55,0x52,0x42,0x53,0x54,0x6f,0x3e,0x69,0x60,0x3c,0x45,0x3e,0x4e,0x55,0x52,0x42,0x53,0x28,0x34,0x65,0x6f,0x6d,0x60,0x3c,0x45,0x3e,0x4e,0x55,0x52,0x42,0x53,0x36,0x36,0x2d,0x0, Step #5: i`NURBS(4eom`NURBS66-\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-030cc29125a24d8ad9bc102599d55f48c910aa77 Step #5: Base64: PFZpc2lvRG9jdW1lbnQ+PEdlb20+PE5VUkJTVG8+aWA8RT5OVVJCUyg0ZW9tYDxFPk5VUkJTNjYtAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3412 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1141176348 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5631cbdb9d60, 0x5631cbfa271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5631cbfa2720,0x5631cde2c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/030cc29125a24d8ad9bc102599d55f48c910aa77' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4202 processed earlier; will process 6774 files now Step #5: #1 pulse cov: 3927 ft: 3928 exec/s: 0 rss: 175Mb Step #5: ==122908== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5631c28fc2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5631c8f37728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5631c8f1a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5631c8f1a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5631c2902652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5631c286342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5631c285dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5631c28f4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5631c59238c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5631c59238c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5631c59238c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5631c59238c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5631c59238c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5631c59238c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5631c59238c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5631c59238c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5631c59238c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5631c59238c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5631c7b2845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5631c4884578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5631c488f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5631c463ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5631c463ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5631c463b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5631c463a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5631c463a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5631c463a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5631c8f1c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5631c8f257b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5631c8f0d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5631c8f37fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f73ea1a6082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5631c285c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2,0xd,0xd,0xd,0x32,0x0,0xd6,0x91,0x91,0x45,0xff,0xff,0xff,0xa,0x22,0x6d,0x80,0xdf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0xcf,0x1,0x0,0x0,0x30,0xcf,0xa9,0x2b,0x2f,0x76,0xf5,0xf4,0xf4,0xcd,0xc6,0xff,0xb2,0xc6,0x0,0x31,0x0,0x30, Step #5: \002\015\015\0152\000\326\221\221E\377\377\377\012\"m\200\337\317\317\317\317\317\317\317\317\317\317\317\317\317\317\317\317\317\317\317\001\000\0000\317\251+/v\365\364\364\315\306\377\262\306\0001\0000 Step #5: artifact_prefix='./'; Test unit written to ./oom-3360ea0297cb0909665d5f903e3b2012dad66aa1 Step #5: Base64: Ag0NDTIA1pGRRf///woibYDfz8/Pz8/Pz8/Pz8/Pz8/Pz8/PzwEAADDPqSsvdvX09M3G/7LGADEAMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3413 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1141752818 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dbc6366d60, 0x55dbc654f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dbc654f720,0x55dbc83d92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3360ea0297cb0909665d5f903e3b2012dad66aa1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4204 processed earlier; will process 6772 files now Step #5: ==122944== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dbbcea92d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dbc34e4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dbc34c746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dbc34c738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dbbceaf652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dbbce1042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dbbce0ac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dbbcea1595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dbbfed08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dbbfed08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dbbfed08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dbbfed08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dbbfed08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dbbfed08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dbbfed08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dbbfed08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dbbfed08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dbbfed08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dbc20d545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dbbee31578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dbbee3c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dbbebe7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dbbebe7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dbbebe8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dbbebe7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dbbebe7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dbbebe7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dbc34c994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dbc34d27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dbc34ba529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dbc34e4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8778c25082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dbbce0943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x58,0xc,0x44,0x45,0x46,0x41,0x55,0x4c,0x54,0x28,0x28,0x55,0x4c,0x54,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x57,0x49,0x54,0x48,0x28,0x43,0x4f,0x4c,0x55,0x4d,0x4e,0x53,0x28,0x27,0x77,0x7d,0x45,0x2e,0x7b,0x27,0x29,0x3d,0xa,0x9e, Step #5: \012X\014DEFAULT((ULT(((((((((((((((((((WITH(COLUMNS('w}E.{')=\012\236 Step #5: artifact_prefix='./'; Test unit written to ./oom-3b08e5079107f25fd74bef845ca1434416b91c08 Step #5: Base64: ClgMREVGQVVMVCgoVUxUKCgoKCgoKCgoKCgoKCgoKCgoKFdJVEgoQ09MVU1OUygnd31FLnsnKT0Kng== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3414 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1142288592 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55718efe2d60, 0x55718f1cb71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55718f1cb720,0x5571910552c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3b08e5079107f25fd74bef845ca1434416b91c08' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4205 processed earlier; will process 6771 files now Step #5: ==122980== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557185b252d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55718c160728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55718c14346d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55718c14338b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557185b2b652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557185a8c42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557185a86c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557185b1d595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557188b4c8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557188b4c8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557188b4c8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557188b4c8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557188b4c8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557188b4c8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557188b4c8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557188b4c8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557188b4c8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557188b4c8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55718ad5145a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557187aad578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557187ab85a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557187863d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557187863d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557187864808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557187863944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557187863944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557187863944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55718c14594d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55718c14e7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55718c136529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55718c160fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa7f411b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557185a8543d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x0,0x21,0x0,0x44,0x0,0x4f,0x0,0x43,0x0,0x54,0x0,0x59,0x0,0x50,0x0,0x45,0x0,0x20,0x0,0x63,0x0,0x20,0x0,0x50,0x0,0x55,0x0,0x42,0x0,0x4c,0x0,0x49,0x0,0x43,0x0,0x20,0x0,0x27,0x0,0x20,0x0,0x50,0x0,0x55,0x0,0x4c,0x0,0x49,0x0,0x6d,0x0,0x6c,0x0,0x6e,0x0,0x73,0x0, Step #5: <\000!\000D\000O\000C\000T\000Y\000P\000E\000 \000c\000 \000P\000U\000B\000L\000I\000C\000 \000'\000 \000P\000U\000L\000I\000m\000l\000n\000s\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-a96ff4edbd79dc6ce1633f835e90368b25dbbbbc Step #5: Base64: PAAhAEQATwBDAFQAWQBQAEUAIABjACAAUABVAEIATABJAEMAIAAnACAAUABVAEwASQBtAGwAbgBzAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3415 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1142824648 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55f74fb0cd60, 0x55f74fcf571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55f74fcf5720,0x55f751b7f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a96ff4edbd79dc6ce1633f835e90368b25dbbbbc' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4206 processed earlier; will process 6770 files now Step #5: ==123016== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55f74664f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55f74cc8a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55f74cc6d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55f74cc6d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55f746655652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55f7465b642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55f7465b0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55f746647595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55f7496768c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55f7496768c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55f7496768c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55f7496768c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55f7496768c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55f7496768c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55f7496768c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55f7496768c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55f7496768c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55f7496768c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55f74b87b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55f7485d7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55f7485e25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55f74838dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55f74838dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55f74838e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55f74838d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55f74838d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55f74838d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55f74cc6f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55f74cc787b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55f74cc60529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55f74cc8afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb2bf8c082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55f7465af43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x44,0x4f,0x43,0x54,0x59,0x50,0x45,0xd,0x6d,0x5b,0x3c,0x21,0x45,0x4c,0x45,0x4d,0x45,0x4e,0x54,0xd,0x45,0xd,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x28,0x78,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29,0x29, Step #5: Step #5: Step #5: #0 0x56532caaf2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5653330ea728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5653330cd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5653330cd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56532cab5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56532ca1642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56532ca10c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56532caa7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56532fad68c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56532fad68c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56532fad68c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56532fad68c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56532fad68c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56532fad68c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56532fad68c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56532fad68c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56532fad68c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56532fad68c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x565331cdb45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56532ea37578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56532ea425a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56532e7edd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56532e7edd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56532e7ee808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56532e7ed944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56532e7ed944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56532e7ed944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5653330cf94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5653330d87b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5653330c0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5653330eafa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbadae60082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56532ca0f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x4c,0x5c,0x4c,0x4c,0x5c,0x77,0xb1,0xb1,0xb1,0x2d,0x2d,0x31,0x1d,0x33,0x36,0x38,0x35,0x34,0x38,0x34,0x31,0x33,0x34,0x36,0x2a,0x42,0xbf,0xbf,0x65,0x6e,0xa,0xa,0xa,0x61,0x4a, Step #5: LLLLLLLLLLLLLLLLLLLLLLLL\\LL\\w\261\261\261--1\03536854841346*B\277\277en\012\012\012aJ Step #5: artifact_prefix='./'; Test unit written to ./oom-7f1847c231aa885b8adfe1365e76b12a2ba44892 Step #5: Base64: TExMTExMTExMTExMTExMTExMTExMTExMXExMXHexsbEtLTEdMzY4NTQ4NDEzNDYqQr+/ZW4KCgphSg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3417 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1143870014 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563e86c00d60, 0x563e86de971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563e86de9720,0x563e88c732c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f1847c231aa885b8adfe1365e76b12a2ba44892' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4208 processed earlier; will process 6768 files now Step #5: #1 pulse cov: 3737 ft: 3738 exec/s: 0 rss: 173Mb Step #5: #2 pulse cov: 11905 ft: 12861 exec/s: 0 rss: 194Mb Step #5: ==123088== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563e7d7432d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563e83d7e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563e83d6146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563e83d6138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563e7d749652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563e7d6aa42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563e7d6a4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563e7d73b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563e8076a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563e8076a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563e8076a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563e8076a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563e8076a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563e8076a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563e8076a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563e8076a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563e8076a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563e8076a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563e8296f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563e7f6cb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563e7f6d65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563e7f481d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563e7f481d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563e7f482808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563e7f481944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563e7f481944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563e7f481944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563e83d6394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563e83d6c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563e83d54529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563e83d7efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5960e8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563e7d6a343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x32,0xa,0x32,0xb,0x78,0x2e,0xa,0xa,0x78,0x6e,0x2e,0xa,0xa,0x7e,0x78,0x6e,0x62,0x60,0x66,0xa,0xd,0x60,0x66,0x49,0x44,0x2d,0x2d,0x42,0x49,0x45,0x56,0x56,0x4b,0x4d,0x34,0x2c,0xb,0x78,0x2e,0xa,0xa,0x78,0x6e,0x2e,0xa,0xa,0x7e,0x78,0x6e,0x62,0x60,0x66,0xa,0xd,0x60,0x66,0x49,0x44, Step #5: 2\0122\013x.\012\012xn.\012\012~xnb`f\012\015`fID--BIEVVKM4,\013x.\012\012xn.\012\012~xnb`f\012\015`fID Step #5: artifact_prefix='./'; Test unit written to ./oom-7757700bdc0e023b1837bc435b62566b31ec46a4 Step #5: Base64: MgoyC3guCgp4bi4KCn54bmJgZgoNYGZJRC0tQklFVlZLTTQsC3guCgp4bi4KCn54bmJgZgoNYGZJRA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3418 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1144624023 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55d390183d60, 0x55d39036c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55d39036c720,0x55d3921f62c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7757700bdc0e023b1837bc435b62566b31ec46a4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4211 processed earlier; will process 6765 files now Step #5: #1 pulse cov: 3948 ft: 3949 exec/s: 0 rss: 172Mb Step #5: ==123124== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55d386cc62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55d38d301728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55d38d2e446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55d38d2e438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55d386ccc652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55d386c2d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55d386c27c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55d386cbe595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55d389ced8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55d389ced8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55d389ced8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55d389ced8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55d389ced8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55d389ced8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55d389ced8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55d389ced8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55d389ced8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55d389ced8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55d38bef245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55d388c4e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55d388c595a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55d388a04d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55d388a04d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55d388a05808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55d388a04944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55d388a04944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55d388a04944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55d38d2e694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55d38d2ef7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55d38d2d7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55d38d301fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa04352e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55d386c2643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x80,0x82,0xe3,0x80,0x86,0xe3,0x80,0x82,0xe3,0x80,0x81,0xe3,0x3c,0x68,0x65,0x61,0x64,0x3e,0x80,0x82,0xe3,0x80,0x81,0x81,0xe3,0x80,0x82,0xe3,0x80,0x86,0xe3,0x80,0x82,0xe3,0x80,0x81,0xe3,0x80,0x83,0xe3,0x80,0xe3,0x80,0x82,0xe3,0x80,0x86,0xe3,0x83,0xe3,0x80,0x82,0xe3,0x80,0x82,0xe3,0xe, Step #5: \343\200\202\343\200\206\343\200\202\343\200\201\343\200\202\343\200\201\201\343\200\202\343\200\206\343\200\202\343\200\201\343\200\203\343\200\343\200\202\343\200\206\343\203\343\200\202\343\200\202\343\016 Step #5: artifact_prefix='./'; Test unit written to ./oom-941f1791f443a93b6214a08b7978172c458c4258 Step #5: Base64: 44CC44CG44CC44CB4zxoZWFkPoCC44CBgeOAguOAhuOAguOAgeOAg+OA44CC44CG44PjgILjgILjDg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3419 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1145186847 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5634cb214d60, 0x5634cb3fd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5634cb3fd720,0x5634cd2872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/941f1791f443a93b6214a08b7978172c458c4258' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4213 processed earlier; will process 6763 files now Step #5: ==123160== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634c1d572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5634c8392728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5634c837546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5634c837538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5634c1d5d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5634c1cbe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5634c1cb8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5634c1d4f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634c4d7e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634c4d7e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634c4d7e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634c4d7e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634c4d7e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634c4d7e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634c4d7e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634c4d7e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634c4d7e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634c4d7e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5634c6f8345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5634c3cdf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634c3cea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5634c3a95d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5634c3a95d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5634c3a96808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5634c3a95944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5634c3a95944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5634c3a95944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5634c837794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5634c83807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5634c8368529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5634c8392fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fecec8a3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5634c1cb743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x68,0x74,0x6d,0x6c,0x3e,0xd,0xa,0x3c,0x67,0x72,0x6f,0x75,0x70,0x3e,0x26,0x23,0x33,0x32,0x3b,0x26,0x23,0x39,0x32,0x32,0x33,0x33,0x37,0x32,0x30,0x33,0x36,0x38,0x35,0x34,0x35,0x36,0x30,0x39,0x31,0x39,0x3b,0xca,0xfe,0xba,0x0,0x0,0x0,0x0,0x0,0x31,0x36,0x3b,0x26,0x23,0x31,0xdf,0x30, Step #5: \015\012 �\312\376\272\000\000\000\000\00016;\3370 Step #5: artifact_prefix='./'; Test unit written to ./oom-6304fa9dd31e576b76ff99e4a153e1cc7a68c262 Step #5: Base64: PGh0bWw+DQo8Z3JvdXA+JiMzMjsmIzkyMjMzNzIwMzY4NTQ1NjA5MTk7yv66AAAAAAAxNjsmIzHfMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3420 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1145713390 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x555f37f87d60, 0x555f3817071a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x555f38170720,0x555f39ffa2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/6304fa9dd31e576b76ff99e4a153e1cc7a68c262' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4214 processed earlier; will process 6762 files now Step #5: #1 pulse cov: 3543 ft: 3544 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 3717 ft: 3995 exec/s: 0 rss: 175Mb Step #5: ==123196== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x555f2eaca2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x555f35105728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x555f350e846d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x555f350e838b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x555f2ead0652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x555f2ea3142b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x555f2ea2bc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x555f2eac2595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x555f31af18c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x555f31af18c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x555f31af18c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x555f31af18c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x555f31af18c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x555f31af18c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x555f31af18c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x555f31af18c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x555f31af18c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x555f31af18c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x555f33cf645a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x555f30a52578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x555f30a5d5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x555f30808d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x555f30808d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x555f30809808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x555f30808944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x555f30808944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x555f30808944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x555f350ea94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x555f350f37b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x555f350db529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x555f35105fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9fcad7f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x555f2ea2a43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x36,0x2c,0x39,0xa,0x37,0x2c,0x38,0xa,0x36,0x2c,0x37,0xa,0x36,0x2c,0x38,0xa,0x36,0x2c,0x37,0xa,0x36,0x2c,0x39,0xa,0x36,0x2c,0x38,0xa,0x36,0x2c,0x37,0xa,0x36,0x2c,0x39,0xa,0x36,0x2c,0x37,0xa,0x36,0x2c,0x39,0xa,0x36,0x2c,0x37,0xa,0x32,0x2c,0x39,0xa,0x36,0x2c,0x39,0xa,0x30,0x2c,0x33, Step #5: 6,9\0127,8\0126,7\0126,8\0126,7\0126,9\0126,8\0126,7\0126,9\0126,7\0126,9\0126,7\0122,9\0126,9\0120,3 Step #5: artifact_prefix='./'; Test unit written to ./oom-7f8e631aadc055b250a4d9a61adba9bd480f4050 Step #5: Base64: Niw5CjcsOAo2LDcKNiw4CjYsNwo2LDkKNiw4CjYsNwo2LDkKNiw3CjYsOQo2LDcKMiw5CjYsOQowLDM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3421 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1146359771 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56391b5f0d60, 0x56391b7d971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56391b7d9720,0x56391d6632c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7f8e631aadc055b250a4d9a61adba9bd480f4050' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4218 processed earlier; will process 6758 files now Step #5: #1 pulse cov: 3444 ft: 3445 exec/s: 0 rss: 174Mb Step #5: ==123232== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5639121332d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56391876e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56391875146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56391875138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563912139652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56391209a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563912094c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56391212b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56391515a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56391515a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56391515a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56391515a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56391515a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56391515a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56391515a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56391515a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56391515a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56391515a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56391735f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5639140bb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5639140c65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563913e71d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563913e71d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563913e72808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563913e71944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563913e71944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563913e71944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56391875394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56391875c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563918744529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56391876efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f82abc32082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56391209343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x2d,0x31,0x2d,0x30,0x31,0x39,0x3a,0x34,0x3a,0x33,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80, Step #5: 9-1-019:4:3\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-05e8c53373903d045e0d76d844727de695ca4c5c Step #5: Base64: OS0xLTAxOTo0OjPhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3422 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1147169734 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c543d21d60, 0x55c543f0a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c543f0a720,0x55c545d942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/05e8c53373903d045e0d76d844727de695ca4c5c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4220 processed earlier; will process 6756 files now Step #5: #1 pulse cov: 3740 ft: 3741 exec/s: 0 rss: 172Mb Step #5: ==123268== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c53a8642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c540e9f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c540e8246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c540e8238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c53a86a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c53a7cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c53a7c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c53a85c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c53d88b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c53d88b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c53d88b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c53d88b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c53d88b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c53d88b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c53d88b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c53d88b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c53d88b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c53d88b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c53fa9045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c53c7ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c53c7f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c53c5a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c53c5a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c53c5a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c53c5a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c53c5a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c53c5a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c540e8494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c540e8d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c540e75529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c540e9ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c6e6f5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c53a7c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x4,0x2f,0x31,0x0,0x4,0x44,0x27,0x41,0x50,0x49,0x43,0x0,0x0,0x0,0x13,0x60,0x0,0x9,0x69,0x6d,0x61,0x47,0x65,0x2f,0x67,0x69,0x66,0x0,0x5,0x4,0x2f,0x49,0x44,0x30,0x44,0x27,0x41,0x50,0x49,0x43,0x0,0x0,0x0,0x18,0x60,0x0,0x9,0x49,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x46, Step #5: ID3\004/1\000\004D'APIC\000\000\000\023`\000\011imaGe/gif\000\005\004/ID0D'APIC\000\000\000\030`\000\011Image/giF Step #5: artifact_prefix='./'; Test unit written to ./oom-ba33586ff92dcf53a243223e59ea50919467422d Step #5: Base64: SUQzBC8xAAREJ0FQSUMAAAATYAAJaW1hR2UvZ2lmAAUEL0lEMEQnQVBJQwAAABhgAAlJbWFnZS9naUY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3423 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1148090834 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5609954c4d60, 0x5609956ad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5609956ad720,0x5609975372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ba33586ff92dcf53a243223e59ea50919467422d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4222 processed earlier; will process 6754 files now Step #5: ==123304== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56098c0072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560992642728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56099262546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56099262538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56098c00d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56098bf6e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56098bf68c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56098bfff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56098f02e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56098f02e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56098f02e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56098f02e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56098f02e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56098f02e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56098f02e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56098f02e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56098f02e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56098f02e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56099123345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56098df8f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56098df9a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56098dd45d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56098dd45d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56098dd46808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56098dd45944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56098dd45944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56098dd45944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56099262794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5609926307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560992618529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560992642fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7e4d0dd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56098bf6743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xe3,0x8d,0xbf,0xc2,0xbc,0xe3,0x8d,0xbf,0xe3,0x8c,0x96,0xef,0xb7,0xbc,0xa,0xe3,0x8d,0xbf,0xc2,0xbc,0xe3,0x8d,0xbf,0xe3,0x8c,0x96,0xef,0xb7,0xbc,0xa,0xe3,0x8d,0xbf,0xc2,0xbc,0xe3,0x8d,0xbf,0xe3,0x8c,0x96,0xef,0xb7,0xbc,0xa,0xe3,0x8d,0xbf,0xc2,0xbc,0xe3,0x8d,0xbf,0xe3,0x8c,0x96,0xef,0xb7,0xbc, Step #5: \343\215\277\302\274\343\215\277\343\214\226\357\267\274\012\343\215\277\302\274\343\215\277\343\214\226\357\267\274\012\343\215\277\302\274\343\215\277\343\214\226\357\267\274\012\343\215\277\302\274\343\215\277\343\214\226\357\267\274 Step #5: artifact_prefix='./'; Test unit written to ./oom-55bbbe53e54449355a1beee8c7010b2e9419a3b4 Step #5: Base64: 442/wrzjjb/jjJbvt7wK442/wrzjjb/jjJbvt7wK442/wrzjjb/jjJbvt7wK442/wrzjjb/jjJbvt7w= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3424 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1148623127 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56106d961d60, 0x56106db4a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56106db4a720,0x56106f9d42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/55bbbe53e54449355a1beee8c7010b2e9419a3b4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4223 processed earlier; will process 6753 files now Step #5: ==123340== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5610644a42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56106aadf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56106aac246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56106aac238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5610644aa652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56106440b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561064405c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56106449c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5610674cb8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5610674cb8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5610674cb8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5610674cb8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5610674cb8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5610674cb8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5610674cb8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5610674cb8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5610674cb8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5610674cb8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5610696d045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56106642c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5610664375a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5610661e2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5610661e2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5610661e3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5610661e2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5610661e2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5610661e2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56106aac494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56106aacd7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56106aab5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56106aadffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3fe2269082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56106440443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x44,0x33,0x49,0x4d,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1b,0x61,0x30,0x64,0x61,0x20,0x0,0x0,0x0,0x33,0x4,0xe2,0x80,0xae,0x4,0xe2,0x80,0xae,0x61,0xe2,0x80,0xae,0xa6,0xcd,0x9e,0xef,0xfd,0xb9,0x32,0x22, Step #5: ID3IM3\004\342\200\256\004\342\200\256a\342\200\256\004\342\200\256\000\000\000\000\000\000\000\033a0da \000\000\0003\004\342\200\256\004\342\200\256a\342\200\256\246\315\236\357\375\2712\" Step #5: artifact_prefix='./'; Test unit written to ./oom-5827f268fafd4cd4afe1db495a267d03d76e01fe Step #5: Base64: SUQzSU0zBOKArgTigK5h4oCuBOKArgAAAAAAAAAbYTBkYSAAAAAzBOKArgTigK5h4oCups2e7/25MiI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3425 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1149151107 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560acae40d60, 0x560acb02971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560acb029720,0x560acceb32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5827f268fafd4cd4afe1db495a267d03d76e01fe' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4224 processed earlier; will process 6752 files now Step #5: ==123376== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560ac19832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560ac7fbe728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560ac7fa146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560ac7fa138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560ac1989652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560ac18ea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560ac18e4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560ac197b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560ac49aa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560ac49aa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560ac49aa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560ac49aa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560ac49aa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560ac49aa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560ac49aa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560ac49aa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560ac49aa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560ac49aa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560ac6baf45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560ac390b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560ac39165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560ac36c1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560ac36c1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560ac36c2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560ac36c1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560ac36c1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560ac36c1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560ac7fa394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560ac7fac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560ac7f94529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560ac7fbefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f61a5f1f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560ac18e343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x49,0x21,0x24,0x2d,0x2d,0x30,0x2d,0x2d,0xa,0x3a,0x4e,0x2f,0x21,0x24,0x47,0x2d,0x2d,0x42,0x45,0x47,0x49,0x49,0x49,0x44,0x32,0x2,0x55,0x20,0x2d,0x45,0xa,0xa,0x42,0x45,0x47,0x49,0x21,0x24,0x2d,0x2d,0x30,0x2d,0x2d,0xa,0x3a,0x4e,0x2f,0x21,0x24,0x3, Step #5: \012-----BEGI!$--0--\012:N/!$G--BEGIIID2\002U -E\012\012BEGI!$--0--\012:N/!$\003 Step #5: artifact_prefix='./'; Test unit written to ./oom-dcd3ef01028e156eec9ba979df8099a66343eaa5 Step #5: Base64: Ci0tLS0tQkVHSSEkLS0wLS0KOk4vISRHLS1CRUdJSUlEMgJVIC1FCgpCRUdJISQtLTAtLQo6Ti8hJAM= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3426 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1149681895 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ac80d15d60, 0x55ac80efe71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ac80efe720,0x55ac82d882c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/dcd3ef01028e156eec9ba979df8099a66343eaa5' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4225 processed earlier; will process 6751 files now Step #5: #1 pulse cov: 4219 ft: 4220 exec/s: 0 rss: 173Mb Step #5: #2 pulse cov: 4689 ft: 5032 exec/s: 0 rss: 174Mb Step #5: ==123412== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ac778582d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ac7de93728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ac7de7646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ac7de7638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ac7785e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ac777bf42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ac777b9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ac77850595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ac7a87f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ac7a87f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ac7a87f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ac7a87f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ac7a87f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ac7a87f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ac7a87f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ac7a87f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ac7a87f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ac7a87f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ac7ca8445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ac797e0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ac797eb5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ac79596d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ac79596d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ac79597808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ac79596944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ac79596944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ac79596944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ac7de7894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ac7de817b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ac7de69529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ac7de93fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fce11694082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ac777b843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x33,0x33,0x35,0x22,0xcc,0xaa,0xcc,0xaa,0xcf,0xa0,0x79,0x34,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcf,0xa0,0x79,0x37,0xc9,0x88,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcf,0xa0,0x79,0x37,0xc9,0x88,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcc,0xaa,0xcc,0x1,0x0,0x0,0x0,0x0,0x46, Step #5: HU335\"\314\252\314\252\317\240y4\314\252\314\252\314\252\314\252\317\240y7\311\210\314\252\314\252\314\252\314\252\314\252\317\240y7\311\210\314\252\314\252\314\252\314\252\314\001\000\000\000\000F Step #5: artifact_prefix='./'; Test unit written to ./oom-7be0d2413c4f560623d3da0a4f05ea7b58a2075c Step #5: Base64: SFUzMzUizKrMqs+geTTMqsyqzKrMqs+geTfJiMyqzKrMqsyqzKrPoHk3yYjMqsyqzKrMqswBAAAAAEY= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3427 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1150277395 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56341cd4fd60, 0x56341cf3871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56341cf38720,0x56341edc22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7be0d2413c4f560623d3da0a4f05ea7b58a2075c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4228 processed earlier; will process 6748 files now Step #5: ==123448== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5634138922d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563419ecd728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563419eb046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563419eb038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563413898652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5634137f942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5634137f3c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56341388a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5634168b98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5634168b98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5634168b98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5634168b98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5634168b98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5634168b98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5634168b98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5634168b98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5634168b98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5634168b98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x563418abe45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56341581a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5634158255a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5634155d0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5634155d0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5634155d1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5634155d0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5634155d0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5634155d0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563419eb294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563419ebb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563419ea3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563419ecdfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb47c032082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5634137f243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x38,0x42,0x50,0x53,0x0,0x1,0x0,0x2,0x0,0x0,0x0,0x0,0x0,0x2,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x27,0x0,0x8,0x0,0x1,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x1,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x80,0x7d,0xff,0xff,0x20,0x0,0x0,0x0,0xff,0xff,0xff,0xff, Step #5: 8BPS\000\001\000\002\000\000\000\000\000\002\000\000\000\001\000\000\000'\000\010\000\001\000\000\000\000\000\000\000\000\000\000\000\000\000\001\377\377\377\377\377\377\377\200}\377\377 \000\000\000\377\377\377\377 Step #5: artifact_prefix='./'; Test unit written to ./oom-54470346a2a32832783d8b9c50a3c249de54d0cf Step #5: Base64: OEJQUwABAAIAAAAAAAIAAAABAAAAJwAIAAEAAAAAAAAAAAAAAAAAAf////////+Aff//IAAAAP////8= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3428 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1150795884 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560175afcd60, 0x560175ce571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560175ce5720,0x560177b6f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/54470346a2a32832783d8b9c50a3c249de54d0cf' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4229 processed earlier; will process 6747 files now Step #5: #1 pulse cov: 11006 ft: 11007 exec/s: 0 rss: 191Mb Step #5: ==123484== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56016c63f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560172c7a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560172c5d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560172c5d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56016c645652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56016c5a642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56016c5a0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56016c637595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56016f6668c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56016f6668c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56016f6668c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56016f6668c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56016f6668c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56016f6668c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56016f6668c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56016f6668c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56016f6668c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56016f6668c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56017186b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56016e5c7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56016e5d25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56016e37dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56016e37dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56016e37e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56016e37d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56016e37d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56016e37d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560172c5f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560172c687b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560172c50529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560172c7afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd0ba064082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56016c59f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x39,0x2d,0x31,0x2d,0x30,0x31,0x39,0x3a,0x34,0x3a,0x1,0x0,0x0,0x63,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80,0xe1,0x9a,0x80, Step #5: 9-1-019:4:\001\000\000c\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200\341\232\200 Step #5: artifact_prefix='./'; Test unit written to ./oom-5d4c4c8918640cf1a1403aafacad030247b97ad0 Step #5: Base64: OS0xLTAxOTo0OgEAAGPhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoDhmoA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3429 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1151382165 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561705fa9d60, 0x56170619271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561706192720,0x56170801c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/5d4c4c8918640cf1a1403aafacad030247b97ad0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4231 processed earlier; will process 6745 files now Step #5: ==123520== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5616fcaec2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561703127728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56170310a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56170310a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5616fcaf2652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5616fca5342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5616fca4dc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5616fcae4595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5616ffb138c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5616ffb138c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5616ffb138c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5616ffb138c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5616ffb138c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5616ffb138c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5616ffb138c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5616ffb138c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5616ffb138c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5616ffb138c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561701d1845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5616fea74578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5616fea7f5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5616fe82ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5616fe82ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5616fe82b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5616fe82a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5616fe82a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5616fe82a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56170310c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5617031157b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5617030fd529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561703127fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f6bb14d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5616fca4c43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x65,0x78,0x74,0x3e,0x3c,0x63,0x65,0x78,0x74,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x78,0x3e,0x3c,0x63,0x65,0x78,0x74,0x3e,0x3a,0xbf, Step #5: :\277 Step #5: artifact_prefix='./'; Test unit written to ./oom-56c3fd480f48591bc0f7ecff19bbc1237ff9d2f0 Step #5: Base64: PGN4PjxjeD48Y3g+PGN4PjxjeD48Y3g+PGN4PjxjZXh0PjxjZXh0PjxjeD48Y3g+PGN4PjxjZXh0Pjq/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3430 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1151925684 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ec0cd20d60, 0x55ec0cf0971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ec0cf09720,0x55ec0ed932c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/56c3fd480f48591bc0f7ecff19bbc1237ff9d2f0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4232 processed earlier; will process 6744 files now Step #5: #1 pulse cov: 3906 ft: 3907 exec/s: 0 rss: 174Mb Step #5: ==123556== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ec038632d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ec09e9e728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ec09e8146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ec09e8138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ec03869652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ec037ca42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ec037c4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ec0385b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ec0688a8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ec0688a8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ec0688a8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ec0688a8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ec0688a8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ec0688a8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ec0688a8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ec0688a8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ec0688a8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ec0688a8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ec08a8f45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ec057eb578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ec057f65a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ec055a1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ec055a1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ec055a2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ec055a1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ec055a1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ec055a1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ec09e8394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ec09e8c7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ec09e74529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ec09e9efa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa1f0b75082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ec037c343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x60,0xa,0x9,0xa,0x60,0x2d,0x0,0x60,0x65,0x72,0x69,0x66,0x60,0x20,0x20,0x20,0x60,0xa,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0xf3,0xa0,0x80,0xa4,0x68,0x11,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x68,0x9, Step #5: ``\012\011\012`-\000`erif` `\012hhhhhhhhhhhhhhhhhhhhhhhh\363\240\200\244h\021hhhhhhhhhh\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-844513f66c883dd1e6958c70a5ef2c32150556b2 Step #5: Base64: YGAKCQpgLQBgZXJpZmAgICBgCmhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaPOggKRoEWhoaGhoaGhoaGgJ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3431 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1152633224 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56376a3a1d60, 0x56376a58a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56376a58a720,0x56376c4142c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/844513f66c883dd1e6958c70a5ef2c32150556b2' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4234 processed earlier; will process 6742 files now Step #5: ==123592== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563760ee42d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56376751f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56376750246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56376750238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563760eea652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x563760e4b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x563760e45c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563760edc595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563763f0b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563763f0b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563763f0b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563763f0b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563763f0b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563763f0b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563763f0b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563763f0b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563763f0b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563763f0b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56376611045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x563762e6c578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x563762e775a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563762c22d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563762c22d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563762c23808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563762c22944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563762c22944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563762c22944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56376750494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56376750d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5637674f5529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56376751ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8725cb7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x563760e4443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x80,0xdb,0x80,0x39,0x39,0x3b,0x39,0x3d,0x39,0x0,0x0,0x60,0x2d,0x2d,0x2d,0x2d,0x39,0x3d,0x39,0x0,0x0,0x60,0x2d,0x2d,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x0,0x0,0x9,0x4e,0x20,0x0,0x2d,0x0,0x25,0x0,0x2d,0x2d,0x2d,0x42,0x45,0x47,0x0,0x0,0x9,0x4e,0x20,0x0,0x2d,0x0,0x25,0x0,0x2d,0x2d,0x0, Step #5: \333\200\333\20099;9=9\000\000`----9=9\000\000`-----BEG\000\000\011N \000-\000%\000---BEG\000\000\011N \000-\000%\000--\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-f251fda9124e0585c4dde70d9f93898c472a80e4 Step #5: Base64: 24DbgDk5Ozk9OQAAYC0tLS05PTkAAGAtLS0tLUJFRwAACU4gAC0AJQAtLS1CRUcAAAlOIAAtACUALS0A Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3432 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1153296393 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b676ac4d60, 0x55b676cad71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b676cad720,0x55b678b372c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f251fda9124e0585c4dde70d9f93898c472a80e4' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4235 processed earlier; will process 6741 files now Step #5: #1 pulse cov: 3689 ft: 3690 exec/s: 0 rss: 175Mb Step #5: ==123628== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b66d6072d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b673c42728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b673c2546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b673c2538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b66d60d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b66d56e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b66d568c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b66d5ff595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b67062e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b67062e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b67062e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b67062e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b67062e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b67062e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b67062e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b67062e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b67062e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b67062e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b67283345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b66f58f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b66f59a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b66f345d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b66f345d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b66f346808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b66f345944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b66f345944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b66f345944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b673c2794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b673c307b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b673c18529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b673c42fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa5b5d59082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b66d56743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x21,0xd,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20, Step #5: !\015- - - - - - - - - - - - - - - - - - - - - - - - - - - - - Step #5: artifact_prefix='./'; Test unit written to ./oom-fc8c6a37ffeb2d9f8262b515c4010620a2c46640 Step #5: Base64: IQ0tIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0g Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3433 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1153928822 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556d3b39ed60, 0x556d3b58771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556d3b587720,0x556d3d4112c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/fc8c6a37ffeb2d9f8262b515c4010620a2c46640' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4237 processed earlier; will process 6739 files now Step #5: ==123664== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556d31ee12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556d3851c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556d384ff46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556d384ff38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556d31ee7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556d31e4842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556d31e42c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556d31ed9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556d34f088c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556d34f088c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556d34f088c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556d34f088c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556d34f088c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556d34f088c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556d34f088c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556d34f088c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556d34f088c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556d34f088c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556d3710d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556d33e69578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556d33e745a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556d33c1fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556d33c1fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556d33c20808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556d33c1f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556d33c1f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556d33c1f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556d3850194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556d3850a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556d384f2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556d3851cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9824970082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556d31e4143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0xa,0xd,0x9,0x21,0x2d,0xa,0xd,0x2d,0xa,0xd,0x9,0x21,0x2d,0xa,0x9,0x21,0x2d,0xa,0xd,0x9,0x2d,0xa,0xd,0x9,0x21,0x2d,0xa,0xd,0x9,0x21,0x2d,0xa,0x9,0x21,0x2d,0xa,0xd,0x9,0x2d,0xa,0xd,0x9,0x21,0x2d,0xa,0xd,0x9,0x21,0x2d,0xa,0x9,0x21,0x2d,0xd,0x9,0x2d,0xa,0xd,0x9, Step #5: -\012\015\011!-\012\015-\012\015\011!-\012\011!-\012\015\011-\012\015\011!-\012\015\011!-\012\011!-\012\015\011-\012\015\011!-\012\015\011!-\012\011!-\015\011-\012\015\011 Step #5: artifact_prefix='./'; Test unit written to ./oom-16ad68ebd3973ae63da9f48084ef223eb6b65fab Step #5: Base64: LQoNCSEtCg0tCg0JIS0KCSEtCg0JLQoNCSEtCg0JIS0KCSEtCg0JLQoNCSEtCg0JIS0KCSEtDQktCg0J Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3434 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1154462072 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564ad171cd60, 0x564ad190571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564ad1905720,0x564ad378f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/16ad68ebd3973ae63da9f48084ef223eb6b65fab' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4238 processed earlier; will process 6738 files now Step #5: ==123700== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x564ac825f2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x564ace89a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x564ace87d46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x564ace87d38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x564ac8265652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x564ac81c642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x564ac81c0c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x564ac8257595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x564acb2868c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x564acb2868c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x564acb2868c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x564acb2868c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x564acb2868c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x564acb2868c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x564acb2868c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x564acb2868c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x564acb2868c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x564acb2868c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x564acd48b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x564aca1e7578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x564aca1f25a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x564ac9f9dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x564ac9f9dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x564ac9f9e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x564ac9f9d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x564ac9f9d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x564ac9f9d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x564ace87f94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x564ace8887b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x564ace870529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x564ace89afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc8b364b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x564ac81bf43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x32,0x2d,0x3d,0x3c,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x27,0x2f,0x27,0x27,0x27,0x27,0x27,0x27,0x32,0x2d,0x3d,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x32,0x2d,0x3d,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x27,0x2e,0x27,0x24,0x27,0x2d, Step #5: $22-=<'''/''''/''''/''''''2-=''''''''''2-='''''''''''''.'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-4fb7d1f80a90638e3c301e9625e2a9dca64b298a Step #5: Base64: JDIyLT08JycnLycnJycvJycnJy8nJycnJycyLT0nJycnJycnJycnMi09JycnJycnJycnJycnJy4nJCct Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3435 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1155007222 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56335ef16d60, 0x56335f0ff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56335f0ff720,0x563360f892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4fb7d1f80a90638e3c301e9625e2a9dca64b298a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4239 processed earlier; will process 6737 files now Step #5: ==123736== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x563355a592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56335c094728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56335c07746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56335c07738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x563355a5f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5633559c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5633559bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x563355a51595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563358a808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563358a808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563358a808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563358a808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563358a808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563358a808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563358a808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563358a808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563358a808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563358a808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56335ac8545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5633579e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5633579ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x563357797d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x563357797d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x563357798808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x563357797944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x563357797944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x563357797944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56335c07994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56335c0827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56335c06a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56335c094fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f22ea234082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5633559b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0xa,0x34,0x20,0x30,0x20,0x6f,0x62,0x6a,0x5b,0x31,0x32,0x20,0x30,0x20,0x52,0x20,0x32,0x20,0x30,0x20,0x52,0x20,0x31,0x33,0x20,0x30,0x20,0x52,0x20,0x31,0x34,0x20,0x30,0x20,0x52,0x20,0x31,0x35,0x20,0x30,0x20,0x52,0x20,0x31,0x37,0x20,0x30,0x20,0x52,0x20,0x30,0x20,0x31,0x39,0x20,0x30,0x20,0x52,0x20, Step #5: %\0124 0 obj[12 0 R 2 0 R 13 0 R 14 0 R 15 0 R 17 0 R 0 19 0 R Step #5: artifact_prefix='./'; Test unit written to ./oom-713f4f4ac900fe3747c93c5315a0cacda86eeff0 Step #5: Base64: JQo0IDAgb2JqWzEyIDAgUiAyIDAgUiAxMyAwIFIgMTQgMCBSIDE1IDAgUiAxNyAwIFIgMCAxOSAwIFIg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3436 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1155541329 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e3cf4f4d60, 0x55e3cf6dd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e3cf6dd720,0x55e3d15672c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/713f4f4ac900fe3747c93c5315a0cacda86eeff0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4240 processed earlier; will process 6736 files now Step #5: #1 pulse cov: 3701 ft: 3702 exec/s: 0 rss: 172Mb Step #5: ==123772== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e3c60372d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e3cc672728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e3cc65546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e3cc65538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e3c603d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e3c5f9e42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e3c5f98c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e3c602f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e3c905e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e3c905e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e3c905e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e3c905e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e3c905e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e3c905e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e3c905e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e3c905e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e3c905e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e3c905e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e3cb26345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e3c7fbf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e3c7fca5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e3c7d75d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e3c7d75d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e3c7d76808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e3c7d75944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e3c7d75944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e3c7d75944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e3cc65794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e3cc6607b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e3cc648529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e3cc672fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f8939316082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e3c5f9743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xaa,0xa9,0xaa,0xf3,0xaa,0xaa,0xae,0xf3,0xaa,0xaa,0xaa,0xf3,0xa9,0xaa,0xaa,0xf3,0xaa,0xaa,0xae,0xf3,0xaa,0xaa,0xaa,0xf3,0xaa,0xaa,0xae,0xf2,0xaa,0xaa,0xaa,0xf3,0xaa,0xaa,0xba,0xf3,0xaa,0xaa,0xae,0xf3,0xaa,0xaa,0xae,0xf3,0xaa,0xa2,0xaa,0xf3,0xaa,0xa8,0xae,0xf3,0xaa,0xaa,0xaa,0xf3,0xaa,0xaa,0x88, Step #5: \363\252\251\252\363\252\252\256\363\252\252\252\363\251\252\252\363\252\252\256\363\252\252\252\363\252\252\256\362\252\252\252\363\252\252\272\363\252\252\256\363\252\252\256\363\252\242\252\363\252\250\256\363\252\252\252\363\252\252\210 Step #5: artifact_prefix='./'; Test unit written to ./oom-a109eaefff1507f9a134774045b232796060eb19 Step #5: Base64: 86qpqvOqqq7zqqqq86mqqvOqqq7zqqqq86qqrvKqqqrzqqq686qqrvOqqq7zqqKq86qorvOqqqrzqqqI Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3437 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1156123492 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5623e3dead60, 0x5623e3fd371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5623e3fd3720,0x5623e5e5d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/a109eaefff1507f9a134774045b232796060eb19' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4242 processed earlier; will process 6734 files now Step #5: #1 pulse cov: 3843 ft: 3844 exec/s: 0 rss: 172Mb Step #5: ==123808== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5623da92d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5623e0f68728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5623e0f4b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5623e0f4b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5623da933652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5623da89442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5623da88ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5623da925595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5623dd9548c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5623dd9548c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5623dd9548c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5623dd9548c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5623dd9548c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5623dd9548c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5623dd9548c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5623dd9548c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5623dd9548c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5623dd9548c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5623dfb5945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5623dc8b5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5623dc8c05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5623dc66bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5623dc66bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5623dc66c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5623dc66b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5623dc66b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5623dc66b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5623e0f4d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5623e0f567b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5623e0f3e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5623e0f68fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f23514d7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5623da88d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf3,0xa0,0x81,0x95,0x63,0xc2,0xb7,0xe2,0xa1,0xaa,0xd,0xf3,0xa0,0x81,0xa5,0x31,0x37,0x30,0x31,0xf3,0xa0,0x81,0x89,0x34,0x31,0x31,0x38,0x33,0x34,0x36,0x30,0x34,0x36,0x39,0x32,0x33,0x31,0x37,0x33,0x31,0x36,0x38,0xf9,0x33,0x30,0x33,0x37,0x31,0x35,0x38,0x38,0x34,0x31,0x30,0x35,0x37,0x33,0x33,0xcb,0x91,0x0, Step #5: \363\240\201\225c\302\267\342\241\252\015\363\240\201\2451701\363\240\201\2114118346046923173168\371303715884105733\313\221\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-3a4feab92d4c733fd770aa2520a5ef9b69260e35 Step #5: Base64: 86CBlWPCt+Khqg3zoIGlMTcwMfOggYk0MTE4MzQ2MDQ2OTIzMTczMTY4+TMwMzcxNTg4NDEwNTczM8uRAA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3438 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1156696079 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55ad96e21d60, 0x55ad9700a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55ad9700a720,0x55ad98e942c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3a4feab92d4c733fd770aa2520a5ef9b69260e35' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4244 processed earlier; will process 6732 files now Step #5: #1 pulse cov: 3923 ft: 3924 exec/s: 0 rss: 173Mb Step #5: ==123844== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55ad8d9642d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55ad93f9f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55ad93f8246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55ad93f8238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55ad8d96a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55ad8d8cb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55ad8d8c5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55ad8d95c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55ad9098b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55ad9098b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55ad9098b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55ad9098b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55ad9098b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55ad9098b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55ad9098b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55ad9098b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55ad9098b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55ad9098b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55ad92b9045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55ad8f8ec578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55ad8f8f75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55ad8f6a2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55ad8f6a2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55ad8f6a3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55ad8f6a2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55ad8f6a2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55ad8f6a2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55ad93f8494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55ad93f8d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55ad93f75529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55ad93f9ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fb60fae4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55ad8d8c443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x70,0x6f,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0xe2,0x81,0x9f,0x75,0x75,0x75,0x6f,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0xe3,0x81,0x9f,0x75,0x75,0x75,0x6f,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0x75,0xe2,0x81,0x9f,0x75,0x75,0x75,0xf3,0xa0,0x81,0xbf,0x75,0x75,0xe2,0x80,0x81,0x75,0x75,0x75,0x73,0x74,0x21, Step #5: pouuuuuuuu\342\201\237uuuouuuuuuuu\343\201\237uuuouuuuuuuu\342\201\237uuu\363\240\201\277uu\342\200\201uuust! Step #5: artifact_prefix='./'; Test unit written to ./oom-eff20cffcda9d57e0ee5ed8aafcf8efaab8a0a46 Step #5: Base64: cG91dXV1dXV1deKBn3V1dW91dXV1dXV1deOBn3V1dW91dXV1dXV1deKBn3V1dfOggb91deKAgXV1dXN0IQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3439 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1157276597 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5613356dfd60, 0x5613358c871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5613358c8720,0x5613377522c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/eff20cffcda9d57e0ee5ed8aafcf8efaab8a0a46' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4246 processed earlier; will process 6730 files now Step #5: ==123880== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56132c2222d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56133285d728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56133284046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56133284038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56132c228652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56132c18942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56132c183c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56132c21a595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56132f2498c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56132f2498c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56132f2498c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56132f2498c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56132f2498c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56132f2498c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56132f2498c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56132f2498c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56132f2498c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56132f2498c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56133144e45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56132e1aa578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56132e1b55a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56132df60d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56132df60d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56132df61808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56132df60944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56132df60944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56132df60944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56133284294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56133284b7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561332833529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56133285dfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f80f03f9082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56132c18243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0xcd,0x8f,0xcd,0x9f,0xcd,0x84,0xcd,0x84,0xcd,0x81,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x84,0xcd,0x81,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x9f,0xcd,0x84,0xcd,0x81,0xcd,0x9f,0xcd,0x8b,0xcd,0x9f,0xcd,0x84, Step #5: D\315\217\315\237\315\204\315\204\315\201\315\237\315\237\315\237\315\237\315\237\315\237\315\237\315\237\315\237\315\204\315\201\315\237\315\237\315\237\315\237\315\237\315\237\315\237\315\237\315\204\315\201\315\237\315\213\315\237\315\204 Step #5: artifact_prefix='./'; Test unit written to ./oom-176398e80507a92524fc6b81249e3cfe14aafc96 Step #5: Base64: RM2PzZ/NhM2EzYHNn82fzZ/Nn82fzZ/Nn82fzZ/NhM2BzZ/Nn82fzZ/Nn82fzZ/Nn82EzYHNn82LzZ/NhA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3440 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1157812393 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ae7d6fd60, 0x562ae7f5871a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ae7f58720,0x562ae9de22c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/176398e80507a92524fc6b81249e3cfe14aafc96' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4247 processed earlier; will process 6729 files now Step #5: #1 pulse cov: 3892 ft: 3893 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 4342 ft: 4718 exec/s: 0 rss: 176Mb Step #5: #4 pulse cov: 4721 ft: 5861 exec/s: 0 rss: 178Mb Step #5: ==123916== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ade8b22d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562ae4eed728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562ae4ed046d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562ae4ed038b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ade8b8652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ade81942b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ade813c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ade8aa595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562ae18d98c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562ae18d98c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562ae18d98c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562ae18d98c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562ae18d98c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562ae18d98c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562ae18d98c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562ae18d98c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562ae18d98c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562ae18d98c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562ae3ade45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ae083a578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ae08455a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ae05f0d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ae05f0d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ae05f1808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ae05f0944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ae05f0944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ae05f0944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562ae4ed294d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562ae4edb7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562ae4ec3529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562ae4eedfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3fef975082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ade81243d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x65,0x74,0x6e,0x61,0x3e,0x3c,0x65,0x74,0x61,0x6e,0x3e,0x3c,0x65,0x6e,0x74,0x72,0x79,0x3e,0x3c,0x65,0x6e,0x74,0x72,0x79,0x3e,0x3c,0x6e,0x70,0x72,0x72,0x6e,0x72,0x79,0x3e,0x3c,0x65,0x6e,0x74,0x72,0x79,0x3e,0x6e,0x72,0x79,0x3e,0x6a,0x3c,0x6f,0x72,0x79,0x3e,0x3c,0x65,0x6e,0x6a,0x72,0x79,0x72,0x79,0x3e, Step #5: nry>j Step #5: artifact_prefix='./'; Test unit written to ./oom-8ab700b63aadb2ec3b8e56f601de77e8f21177fa Step #5: Base64: PGV0bmE+PGV0YW4+PGVudHJ5PjxlbnRyeT48bnBycm5yeT48ZW50cnk+bnJ5Pmo8b3J5PjxlbmpyeXJ5Pg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3441 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1158491991 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559f7794ed60, 0x559f77b3771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559f77b37720,0x559f799c12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/8ab700b63aadb2ec3b8e56f601de77e8f21177fa' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4252 processed earlier; will process 6724 files now Step #5: ==123952== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559f6e4912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559f74acc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559f74aaf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559f74aaf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559f6e497652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559f6e3f842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559f6e3f2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559f6e489595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559f714b88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559f714b88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559f714b88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559f714b88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559f714b88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559f714b88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559f714b88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559f714b88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559f714b88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559f714b88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559f736bd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559f70419578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559f704245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559f701cfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559f701cfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559f701d0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559f701cf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559f701cf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559f701cf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559f74ab194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559f74aba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559f74aa2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559f74accfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7ff6f5461082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559f6e3f143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xf2,0xa0,0x8f,0x88,0xf4,0x83,0x80,0xa9,0xf4,0x89,0x80,0x93,0xf3,0xa0,0x87,0x87,0xf4,0x83,0x80,0xa9,0xf4,0x87,0x80,0xa9,0xf4,0x87,0xaa,0x93,0xf3,0xa0,0x88,0x99,0xf0,0xb5,0xa0,0x8e,0xf4,0x84,0x87,0x88,0xf3,0xa0,0x81,0xa1,0xf4,0x83,0x80,0x9f,0xf3,0xa1,0xa0,0x99,0xf0,0xb5,0x87,0x88,0xf4,0x87,0x88,0x83,0xf3, Step #5: \362\240\217\210\364\203\200\251\364\211\200\223\363\240\207\207\364\203\200\251\364\207\200\251\364\207\252\223\363\240\210\231\360\265\240\216\364\204\207\210\363\240\201\241\364\203\200\237\363\241\240\231\360\265\207\210\364\207\210\203\363 Step #5: artifact_prefix='./'; Test unit written to ./oom-64ffe5ee3a3b0fef98526c20e16e116b6aa7a410 Step #5: Base64: 8qCPiPSDgKn0iYCT86CHh/SDgKn0h4Cp9Ieqk/OgiJnwtaCO9ISHiPOggaH0g4Cf86GgmfC1h4j0h4iD8w== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3442 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1159028801 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559a84d48d60, 0x559a84f3171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559a84f31720,0x559a86dbb2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/64ffe5ee3a3b0fef98526c20e16e116b6aa7a410' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4253 processed earlier; will process 6723 files now Step #5: ==123988== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559a7b88b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559a81ec6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559a81ea946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559a81ea938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559a7b891652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559a7b7f242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559a7b7ecc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559a7b883595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559a7e8b28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559a7e8b28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559a7e8b28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559a7e8b28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559a7e8b28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559a7e8b28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559a7e8b28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559a7e8b28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559a7e8b28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559a7e8b28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559a80ab745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559a7d813578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559a7d81e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559a7d5c9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559a7d5c9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559a7d5ca808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559a7d5c9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559a7d5c9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559a7d5c9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559a81eab94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559a81eb47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559a81e9c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559a81ec6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f59d1829082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559a7b7eb43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xc2,0xa0,0xf3,0xbf,0xbf,0xb6,0xed,0x9f,0xbd,0x0,0xa,0xa,0x30,0x31,0x30,0x0,0x27,0x0,0x5c,0xf3,0xa0,0x85,0x9f,0x26,0x27,0x30,0x30,0x30,0x30,0x30,0x30,0x0,0x10,0x30,0x30,0x30,0x69,0x73,0x6f,0x32,0x30,0x32,0xf3,0xbf,0xbf,0xb2,0xed,0x9f,0xbd,0x0,0xa,0xa,0x30,0x30,0x30,0x30,0x20,0x3b,0x30,0x30,0x30, Step #5: \302\240\363\277\277\266\355\237\275\000\012\012010\000'\000\\\363\240\205\237&'000000\000\020000iso202\363\277\277\262\355\237\275\000\012\0120000 ;000 Step #5: artifact_prefix='./'; Test unit written to ./oom-966053683af11ef5684cdd26a38c078e965e909c Step #5: Base64: wqDzv7+27Z+9AAoKMDEwACcAXPOghZ8mJzAwMDAwMAAQMDAwaXNvMjAy87+/su2fvQAKCjAwMDAgOzAwMA== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3443 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1159556515 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557965dc8d60, 0x557965fb171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557965fb1720,0x557967e3b2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/966053683af11ef5684cdd26a38c078e965e909c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4254 processed earlier; will process 6722 files now Step #5: #1 pulse cov: 10965 ft: 10966 exec/s: 0 rss: 190Mb Step #5: ==124024== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55795c90b2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557962f46728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557962f2946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557962f2938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55795c911652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55795c87242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55795c86cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55795c903595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55795f9328c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55795f9328c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55795f9328c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55795f9328c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55795f9328c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55795f9328c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55795f9328c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55795f9328c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55795f9328c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55795f9328c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557961b3745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55795e893578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55795e89e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55795e649d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55795e649d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55795e64a808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55795e649944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55795e649944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55795e649944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557962f2b94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557962f347b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557962f1c529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557962f46fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fba5083e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55795c86b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0x95,0xd9,0x8b,0xd9,0x98,0x20,0xd9,0x90,0xd9,0x95,0xd9,0x8b,0xd9,0x98,0x20,0xd9,0x90,0xd9,0x95,0xdd,0x95,0xd9,0x8b,0xd9,0x98,0x20,0xd9,0x90,0xd9,0x95,0xd9,0x8b,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e,0x27,0x3c,0x2f, Step #5: \331\225\331\213\331\230 \331\220\331\225\331\213\331\230 \331\220\331\225\335\225\331\213\331\230 \331\220\331\225\331\213'' Step #5: Step #5: #0 0x556369d912d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5563703cc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5563703af46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5563703af38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556369d97652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556369cf842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556369cf2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556369d89595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55636cdb88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55636cdb88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55636cdb88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55636cdb88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55636cdb88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55636cdb88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55636cdb88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55636cdb88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55636cdb88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55636cdb88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55636efbd45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55636bd19578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55636bd245a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55636bacfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55636bacfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55636bad0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55636bacf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55636bacf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55636bacf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5563703b194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5563703ba7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5563703a2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5563703ccfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f09f8edc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556369cf143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x2a,0x0,0x2a,0x0,0x2a,0x2d,0x2a,0x0,0x2a,0x7e,0x2a,0x0,0x2a,0x2d,0x2a,0x0,0x2a,0x2d,0x2a,0x0,0x2a,0x2e,0x2a,0x0,0x2a,0x24,0x2a,0x0,0x2a,0x0,0x2a,0x24,0x2a,0x0,0x2a,0x0,0x2a,0x24,0x2a,0x0,0x2a,0x0,0x2a,0x24,0x2a,0x0,0x2a,0x0,0x2a,0x24,0x2a,0x0,0x2a,0x0,0x2a,0x24,0x2a,0x0,0x2a,0x2a, Step #5: -*\000*\000*-*\000*~*\000*-*\000*-*\000*.*\000*$*\000*\000*$*\000*\000*$*\000*\000*$*\000*\000*$*\000*\000*$*\000** Step #5: artifact_prefix='./'; Test unit written to ./oom-2b325e4eef6361ba7b480c5926d2d9dc12a754ca Step #5: Base64: LSoAKgAqLSoAKn4qACotKgAqLSoAKi4qACokKgAqACokKgAqACokKgAqACokKgAqACokKgAqACokKgAqKg== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3445 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1160706613 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561f6813ed60, 0x561f6832771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561f68327720,0x561f6a1b12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2b325e4eef6361ba7b480c5926d2d9dc12a754ca' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4257 processed earlier; will process 6719 files now Step #5: ==124096== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561f5ec812d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561f652bc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561f6529f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561f6529f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561f5ec87652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561f5ebe842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561f5ebe2c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561f5ec79595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561f61ca88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561f61ca88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561f61ca88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561f61ca88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561f61ca88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561f61ca88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561f61ca88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561f61ca88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561f61ca88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561f61ca88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561f63ead45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561f60c09578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561f60c145a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561f609bfd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561f609bfd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561f609c0808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561f609bf944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561f609bf944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561f609bf944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561f652a194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561f652aa7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561f65292529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561f652bcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7c25e82082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561f5ebe143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0x37,0xfe,0x39, Step #5: \333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042949677\3769 Step #5: artifact_prefix='./'; Test unit written to ./oom-b304df0248035ac27c3e2e395fb07ffc848a432f Step #5: Base64: 24HbgDQy24HbgDQy24HbgDQy24HbgDQy24HbgDQy24HbgDQy24HbgDQy24HbgDQy24HbgDQyOTQ5Njc3/jk= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3446 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1161233303 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x563867331d60, 0x56386751a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56386751a720,0x5638693a42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b304df0248035ac27c3e2e395fb07ffc848a432f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4258 processed earlier; will process 6718 files now Step #5: #1 pulse cov: 3504 ft: 3505 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 4236 ft: 4478 exec/s: 0 rss: 176Mb Step #5: ==124132== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56385de742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5638644af728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56386449246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56386449238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56385de7a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56385dddb42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56385ddd5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56385de6c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x563860e9b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x563860e9b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x563860e9b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x563860e9b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x563860e9b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x563860e9b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x563860e9b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x563860e9b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x563860e9b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x563860e9b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5638630a045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56385fdfc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56385fe075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56385fbb2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56385fbb2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56385fbb3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56385fbb2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56385fbb2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56385fbb2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56386449494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56386449d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563864485529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5638644affa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe49894f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56385ddd443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x0,0x0,0x30,0x76,0x33,0x60,0x3e,0x32,0x7f,0x7f,0x7f,0x7f,0x0,0x0,0x0,0x30,0x76,0x31,0x60,0x3e,0x32,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x7f,0x73,0x7d,0x7f,0x7f,0x7f,0x47,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x7d,0x7f,0x72,0x70,0x69,0x2f,0x7f,0x76,0x7f,0x7f,0xa0,0x81,0xad,0x3c,0x80,0xbb, Step #5: \000\000\0000v3`>2\177\177\177\177\000\000\0000v1`>2\177\177\177\177\177\177\177\177\177\177\177s}\177\177\177G\000\000\000\000\000\000\000}\177rpi/\177v\177\177\240\201\255<\200\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-e14d7b4771b939de35b8f07f01de3ed9394064b6 Step #5: Base64: AAAAMHYzYD4yf39/fwAAADB2MWA+Mn9/f39/f39/f39/c31/f39HAAAAAAAAAH1/cnBpL392f3+gga08gLs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3447 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1161955368 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55e8b798bd60, 0x55e8b7b7471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55e8b7b74720,0x55e8b99fe2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/e14d7b4771b939de35b8f07f01de3ed9394064b6' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4261 processed earlier; will process 6715 files now Step #5: #1 pulse cov: 3732 ft: 3733 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 3999 ft: 4423 exec/s: 0 rss: 175Mb Step #5: ==124168== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55e8ae4ce2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55e8b4b09728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55e8b4aec46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55e8b4aec38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55e8ae4d4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55e8ae43542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55e8ae42fc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55e8ae4c6595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55e8b14f58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55e8b14f58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55e8b14f58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55e8b14f58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55e8b14f58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55e8b14f58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55e8b14f58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55e8b14f58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55e8b14f58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55e8b14f58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55e8b36fa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55e8b0456578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55e8b04615a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55e8b020cd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55e8b020cd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55e8b020d808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55e8b020c944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55e8b020c944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55e8b020c944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55e8b4aee94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55e8b4af77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55e8b4adf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55e8b4b09fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f668a5e2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55e8ae42e43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x2d,0x2d,0x2d,0x30,0x2d,0x9,0x5,0x47,0x4b,0x60,0x20,0x21,0x21,0x0,0x73,0xa,0x20,0x20,0x2f,0x43,0x2d,0x2d,0x2d,0x2d,0x42,0x6f,0x6c,0x61,0x63,0x6b,0x45,0x47,0x49,0x40,0x1,0xc,0x20,0x2d,0x2d,0x7a,0x5b,0x2d,0x45,0x47,0x4b,0x60,0x20,0x2d,0x0,0x1f,0x18,0x18,0x21,0x0,0x0,0x2d,0x2d,0x42,0x45,0x47,0x49, Step #5: s---0-\011\005GK` !!\000s\012 /C----BolackEGI@\001\014 --z[-EGK` -\000\037\030\030!\000\000--BEGI Step #5: artifact_prefix='./'; Test unit written to ./oom-9f5022d8798ccc9d13ae4c531e905a49e40ff577 Step #5: Base64: cy0tLTAtCQVHS2AgISEAcwogIC9DLS0tLUJvbGFja0VHSUABDCAtLXpbLUVHS2AgLQAfGBghAAAtLUJFR0k= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3448 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1162697320 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5591a3009d60, 0x5591a31f271a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5591a31f2720,0x5591a507c2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/9f5022d8798ccc9d13ae4c531e905a49e40ff577' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4264 processed earlier; will process 6712 files now Step #5: ==124204== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559199b4c2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5591a0187728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5591a016a46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5591a016a38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559199b52652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559199ab342b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559199aadc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559199b44595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55919cb738c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55919cb738c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55919cb738c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55919cb738c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55919cb738c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55919cb738c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55919cb738c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55919cb738c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55919cb738c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55919cb738c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55919ed7845a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55919bad4578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55919badf5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55919b88ad3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55919b88ad3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55919b88b808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55919b88a944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55919b88a944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55919b88a944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5591a016c94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5591a01757b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5591a015d529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5591a0187fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbe94f7f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559199aac43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x25,0x50,0x44,0x46,0x2d,0x73,0x74,0x61,0x72,0x74,0x78,0x72,0x65,0x66,0x31,0x6a,0xa,0xa,0x32,0x20,0x30,0x20,0x6f,0x62,0x6a,0x20,0x3c,0x3c,0xa,0x20,0x31,0x2e,0xa,0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0xa,0x3c,0x3c,0x2e,0xa,0x2f,0x52,0x6f,0x6f,0x74,0x20,0x31,0x20,0x30,0x20,0x52,0x2f,0x4b,0x69,0x64,0x73,0x20, Step #5: %PDF-startxref1j\012\0122 0 obj <<\012 1.\012trailer\012<<.\012/Root 1 0 R/Kids Step #5: artifact_prefix='./'; Test unit written to ./oom-296abaca5e4d75891169e72e88f233a5dd6007b8 Step #5: Base64: JVBERi1zdGFydHhyZWYxagoKMiAwIG9iaiA8PAogMS4KdHJhaWxlcgo8PC4KL1Jvb3QgMSAwIFIvS2lkcyA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3449 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1163226033 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a52b055d60, 0x55a52b23e71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a52b23e720,0x55a52d0c82c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/296abaca5e4d75891169e72e88f233a5dd6007b8' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4265 processed earlier; will process 6711 files now Step #5: #1 pulse cov: 3807 ft: 3808 exec/s: 0 rss: 174Mb Step #5: ==124240== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a521b982d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a5281d3728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a5281b646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a5281b638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a521b9e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a521aff42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a521af9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a521b90595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a524bbf8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a524bbf8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a524bbf8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a524bbf8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a524bbf8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a524bbf8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a524bbf8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a524bbf8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a524bbf8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a524bbf8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a526dc445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a523b20578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a523b2b5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a5238d6d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a5238d6d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a5238d7808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a5238d6944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a5238d6944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a5238d6944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a5281b894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a5281c17b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a5281a9529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a5281d3fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa66a62d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a521af843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x50,0x2f,0x2f,0x2f,0x2f,0x9,0x64,0x50,0x50,0x50,0x50,0x50,0x0,0xc,0xc,0xc,0x15,0xc,0x14,0x43,0x46,0x46,0xb,0x0,0x20,0x13,0x60,0x1f,0x0,0x0,0x0,0x74,0x4e,0xf1,0xca,0x0,0x21,0x78,0x63,0x61,0x6c,0x63,0x5c,0x78,0x30,0x61,0x25,0x6e,0x26,0x23,0x38,0x35,0x38,0x39,0x39,0x33,0x34,0x35,0x39,0x34,0x3b, Step #5: `P////\011dPPPPP\000\014\014\014\025\014\024CFF\013\000 \023`\037\000\000\000tN\361\312\000!xcalc\\x0a%n� Step #5: artifact_prefix='./'; Test unit written to ./oom-369bdeda5cc1e5e612272352198426f0c527cc9c Step #5: Base64: YFAvLy8vCWRQUFBQUAAMDAwVDBRDRkYLACATYB8AAAB0TvHKACF4Y2FsY1x4MGElbiYjODU4OTkzNDU5NDs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3450 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1163919104 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561d58a5bd60, 0x561d58c4471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x561d58c44720,0x561d5aace2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/369bdeda5cc1e5e612272352198426f0c527cc9c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4267 processed earlier; will process 6709 files now Step #5: #1 pulse cov: 3758 ft: 3759 exec/s: 0 rss: 174Mb Step #5: #2 pulse cov: 4156 ft: 4467 exec/s: 0 rss: 175Mb Step #5: ==124276== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561d4f59e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x561d55bd9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x561d55bbc46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x561d55bbc38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561d4f5a4652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561d4f50542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561d4f4ffc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561d4f596595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x561d525c58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x561d525c58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x561d525c58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x561d525c58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x561d525c58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x561d525c58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x561d525c58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x561d525c58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x561d525c58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x561d525c58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x561d547ca45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561d51526578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561d515315a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x561d512dcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x561d512dcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x561d512dd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x561d512dc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x561d512dc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x561d512dc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x561d55bbe94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x561d55bc77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x561d55baf529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x561d55bd9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fd697f96082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561d4f4fe43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x49,0x6e,0x74,0x65,0x72,0x70,0x6c,0x61,0x79,0x20,0x4d,0x56,0x45,0x20,0x46,0x69,0x6c,0x65,0x1a,0x0,0x1a,0x0,0x0,0x10,0x0,0x0,0x0,0x2,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0, Step #5: Interplay MVE File\032\000\032\000\000\020\000\000\000\002\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000 Step #5: artifact_prefix='./'; Test unit written to ./oom-b9c919c88c1697bb0249447010b969f283f746ef Step #5: Base64: SW50ZXJwbGF5IE1WRSBGaWxlGgAaAAAQAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3451 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1164520441 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5594d2eadd60, 0x5594d309671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5594d3096720,0x5594d4f202c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/b9c919c88c1697bb0249447010b969f283f746ef' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4270 processed earlier; will process 6706 files now Step #5: ==124312== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5594c99f02d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5594d002b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5594d000e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5594d000e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5594c99f6652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5594c995742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5594c9951c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5594c99e8595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5594cca178c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5594cca178c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5594cca178c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5594cca178c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5594cca178c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5594cca178c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5594cca178c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5594cca178c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5594cca178c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5594cca178c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5594cec1c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5594cb978578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5594cb9835a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5594cb72ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5594cb72ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5594cb72f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5594cb72e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5594cb72e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5594cb72e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5594d001094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5594d00197b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5594d0001529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5594d002bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe354e4e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5594c995043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x73,0x76,0x67,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0xb0,0xd9,0x90,0xd9,0x98,0x20,0xda,0x90,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x3c,0x74,0x65,0x78,0x74,0x3e,0xd9,0xb0,0xd9,0x90,0xd9,0x98,0x20,0xda,0x90,0x27,0x3c,0x2f,0x74,0x65,0x78,0x74,0x3e,0x4d,0x2f,0x73,0x76,0x3e,0x3c,0x2f,0x73,0x76,0x67,0x3e, Step #5: \331\260\331\220\331\230 \332\220'\331\260\331\220\331\230 \332\220'M/sv> Step #5: artifact_prefix='./'; Test unit written to ./oom-4cfb3ebc441277ccd1bfd286761137fabc41f356 Step #5: Base64: PHN2Zz48dGV4dD7ZsNmQ2Zgg2pAnPC90ZXh0Pjx0ZXh0Ptmw2ZDZmCDakCc8L3RleHQ+TS9zdj48L3N2Zz4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3452 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1165042481 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b9ba956d60, 0x55b9bab3f71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b9bab3f720,0x55b9bc9c92c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4cfb3ebc441277ccd1bfd286761137fabc41f356' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4271 processed earlier; will process 6705 files now Step #5: ==124348== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b9b14992d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b9b7ad4728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b9b7ab746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b9b7ab738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b9b149f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b9b140042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b9b13fac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b9b1491595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b9b44c08c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b9b44c08c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b9b44c08c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b9b44c08c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b9b44c08c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b9b44c08c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b9b44c08c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b9b44c08c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b9b44c08c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b9b44c08c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b9b66c545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b9b3421578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b9b342c5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b9b31d7d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b9b31d7d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b9b31d8808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b9b31d7944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b9b31d7944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b9b31d7944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b9b7ab994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b9b7ac27b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b9b7aaa529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b9b7ad4fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f922c2b0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b9b13f943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x63,0x24,0x7e,0x5e,0xa,0xa,0x7e,0x24,0x6e,0x0,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x43,0x4d,0x43,0x43,0x43,0x43,0x43,0x56,0x21,0xa,0xa,0x56,0x56,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0x7e, Step #5: c$~^\012\012~$n\000CCCCCCCCCCCCCCCCCCCCCCCMCCCCCV!\012\012VV----------------~ Step #5: artifact_prefix='./'; Test unit written to ./oom-98ae942032e8ea8a61979eaa894f707acc078e58 Step #5: Base64: YyR+XgoKfiRuAENDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDTUNDQ0NDViEKClZWLS0tLS0tLS0tLS0tLS0tLX4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3453 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1165566477 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5560d8d16d60, 0x5560d8eff71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5560d8eff720,0x5560dad892c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/98ae942032e8ea8a61979eaa894f707acc078e58' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4272 processed earlier; will process 6704 files now Step #5: ==124384== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5560cf8592d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5560d5e94728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5560d5e7746d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5560d5e7738b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5560cf85f652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5560cf7c042b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5560cf7bac65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5560cf851595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5560d28808c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5560d28808c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5560d28808c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5560d28808c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5560d28808c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5560d28808c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5560d28808c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5560d28808c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5560d28808c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5560d28808c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5560d4a8545a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5560d17e1578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5560d17ec5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5560d1597d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5560d1597d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5560d1598808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5560d1597944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5560d1597944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5560d1597944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5560d5e7994d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5560d5e827b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5560d5e6a529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5560d5e94fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcde2ec4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5560cf7b943d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x2d,0x9,0x28,0x69,0x2d,0x2d,0x42,0x0,0x0,0x0,0x0,0x1,0x0,0x0,0x0,0x0,0x24,0xa,0x3a,0xa,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x2d,0xa,0x3d,0xa,0x3d,0xa,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xa,0x24,0x9d,0x72, Step #5: s-\011(i--B\000\000\000\000\001\000\000\000\000$\012:\012\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000-\012=\012=\012\000\000\000\000\000\000\000\012$\235r Step #5: artifact_prefix='./'; Test unit written to ./oom-523e6471c9386c81b6c41097e52f4351cb4d2a9f Step #5: Base64: cy0JKGktLUIAAAAAAQAAAAAkCjoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALQo9Cj0KAAAAAAAAAAoknXI= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3454 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1166091894 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x56383597ed60, 0x563835b6771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x563835b67720,0x5638379f12c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/523e6471c9386c81b6c41097e52f4351cb4d2a9f' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4273 processed earlier; will process 6703 files now Step #5: #1 pulse cov: 3737 ft: 3738 exec/s: 0 rss: 172Mb Step #5: ==124420== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56382c4c12d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x563832afc728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x563832adf46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x563832adf38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56382c4c7652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56382c42842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56382c422c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56382c4b9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56382f4e88c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56382f4e88c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56382f4e88c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56382f4e88c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56382f4e88c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56382f4e88c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56382f4e88c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56382f4e88c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56382f4e88c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56382f4e88c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5638316ed45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56382e449578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56382e4545a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56382e1ffd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56382e1ffd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56382e200808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56382e1ff944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56382e1ff944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56382e1ff944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x563832ae194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x563832aea7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x563832ad2529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x563832afcfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f77ac6aa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56382c42143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x48,0x8,0x1a,0x0,0x0,0x0,0x5b,0x7,0x66, Step #5: HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH\010\032\000\000\000[\007f Step #5: artifact_prefix='./'; Test unit written to ./oom-2bf99119cc566ec49f47c7ca097c27bd61d0e282 Step #5: Base64: SEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhICBoAAABbB2Y= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3455 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1166663054 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562ea3b3bd60, 0x562ea3d2471a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562ea3d24720,0x562ea5bae2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2bf99119cc566ec49f47c7ca097c27bd61d0e282' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4275 processed earlier; will process 6701 files now Step #5: ==124456== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562e9a67e2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562ea0cb9728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562ea0c9c46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562ea0c9c38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562e9a684652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562e9a5e542b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562e9a5dfc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562e9a676595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562e9d6a58c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562e9d6a58c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562e9d6a58c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562e9d6a58c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562e9d6a58c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562e9d6a58c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562e9d6a58c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562e9d6a58c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562e9d6a58c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562e9d6a58c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562e9f8aa45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562e9c606578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562e9c6115a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562e9c3bcd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562e9c3bcd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562e9c3bd808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562e9c3bc944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562e9c3bc944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562e9c3bc944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562ea0c9e94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562ea0ca77b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562ea0c8f529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562ea0cb9fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3a6fef5082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562e9a5de43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x48,0x55,0x3b,0x22,0x42,0x42,0x42,0x42,0xdb,0x8d,0xdb,0xaa,0xdb,0x8d,0xdb,0xaa,0x72,0x32,0x34,0x31,0xdb,0x8d,0x31,0xdb,0x8d,0xdb,0xaa,0xd7,0x8d,0xdb,0xaa,0x4d,0x72,0x30,0xdb,0x8d,0xdb,0xaa,0xdf,0x8d,0xdb,0xaa,0x72,0x30,0xdb,0x8d,0x31,0xdb,0x92,0xdb,0xaa,0xdb,0x8d,0xdb,0x2b,0x2b,0xaa,0x72,0x2b,0x2b,0x2c,0x2b, Step #5: HU;\"BBBB\333\215\333\252\333\215\333\252r241\333\2151\333\215\333\252\327\215\333\252Mr0\333\215\333\252\337\215\333\252r0\333\2151\333\222\333\252\333\215\333++\252r++,+ Step #5: artifact_prefix='./'; Test unit written to ./oom-400f889deb45a622677f6fb4324aeb7f83959ea9 Step #5: Base64: SFU7IkJCQkLbjduq243bqnIyNDHbjTHbjduq143bqk1yMNuN26rfjduqcjDbjTHbktuq243bKyuqcisrLCs= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3456 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1167188690 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5612e389cd60, 0x5612e3a8571a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5612e3a85720,0x5612e590f2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/400f889deb45a622677f6fb4324aeb7f83959ea9' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4276 processed earlier; will process 6700 files now Step #5: ==124492== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5612da3df2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5612e0a1a728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5612e09fd46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5612e09fd38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5612da3e5652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5612da34642b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5612da340c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5612da3d7595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5612dd4068c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5612dd4068c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5612dd4068c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5612dd4068c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5612dd4068c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5612dd4068c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5612dd4068c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5612dd4068c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5612dd4068c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5612dd4068c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5612df60b45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5612dc367578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5612dc3725a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5612dc11dd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5612dc11dd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5612dc11e808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5612dc11d944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5612dc11d944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5612dc11d944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5612e09ff94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5612e0a087b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5612e09f0529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5612e0a1afa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f45b3b4b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5612da33f43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0x7b,0x22,0x34,0x34,0x22,0x3a,0x20,0x34,0x2c,0x22,0x6d,0x46,0x6d,0x30,0x22,0x3a,0x2d,0x38,0x2c,0x22,0x74,0x34,0x3a,0xd6,0x89,0x22,0x3a,0x20,0x34,0x2c,0x22,0x6c,0x3d,0x6d,0x30,0x22,0x3a,0x2d,0x38,0x2c,0x22,0xd6,0x89,0x22,0x3a,0x20,0x38,0x2c,0x22,0xd6,0x89,0x6d,0x32,0x22,0x3a,0x34,0x35,0x38,0x7d,0xa, Step #5: \012\012{\"44\": 4,\"mFm0\":-8,\"t4:\326\211\": 4,\"l=m0\":-8,\"\326\211\": 8,\"\326\211m2\":458}\012 Step #5: artifact_prefix='./'; Test unit written to ./oom-2650cba16875e36255a5102fba2edf57bc326e02 Step #5: Base64: Cgp7IjQ0IjogNCwibUZtMCI6LTgsInQ0OtaJIjogNCwibD1tMCI6LTgsItaJIjogOCwi1oltMiI6NDU4fQo= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3457 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1167725765 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x561461023d60, 0x56146120c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x56146120c720,0x5614630962c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/2650cba16875e36255a5102fba2edf57bc326e02' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4277 processed earlier; will process 6699 files now Step #5: ==124528== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x561457b662d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x56145e1a1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x56145e18446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x56145e18438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x561457b6c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x561457acd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x561457ac7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x561457b5e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56145ab8d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56145ab8d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56145ab8d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56145ab8d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56145ab8d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56145ab8d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56145ab8d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56145ab8d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56145ab8d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56145ab8d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x56145cd9245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x561459aee578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x561459af95a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5614598a4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5614598a4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5614598a5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5614598a4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5614598a4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5614598a4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x56145e18694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x56145e18f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x56145e177529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x56145e1a1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fdb2c744082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x561457ac643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x32,0x32,0x12,0x3d,0x27,0x66,0x27,0x27,0x27,0x27,0x34,0xe2,0x81,0xa5,0x2d,0x3d,0x27,0x34,0x27,0x27,0x27,0x27,0x27,0xdf,0xbd,0x35,0x3c,0x27,0x27,0x37,0x2f,0x30,0x27,0x67,0x27,0x27,0x66,0x27,0x27,0x27,0x27,0x34,0xe2,0x81,0xa5,0x2d,0x3d,0x27,0x34,0x27,0x27,0x27,0x27,0x27,0xdf,0xbd,0x35,0x27,0x24,0x27,0x2d, Step #5: $22\022='f''''4\342\201\245-='4'''''\337\2755<''7/0'g''f''''4\342\201\245-='4'''''\337\2755'$'- Step #5: artifact_prefix='./'; Test unit written to ./oom-3b1a7bf3bdc7d500e2c02d7ebba8f73d2863a6f1 Step #5: Base64: JDIyEj0nZicnJyc04oGlLT0nNCcnJycn3701PCcnNy8wJ2cnJ2YnJycnNOKBpS09JzQnJycnJ9+9NSckJy0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3458 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1168268803 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x559a893fad60, 0x559a895e371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x559a895e3720,0x559a8b46d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/3b1a7bf3bdc7d500e2c02d7ebba8f73d2863a6f1' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4278 processed earlier; will process 6698 files now Step #5: ==124564== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x559a7ff3d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x559a86578728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x559a8655b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x559a8655b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x559a7ff43652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x559a7fea442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x559a7fe9ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x559a7ff35595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x559a82f648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x559a82f648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x559a82f648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x559a82f648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x559a82f648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x559a82f648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x559a82f648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x559a82f648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x559a82f648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x559a82f648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x559a8516945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x559a81ec5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x559a81ed05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x559a81c7bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x559a81c7bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x559a81c7c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x559a81c7b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x559a81c7b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x559a81c7b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x559a8655d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x559a865667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x559a8654e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x559a86578fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa0e5e64082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x559a7fe9d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x73,0x65,0x6c,0x45,0x43,0x74,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0x30,0x2e,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0x30,0x2e,0x2d,0xc,0x6c,0x45,0x21,0x74,0x2d,0xc,0x2d,0x43,0x74,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0x30,0x2e,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0xc,0x2d,0x38,0x2e,0x2d,0x39,0x2e, Step #5: selECt-\014-\014-\014-0.-\014-\014-\014-\014-0.-\014lE!t-\014-Ct-\014-\014-\014-\014-0.-\014-\014-\014-\014-8.-9. Step #5: artifact_prefix='./'; Test unit written to ./oom-d76a510fae25f0b79dedb04c8a0777cf84ded08a Step #5: Base64: c2VsRUN0LQwtDC0MLTAuLQwtDC0MLQwtMC4tDGxFIXQtDC1DdC0MLQwtDC0MLTAuLQwtDC0MLQwtOC4tOS4= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3459 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1168808972 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55dc67dbed60, 0x55dc67fa771a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55dc67fa7720,0x55dc69e312c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/d76a510fae25f0b79dedb04c8a0777cf84ded08a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4279 processed earlier; will process 6697 files now Step #5: #1 pulse cov: 3875 ft: 3876 exec/s: 0 rss: 172Mb Step #5: ==124600== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55dc5e9012d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55dc64f3c728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55dc64f1f46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55dc64f1f38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55dc5e907652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55dc5e86842b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55dc5e862c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55dc5e8f9595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55dc619288c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55dc619288c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55dc619288c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55dc619288c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55dc619288c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55dc619288c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55dc619288c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55dc619288c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55dc619288c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55dc619288c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55dc63b2d45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55dc60889578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55dc608945a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55dc6063fd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55dc6063fd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55dc60640808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55dc6063f944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55dc6063f944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55dc6063f944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55dc64f2194d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55dc64f2a7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55dc64f12529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55dc64f3cfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fbd486fe082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55dc5e86143d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x33,0x3a,0x3a,0x7b,0x24,0x37,0x3a,0x5b,0x22,0xc3,0xbf,0xef,0xb7,0xbf,0xef,0xbf,0xbf,0xef,0xbf,0xbf,0xef,0xbf,0xbf,0x26,0xbf,0xef,0xbf,0xbf,0x26,0xff,0xff,0xff,0xff,0x23,0x2c,0x4b,0x22,0x5d,0x7d,0x59,0x27,0xc3,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff,0x69,0x73,0xbf,0x35,0x70,0x27,0x3a,0x3a,0x44,0x3a, Step #5: $3::{$7:[\"\303\277\357\267\277\357\277\277\357\277\277\357\277\277&\277\357\277\277&\377\377\377\377#,K\"]}Y'\303\377\377\377\377\377\377\377\377\377\377is\2775p'::D: Step #5: artifact_prefix='./'; Test unit written to ./oom-0f2abd98283c98552e6cf6ef6a5c190ada7f716c Step #5: Base64: JDM6OnskNzpbIsO/77e/77+/77+/77+/Jr/vv78m/////yMsSyJdfVknw/////////////9pc781cCc6OkQ6 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3460 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1169380482 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x556f78d05d60, 0x556f78eee71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x556f78eee720,0x556f7ad782c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/0f2abd98283c98552e6cf6ef6a5c190ada7f716c' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4281 processed earlier; will process 6695 files now Step #5: #1 pulse cov: 3640 ft: 3641 exec/s: 0 rss: 172Mb Step #5: #2 pulse cov: 4065 ft: 4408 exec/s: 0 rss: 173Mb Step #5: ==124636== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x556f6f8482d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x556f75e83728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x556f75e6646d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x556f75e6638b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x556f6f84e652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x556f6f7af42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x556f6f7a9c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x556f6f840595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x556f7286f8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x556f7286f8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x556f7286f8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x556f7286f8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x556f7286f8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x556f7286f8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x556f7286f8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x556f7286f8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x556f7286f8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x556f7286f8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x556f74a7445a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x556f717d0578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x556f717db5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x556f71586d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x556f71586d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x556f71587808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x556f71586944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x556f71586944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x556f71586944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x556f75e6894d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x556f75e717b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x556f75e59529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x556f75e83fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f66f2515082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x556f6f7a843d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x23,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x31,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0xdb,0x81,0xdb,0x80,0x34,0x32,0x39,0x34,0x39,0x36,0x37,0x37,0xfe,0x39, Step #5: \333\201\333\20042\333\201\333\20042\333\201\333\20042\333\201\333\20042\333#\201\333\20042\333\201\333\20041\333\201\333\20042\333\201\333\20042\333\201\333\20042949677\3769 Step #5: artifact_prefix='./'; Test unit written to ./oom-af818184f1953a4536cc8954bb274b066ab12827 Step #5: Base64: 24HbgDQy24HbgDQy24HbgDQy24HbgDQy2yOB24A0MtuB24A0MduB24A0MtuB24A0MtuB24A0Mjk0OTY3N/45 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3461 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1169976958 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5652fe904d60, 0x5652feaed71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5652feaed720,0x5653009772c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/af818184f1953a4536cc8954bb274b066ab12827' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4284 processed earlier; will process 6692 files now Step #5: ==124672== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5652f54472d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5652fba82728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5652fba6546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5652fba6538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5652f544d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5652f53ae42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5652f53a8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5652f543f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5652f846e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5652f846e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5652f846e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5652f846e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5652f846e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5652f846e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5652f846e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5652f846e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5652f846e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5652f846e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5652fa67345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5652f73cf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5652f73da5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5652f7185d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5652f7185d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5652f7186808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5652f7185944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5652f7185944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5652f7185944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5652fba6794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5652fba707b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5652fba58529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5652fba82fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f882fa21082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5652f53a743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x24,0x0,0x0,0x2f,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0xf,0x31,0x11,0xf,0x31,0x11,0x2d,0x0,0x0,0x0,0x2f,0x0,0xf,0x31,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x2d,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x37,0x11,0xf,0x31,0x11,0x2d,0x3a,0x2d,0x3a,0x24,0x5b, Step #5: $\000\000/\000\000\000/\000\0171\0171\021\0171\021-\000\000\000/\000\017177777777-7777777777777777777\021\0171\021-:-:$[ Step #5: artifact_prefix='./'; Test unit written to ./oom-259f315c6d987873d79a7ce994d02cfbb67b63bb Step #5: Base64: JAAALwAAAC8ADzEPMREPMREtAAAALwAPMTc3Nzc3Nzc3LTc3Nzc3Nzc3Nzc3Nzc3Nzc3NzcRDzERLTotOiRb Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3462 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1170511439 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560b0a640d60, 0x560b0a82971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560b0a829720,0x560b0c6b32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/259f315c6d987873d79a7ce994d02cfbb67b63bb' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4285 processed earlier; will process 6691 files now Step #5: ==124708== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560b011832d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560b077be728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560b077a146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560b077a138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560b01189652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560b010ea42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560b010e4c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560b0117b595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560b041aa8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560b041aa8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560b041aa8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560b041aa8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560b041aa8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560b041aa8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560b041aa8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560b041aa8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560b041aa8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560b041aa8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560b063af45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560b0310b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560b031165a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560b02ec1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560b02ec1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560b02ec2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560b02ec1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560b02ec1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560b02ec1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560b077a394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560b077ac7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560b07794529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560b077befa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efd4caae082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560b010e343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60,0xa,0x60,0x60,0x60, Step #5: ```\012```\012```\012```\012```\012```\012```\012```\012```\012```\012```\012```\012```\012```\012```\012``` Step #5: artifact_prefix='./'; Test unit written to ./oom-f2be40a8383c6104d1628da698bfe29ecbbe4a54 Step #5: Base64: YGBgCmBgYApgYGAKYGBgCmBgYApgYGAKYGBgCmBgYApgYGAKYGBgCmBgYApgYGAKYGBgCmBgYApgYGAKYGBg Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3463 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1171166812 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x560e703ddd60, 0x560e705c671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x560e705c6720,0x560e724502c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/f2be40a8383c6104d1628da698bfe29ecbbe4a54' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4286 processed earlier; will process 6690 files now Step #5: ==124744== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x560e66f202d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x560e6d55b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x560e6d53e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x560e6d53e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x560e66f26652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x560e66e8742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x560e66e81c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x560e66f18595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x560e69f478c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x560e69f478c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x560e69f478c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x560e69f478c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x560e69f478c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x560e69f478c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x560e69f478c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x560e69f478c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x560e69f478c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x560e69f478c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x560e6c14c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x560e68ea8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x560e68eb35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x560e68c5ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x560e68c5ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x560e68c5f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x560e68c5e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x560e68c5e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x560e68c5e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x560e6d54094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x560e6d5497b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x560e6d531529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x560e6d55bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f9aea8dc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x560e66e8043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x42,0x2d,0x2d,0x2d,0x78,0x2d,0x45,0x47,0x8,0x0,0x31,0xf,0x73,0x74,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x2d,0x20,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x24,0x24,0xa,0x2d,0x20,0x2b,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0x2d,0xa,0x2d,0x20,0x47,0x49,0x4e,0x20,0x2d,0x2d,0x2d,0x2d,0x24,0x24,0xa,0x2d,0x20, Step #5: -B---x-EG\010\0001\017st------\012- GIN ----$$\012- +IN ------\012- GIN ----$$\012- Step #5: artifact_prefix='./'; Test unit written to ./oom-028702f8c71e28565f62d7dabae79ce87cf5c87d Step #5: Base64: LUItLS14LUVHCAAxD3N0LS0tLS0tCi0gR0lOIC0tLS0kJAotICtJTiAtLS0tLS0KLSBHSU4gLS0tLSQkCi0g Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3464 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1171718689 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55cab611dd60, 0x55cab630671a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55cab6306720,0x55cab81902c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/028702f8c71e28565f62d7dabae79ce87cf5c87d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4287 processed earlier; will process 6689 files now Step #5: ==124780== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55caacc602d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55cab329b728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55cab327e46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55cab327e38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55caacc66652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55caacbc742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55caacbc1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55caacc58595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55caafc878c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55caafc878c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55caafc878c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55caafc878c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55caafc878c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55caafc878c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55caafc878c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55caafc878c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55caafc878c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55caafc878c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55cab1e8c45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55caaebe8578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55caaebf35a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55caae99ed3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55caae99ed3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55caae99f808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55caae99e944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55caae99e944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55caae99e944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55cab328094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55cab32897b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55cab3271529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55cab329bfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fc40e71a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55caacbc043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0x21,0x45,0x4e,0x54,0x49,0x54,0x59,0xa,0x25,0xa,0x3a,0xa,0x27,0x27,0x3e,0x3c,0x21,0x45,0x4e,0x54,0x49,0x54,0x59,0xa,0x61,0xa,0x27,0x9,0x25,0x3a,0x3b,0x24,0x25,0x3a,0x3b,0x24,0x25,0x3a,0x3b,0x3a,0x25,0x3a,0x3b,0x24,0x25,0x3a,0x3b,0x3a,0x25,0x3a,0x3b,0x9,0x25,0x3a,0x3b,0x24,0x25,0x3a,0x3b,0x54,0x27,0x3e, Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-ce8dd0044f219b36b8c6a510763eb7488d643559 Step #5: Base64: PCFFTlRJVFkKJQo6CicnPjwhRU5USVRZCmEKJwklOjskJTo7JCU6OzolOjskJTo7OiU6OwklOjskJTo7VCc+ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3465 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1172252144 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557329dfad60, 0x557329fe371a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557329fe3720,0x55732be6d2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ce8dd0044f219b36b8c6a510763eb7488d643559' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4288 processed earlier; will process 6688 files now Step #5: ==124816== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55732093d2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557326f78728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557326f5b46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557326f5b38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557320943652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5573208a442b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55732089ec65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557320935595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5573239648c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5573239648c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5573239648c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5573239648c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5573239648c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5573239648c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5573239648c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5573239648c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5573239648c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5573239648c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557325b6945a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5573228c5578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5573228d05a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55732267bd3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55732267bd3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55732267c808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55732267b944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55732267b944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55732267b944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557326f5d94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557326f667b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557326f4e529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557326f78fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f03e912a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55732089d43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x3c,0xc4,0xa7,0x3e,0x6e,0x63,0x3c,0x21,0x5b,0x43,0x44,0x41,0x54,0x41,0x5b,0x78,0x6d,0x6c,0x6e,0x73,0x3a,0x78,0x68,0x74,0x6d,0x6c,0x3d,0x22,0x68,0x74,0x74,0x70,0x3a,0x2f,0x2f,0x77,0x77,0x77,0x2e,0x77,0x33,0x2e,0x6f,0x72,0x67,0x2f,0x31,0x39,0x39,0x39,0x2f,0x78,0x68,0x74,0x6d,0x6c,0x22,0x2d,0x39,0x4f,0x3c,0x21,0x3c, Step #5: <\304\247>nc Step #5: Step #5: #0 0x55bb9d9902d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55bba3fcb728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55bba3fae46d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55bba3fae38b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55bb9d996652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55bb9d8f742b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55bb9d8f1c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55bb9d988595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55bba09b78c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55bba09b78c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55bba09b78c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55bba09b78c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55bba09b78c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55bba09b78c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55bba09b78c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55bba09b78c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55bba09b78c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55bba09b78c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55bba2bbc45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55bb9f918578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55bb9f9235a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55bb9f6ced3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55bb9f6ced3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55bb9f6cf808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55bb9f6ce944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55bb9f6ce944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55bb9f6ce944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55bba3fb094d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55bba3fb97b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55bba3fa1529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55bba3fcbfa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fcfc4ab7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55bb9d8f043d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x0,0x30,0x2d,0x31,0x0,0x30,0x7e,0x67,0x6f,0x3b,0x3b,0x48,0x0,0x6e,0x6f,0x73,0x6e,0x6f,0x62,0x6c,0xd6,0xbb,0x41,0x53,0x0,0x30,0x7e,0x29,0x67,0x6f,0x67,0x6c,0x65,0x2d,0x1,0x0,0x0,0x20,0x75,0x6c,0x30,0xd6,0xbb,0x1,0x0,0x0,0x30,0x74,0x72,0x65,0x7e,0x67,0x6f,0x6f,0x66,0x20,0x2f,0x75,0x4c,0x6c,0x33,0xd6,0xbb, Step #5: \0000-1\0000~go;;H\000nosnobl\326\273AS\0000~)gogle-\001\000\000 ul0\326\273\001\000\0000tre~goof /uLl3\326\273 Step #5: artifact_prefix='./'; Test unit written to ./oom-cc0cea0f1f837985767e2365bb0ec0cefeb3831d Step #5: Base64: ADAtMQAwfmdvOztIAG5vc25vYmzWu0FTADB+KWdvZ2xlLQEAACB1bDDWuwEAADB0cmV+Z29vZiAvdUxsM9a7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3467 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1173303920 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55c656bf1d60, 0x55c656dda71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55c656dda720,0x55c658c642c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/cc0cea0f1f837985767e2365bb0ec0cefeb3831d' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4290 processed earlier; will process 6686 files now Step #5: ==124888== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55c64d7342d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55c653d6f728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55c653d5246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55c653d5238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55c64d73a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55c64d69b42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55c64d695c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55c64d72c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55c65075b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55c65075b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55c65075b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55c65075b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55c65075b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55c65075b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55c65075b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55c65075b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55c65075b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55c65075b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55c65296045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55c64f6bc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55c64f6c75a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55c64f472d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55c64f472d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55c64f473808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55c64f472944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55c64f472944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55c64f472944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55c653d5494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55c653d5d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55c653d45529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55c653d6ffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f7eb75f2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55c64d69443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xd1,0xa1,0xf,0x30,0x5e,0xf,0x0,0x5e,0x25,0x54,0x79,0x5e,0x5e,0x99,0xdf,0xe8,0xed,0xb3,0xfb,0xb7,0x0,0xcc,0xcc,0xcc,0xcc,0xcc,0xcc,0x3,0x0,0xc,0x2,0x2,0x3,0x40,0x0,0x0,0x7,0x31,0x3d,0xff,0x1,0x2e,0x85,0x3d,0x3b,0xb,0x70,0x8,0x13,0x5,0x2d,0x31,0x5e,0xb,0x5e,0x8,0x5,0xd2,0x8c,0xb3,0xeb,0x33,0xb7, Step #5: \321\241\0170^\017\000^%Ty^^\231\337\350\355\263\373\267\000\314\314\314\314\314\314\003\000\014\002\002\003@\000\000\0071=\377\001.\205=;\013p\010\023\005-1^\013^\010\005\322\214\263\3533\267 Step #5: artifact_prefix='./'; Test unit written to ./oom-ccd525992ba4b682734ad221f240c4a30d256893 Step #5: Base64: 0aEPMF4PAF4lVHleXpnf6O2z+7cAzMzMzMzMAwAMAgIDQAAABzE9/wEuhT07C3AIEwUtMV4LXggF0oyz6zO3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3468 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1173838367 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55b7b9714d60, 0x55b7b98fd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55b7b98fd720,0x55b7bb7872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/ccd525992ba4b682734ad221f240c4a30d256893' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4291 processed earlier; will process 6685 files now Step #5: ==124924== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55b7b02572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55b7b6892728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55b7b687546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55b7b687538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55b7b025d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55b7b01be42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55b7b01b8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55b7b024f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55b7b327e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55b7b327e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55b7b327e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55b7b327e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55b7b327e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55b7b327e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55b7b327e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55b7b327e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55b7b327e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55b7b327e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55b7b548345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55b7b21df578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55b7b21ea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55b7b1f95d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55b7b1f95d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55b7b1f96808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55b7b1f95944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55b7b1f95944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55b7b1f95944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55b7b687794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55b7b68807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55b7b6868529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55b7b6892fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f3014c5b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55b7b01b743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x2d,0x20,0x3f, Step #5: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ? Step #5: artifact_prefix='./'; Test unit written to ./oom-4f10e5e56f91d2ee3378d0d194fc4cb13ea20fa0 Step #5: Base64: LSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSAtIC0gLSA/ Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3469 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1174614390 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x5574b2268d60, 0x5574b245171a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x5574b2451720,0x5574b42db2c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/4f10e5e56f91d2ee3378d0d194fc4cb13ea20fa0' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4292 processed earlier; will process 6684 files now Step #5: ==124960== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x5574a8dab2d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5574af3e6728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5574af3c946d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5574af3c938b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x5574a8db1652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x5574a8d1242b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x5574a8d0cc65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x5574a8da3595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x5574abdd28c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x5574abdd28c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x5574abdd28c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x5574abdd28c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x5574abdd28c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x5574abdd28c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x5574abdd28c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x5574abdd28c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x5574abdd28c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x5574abdd28c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5574adfd745a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5574aad33578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5574aad3e5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x5574aaae9d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x5574aaae9d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x5574aaaea808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x5574aaae9944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x5574aaae9944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x5574aaae9944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5574af3cb94d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5574af3d47b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5574af3bc529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5574af3e6fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f180e3e3082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x5574a8d0b43d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x2d,0x73,0x6f,0x75,0x72,0x65,0x61,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0x5c,0xa,0x64,0xa,0x0,0xa,0x64,0xa,0x64,0xa,0x64,0xa,0x74,0xa,0x64,0xa,0x64,0xa,0x64,0xa,0x0,0xa,0x74,0xa,0x64,0xa,0x64,0xa,0x64,0xa,0x0,0xa,0x64,0xa,0x64,0xa,0x0,0xa,0x6d,0xa,0x64,0xa,0x64,0x2d, Step #5: -sourea\\\\\\\\\\\\\\\\\\\\\\\\\\\012d\012\000\012d\012d\012d\012t\012d\012d\012d\012\000\012t\012d\012d\012d\012\000\012d\012d\012\000\012m\012d\012d- Step #5: artifact_prefix='./'; Test unit written to ./oom-128ae6753a6a7ecbb1a20c7fe10e7adfe8363019 Step #5: Base64: LXNvdXJlYVxcXFxcXFxcXFxcXFwKZAoACmQKZApkCnQKZApkCmQKAAp0CmQKZApkCgAKZApkCgAKbQpkCmQt Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3470 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1175609181 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562f00d54d60, 0x562f00f3d71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562f00f3d720,0x562f02dc72c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/128ae6753a6a7ecbb1a20c7fe10e7adfe8363019' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4293 processed earlier; will process 6683 files now Step #5: ==124996== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562ef78972d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562efded2728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562efdeb546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562efdeb538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562ef789d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562ef77fe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562ef77f8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562ef788f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562efa8be8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562efa8be8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562efa8be8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562efa8be8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562efa8be8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562efa8be8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562efa8be8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562efa8be8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562efa8be8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562efa8be8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562efcac345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562ef981f578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562ef982a5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562ef95d5d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562ef95d5d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562ef95d6808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562ef95d5944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562ef95d5944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562ef95d5944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562efdeb794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562efdec07b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562efdea8529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562efded2fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f5a0b2fc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562ef77f743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x44,0x0,0x6e,0x0,0x43,0x43,0x0,0x0,0x0,0x0,0x0,0x0,0xe0,0xb9,0x84,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0x0,0xe2,0x81,0xa8,0x0,0x0,0x0,0x0,0x0,0xf3,0xa0,0x81,0x8f,0x0,0x0,0x0,0x0,0x0,0x61,0x7a,0x0,0x43, Step #5: D\000n\000CC\000\000\000\000\000\000\340\271\204\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\342\201\250\000\000\000\000\000\363\240\201\217\000\000\000\000\000az\000C Step #5: artifact_prefix='./'; Test unit written to ./oom-7e23e7dd2ee4322015ab91e3de413b5db2ea5a8a Step #5: Base64: RABuAENDAAAAAAAA4LmEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4oGoAAAAAADzoIGPAAAAAABhegBD Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3471 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1176589033 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x55a232e31d60, 0x55a23301a71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x55a23301a720,0x55a234ea42c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/7e23e7dd2ee4322015ab91e3de413b5db2ea5a8a' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4294 processed earlier; will process 6682 files now Step #5: ==125032== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x55a2299742d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x55a22ffaf728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55a22ff9246d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55a22ff9238b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55a22997a652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55a2298db42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55a2298d5c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55a22996c595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55a22c99b8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55a22c99b8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55a22c99b8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55a22c99b8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55a22c99b8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55a22c99b8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55a22c99b8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55a22c99b8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55a22c99b8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55a22c99b8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x55a22eba045a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x55a22b8fc578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x55a22b9075a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x55a22b6b2d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x55a22b6b2d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x55a22b6b3808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x55a22b6b2944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x55a22b6b2944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x55a22b6b2944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55a22ff9494d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55a22ff9d7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x55a22ff85529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x55a22ffaffa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7efe53ebc082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55a2298d443d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0x3c,0x3c,0xa,0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0x3c,0x3c,0x2f,0x20,0x2f,0x20,0xa,0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0x3c,0x3c,0x2f,0x20,0x2f,0x20,0x2f,0x20,0x2f,0x20,0xa,0x2f,0x20,0x3a,0xa,0x74,0x72,0x61,0x69,0x6c,0x65,0x72,0x3c,0x3c,0x2f,0x20,0x2f,0x20,0x3c,0x3c,0x2f,0x20, Step #5: trailer<<\012trailer< Step #5: Step #5: #0 0x55790f2762d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5579158b1728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x55791589446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x55791589438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x55790f27c652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x55790f1dd42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x55790f1d7c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x55790f26e595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x55791229d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x55791229d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x55791229d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x55791229d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x55791229d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x55791229d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x55791229d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x55791229d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x55791229d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x55791229d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5579144a245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x5579111fe578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x5579112095a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557910fb4d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557910fb4d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557910fb5808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557910fb4944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557910fb4944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557910fb4944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x55791589694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x55791589f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557915887529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5579158b1fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fa5583aa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x55790f1d643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7c,0x4f,0x3a,0x31,0x32,0x3a,0x22,0x44,0x61,0x54,0x65,0x49,0x6e,0x74,0x65,0x72,0x76,0x61,0x6c,0x22,0x3a,0x31,0x3a,0x7b,0x73,0x3a,0x31,0x31,0x3a,0x22,0x64,0x61,0x74,0x65,0x5f,0x73,0x74,0x72,0x69,0x6e,0x67,0x22,0x3b,0x53,0x3a,0x31,0x32,0x3a,0x22,0x21,0x33,0x35,0x34,0x31,0x30,0x38,0x30,0x37,0x54,0x32,0x27,0x22,0x3b, Step #5: |O:12:\"DaTeInterval\":1:{s:11:\"date_string\";S:12:\"!35410807T2'\"; Step #5: artifact_prefix='./'; Test unit written to ./oom-40c98da9c8594d4bccdf3bbfa8c972283b172976 Step #5: Base64: fE86MTI6IkRhVGVJbnRlcnZhbCI6MTp7czoxMToiZGF0ZV9zdHJpbmciO1M6MTI6IiEzNTQxMDgwN1QyJyI7 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3473 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1178525977 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x557e175a3d60, 0x557e1778c71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x557e1778c720,0x557e196162c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/40c98da9c8594d4bccdf3bbfa8c972283b172976' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4296 processed earlier; will process 6680 files now Step #5: #1 pulse cov: 3486 ft: 3487 exec/s: 0 rss: 174Mb Step #5: ==125104== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x557e0e0e62d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x557e14721728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x557e1470446d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x557e1470438b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x557e0e0ec652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x557e0e04d42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x557e0e047c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x557e0e0de595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x557e1110d8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x557e1110d8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x557e1110d8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x557e1110d8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x557e1110d8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x557e1110d8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x557e1110d8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x557e1110d8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x557e1110d8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x557e1110d8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x557e1331245a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x557e1006e578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x557e100795a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x557e0fe24d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x557e0fe24d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x557e0fe25808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x557e0fe24944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x557e0fe24944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x557e0fe24944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x557e1470694d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x557e1470f7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x557e146f7529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x557e14721fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7feb0154b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x557e0e04643d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x31,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0xaf,0xcd,0x8f,0xcd,0x8f,0xcc,0x9f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8f,0xcd,0x8d,0xcd,0x8f,0xcd,0x8f, Step #5: 1\315\217\315\217\315\217\315\217\315\217\315\217\315\257\315\217\315\217\314\237\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\217\315\215\315\217\315\217 Step #5: artifact_prefix='./'; Test unit written to ./oom-c603942c23efd1d7cf149e15a6b8c229130aed35 Step #5: Base64: Mc2PzY/Nj82PzY/Nj82vzY/Nj8yfzY/Nj82PzY/Nj82PzY/Nj82PzY/Nj82PzY/Nj82PzY/Nj82PzY3Nj82P Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3474 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1179628888 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x562d0f414d60, 0x562d0f5fd71a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x562d0f5fd720,0x562d114872c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/c603942c23efd1d7cf149e15a6b8c229130aed35' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4298 processed earlier; will process 6678 files now Step #5: ==125140== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x562d05f572d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x562d0c592728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x562d0c57546d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x562d0c57538b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x562d05f5d652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x562d05ebe42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x562d05eb8c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x562d05f4f595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x562d08f7e8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x562d08f7e8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x562d08f7e8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x562d08f7e8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x562d08f7e8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x562d08f7e8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x562d08f7e8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x562d08f7e8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x562d08f7e8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x562d08f7e8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x562d0b18345a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x562d07edf578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x562d07eea5a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x562d07c95d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x562d07c95d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x562d07c96808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x562d07c95944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x562d07c95944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x562d07c95944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x562d0c57794d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x562d0c5807b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x562d0c568529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x562d0c592fa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7f12fb9f8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x562d05eb743d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x47,0xff,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0xff,0x46,0x55,0x5a,0x5a,0x2d,0x54,0x41,0x47,0x5a, Step #5: FUZZ-TAGTAGFUZZ-TAGFUZZ-TAGFUZZ-TAGFUZZ-TAGG\377FUZZ-TAG\377FUZZ-TAGZ Step #5: artifact_prefix='./'; Test unit written to ./oom-bfbe526df9bfb5203a365a473f4164e12ccf3258 Step #5: Base64: RlVaWi1UQUdUQUdGVVpaLVRBR0ZVWlotVEFHRlVaWi1UQUdGVVpaLVRBR0f/RlVaWi1UQUf/RlVaWi1UQUda Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3475 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1180654527 Step #5: INFO: Loaded 1 modules (2001338 inline 8-bit counters): 2001338 [0x564754570d60, 0x56475475971a), Step #5: INFO: Loaded 1 PC tables (2001338 PCs): 2001338 [0x564754759720,0x5647565e32c0), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge55.txt' Step #5: MERGE-INNER: '/corpus/paged/bfbe526df9bfb5203a365a473f4164e12ccf3258' caused a failure at the previous merge step Step #5: MERGE-INNER: 10976 total files; 4299 processed earlier; will process 6677 files now Step #5: ==125176== ERROR: libFuzzer: out-of-memory (malloc(41568028160)) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: #0 0x56474b0b32d1 in __sanitizer_print_stack_trace (out/libfuzzer-coverage-x86_64/paged+0x390d2d1) Step #5: #1 0x5647516ee728 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5 Step #5: #2 0x5647516d146d in fuzzer::Fuzzer::HandleMalloc(unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:131:3 Step #5: #3 0x5647516d138b in fuzzer::MallocHook(void const volatile*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:100:6 Step #5: #4 0x56474b0b9652 in __sanitizer::RunMallocHooks(void*, unsigned long) (out/libfuzzer-coverage-x86_64/paged+0x3913652) Step #5: #5 0x56474b01a42b in __asan::Allocator::AllocateImpl(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*, __asan::AllocType, bool, bool) (out/libfuzzer-coverage-x86_64/paged+0x387442b) Step #5: #6 0x56474b014c65 in __asan::asan_calloc(unsigned long, unsigned long, __sanitizer::BufferedStackTrace*) (out/libfuzzer-coverage-x86_64/paged+0x386ec65) Step #5: #7 0x56474b0ab595 in calloc (out/libfuzzer-coverage-x86_64/paged+0x3905595) Step #5: #8 0x56474e0da8c0 in alloc::alloc::alloc_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:296:9 Step #5: #9 0x56474e0da8c0 in ::alloc_impl_runtime /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:308:43 Step #5: #10 0x56474e0da8c0 in ::alloc_impl /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:430:9 Step #5: #11 0x56474e0da8c0 in ::allocate_zeroed /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/alloc.rs:554:14 Step #5: #12 0x56474e0da8c0 in ::try_allocate_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:473:40 Step #5: #13 0x56474e0da8c0 in ::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:595:15 Step #5: #14 0x56474e0da8c0 in >::with_capacity_zeroed_in /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/raw_vec/mod.rs:223:20 Step #5: #15 0x56474e0da8c0 in ::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/spec_from_elem.rs:52:31 Step #5: #16 0x56474e0da8c0 in alloc::vec::from_elem:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/alloc/src/vec/mod.rs:3820:5 Step #5: #17 0x56474e0da8c0 in ::new /rust/registry/src/index.crates.io-1949cf8c6b5b557f/tiny-skia-0.12.0/src/pixmap.rs:51:19 Step #5: #18 0x5647502df45a in typst_render::render /src/typst/crates/typst-render/src/lib.rs:36:22 Step #5: #19 0x56474d03b578 in paged::_::__libfuzzer_sys_run /src/typst/tests/fuzz/src/bin/paged.rs:17:34 Step #5: #20 0x56474d0465a4 in rust_fuzzer_test_input /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:359:60 Step #5: #21 0x56474cdf1d3c in libfuzzer_sys::test_input_wrap::{closure#0} /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:62:9 Step #5: #22 0x56474cdf1d3c in std::panicking::catch_unwind::do_call:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:573:43 Step #5: #23 0x56474cdf2808 in __rust_try libfuzzer_sys.c020b5be98252bdd-cgu.0 Step #5: #24 0x56474cdf1944 in std::panicking::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panicking.rs:541:19 Step #5: #25 0x56474cdf1944 in std::panic::catch_unwind:: /rustc/0ed41eb4142dda2df61eb1145a312c1a9d62eb56/library/std/src/panic.rs:359:14 Step #5: #26 0x56474cdf1944 in LLVMFuzzerTestOneInput /rust/registry/src/index.crates.io-1949cf8c6b5b557f/libfuzzer-sys-0.4.9/src/lib.rs:60:22 Step #5: #27 0x5647516d394d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #28 0x5647516dc7b8 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #29 0x5647516c4529 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #30 0x5647516eefa2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #31 0x7fe87e891082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: #32 0x56474b01343d in _start (out/libfuzzer-coverage-x86_64/paged+0x386d43d) Step #5: Step #5: DEDUP_TOKEN: __sanitizer_print_stack_trace--fuzzer::PrintStackTrace()--fuzzer::Fuzzer::HandleMalloc(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0x3c,0x74,0x62,0x6f,0x64,0x79,0x3e,0xa,0x6e,0x62,0x65,0x66,0x6f,0x70,0x79,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0xa,0x3c,0x61,0x75,0x64,0x69,0x6f,0x3e,0xa,0x4f,0x43,0x54,0x59,0x50,0x3c,0x0,0x0,0x0,0x40,0x3c, Step #5: \012\012\012\012\012\012\012\012\012\012\012\012nbefopy\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012\012